last executing test programs:

2m38.317298153s ago: executing program 32 (id=29):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x1, 0x29b, &(0x7f0000000340)="$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")
syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)

2m32.975517559s ago: executing program 33 (id=407):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200)=0x11e, 0x4)

2m3.247246296s ago: executing program 34 (id=1033):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x6a9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0)

1m41.509728445s ago: executing program 35 (id=1541):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, 0x0, 0x0)

1m31.968044969s ago: executing program 36 (id=1721):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

1m19.819865392s ago: executing program 37 (id=1891):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)

1m19.4062089s ago: executing program 38 (id=1902):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0xffffffffffffffff, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x890)

1m18.566776447s ago: executing program 39 (id=1921):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0xff, @empty, 0x4}}, 0xabb8, 0x1067, 0xa53, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c)

1m17.898704473s ago: executing program 40 (id=1927):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7, @a={0x7, 0x5, 0x0, 0x9, {0xf, 0xc, "a0a58f5a3e9639799fc56c50", 0x4, 0xd5}, 0x2}}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000080)={[{@sysvgroups}, {@bsdgroups}, {@auto_da_alloc}, {@max_dir_size_kb}, {@discard}, {@usrjquota}, {@grpquota}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x1, 0x66e, &(0x7f0000000f00)="$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")

1m5.311485825s ago: executing program 41 (id=2038):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0026}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)

1m0.686251173s ago: executing program 42 (id=2110):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

46.734189828s ago: executing program 43 (id=2088):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})

35.072064517s ago: executing program 7 (id=2366):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xed4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}], 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44004, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x800, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000b00))

35.018165721s ago: executing program 7 (id=2368):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2})
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000534863c49f0a03310180c200000e88a8000081000002"], 0x3e)

34.834632284s ago: executing program 7 (id=2373):
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0, &(0x7f0000000000))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
rt_sigqueueinfo(0xffffffffffffffff, 0xd, 0x0)

34.458631569s ago: executing program 8 (id=2384):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x5, 0x2, 0x0, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

34.382533915s ago: executing program 7 (id=2385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1005848, 0x0)

34.368933575s ago: executing program 7 (id=2387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

34.181853938s ago: executing program 7 (id=2392):
getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

34.181757288s ago: executing program 44 (id=2392):
getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$eJzs3c9rHFUcAPDv7Cb9GZuotdraarSKwR9Jk/6wBw8qCoIKgh7qMSZprd020kRoS9AoUs8F7+JR8OjJmxdRD+IfoOBRCkWD0FQUIrM7k2R/Jdsm6TbJ5wPbfW/2zcx7M+9l37y3Mw1g0+pN/0kiuiLi14jorkSrE/RW3mZnpkZuzEyNJDE39+afSTnd9ZmpkTxpvt7OLNJXiCh8msTzSf1+Jy5eOjNcKo2dz+IDk2ffH5i4eOmZ02eHT42dGjs3dPz4kcODzx4bOlq1XoNN1dneYFlaruv7Phzfv/eVt6+8PnLiyjs/fp1ua8+ByudZOba0sPmIG3W5eDViui5Zb3rU/porq/3s8ZZ2tH7ctSicdLQxI9yUYkSkp6uz3P67oxgLJ687Xv6krZkD1lT63bS1+cfTc8AGlkS7cwC0R/5Fn17/5q/47zZ1Pu4A115YuOifnZkamZ0fz+iIQra8cw333xsRJ6b/+SJ9Rc14CgDAWij3bZ6u6f+VFWJP+b0y17Erm0PpiYi7I+KeiLg3InZHxH0R5bT3R8QDlZXnulvcf29NvL7/U7jaMM+rJO3/Pbeo7zc7M1U9HFaInmL5rTLH0ROdycnTpbFD2THpi86taXxwiX1891LzaaXF/b/0leahJgNXOyoL5jcyOjw5vFoH4drHEfs6qsqfHf9kfiYgrQF7I2LfzW16Vx44/eRX+5slalT+vC+8rFWYZ5r7MuKJyvmfjpry55Im85NpHT82dHRgW5TGDg3ktaLeT79cfqPZ/ldU/lWQnv8d1fW/JkX330llvrYzSqWx8xM3v4/Lv33W9Jpm+fLP1/95af3fkrxVnrP++d3KsgvDk5PnByO2JK+V41lj2Rbp8qGFdS9k8Tx9Wv6+g43qf6H8Ny6y8/9gRKSV+EDEroci4uEs749ExKMRcXCJ8v/w4mPvLVH+JJJo6/kfjcbtP9OTLJ6vv4VA8cz33zabt2/t/B8pz673ZUvKf/+W0WoGV3j4AAAAYF0oRERXJIX+Sri3KwqF/v7Kb/h3x45CaXxi8qmT4x+cG63cI9ATnYV8pKt70XjoYJL//r0SH8rGivPPD2fjxp8Xt5fj/SPjpdE2lx02u53V7T/y9p/6o9ju3AFrrvk82hK3BgAbQm37L7QpH8Dt18rvaFwLwMbUoP0veobGv9W3CtU/5wJYxzoahIDNoVGr/6gmXtf/b/SULWDdqW//vzd4ZB2wEen1w+al/cPmpf3DprSS+/pvPZDfLLBk4jyLDdNsa/kO/80SyB8Ps5b72h4LS6JQDnRF07V2tOto5GPVSybubmWDEfHNivNTXIVypS2meklxuQKuMNDqf4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZ/s/AAD//16M4Cg=")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

33.333034896s ago: executing program 8 (id=2406):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000003880)=""/4089, 0xff9})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getitimer(0x0, 0x0)

32.682570171s ago: executing program 8 (id=2409):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53003e4c6588a80000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)

32.464291996s ago: executing program 8 (id=2413):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000940)={[{@jqfmt_vfsold}, {@debug}, {@noblock_validity}, {@noload}, {@nombcache}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000001f80)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x400, 0x0, 0x3e, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

32.117164239s ago: executing program 8 (id=2419):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800008, 0x0)
r1 = syz_clone(0x108500, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='stack\x00')
pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x6677)

31.723068087s ago: executing program 8 (id=2427):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
truncate(&(0x7f0000000100)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
fallocate(r0, 0x8, 0x4000, 0x10000)

31.716677457s ago: executing program 45 (id=2427):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
truncate(&(0x7f0000000100)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
fallocate(r0, 0x8, 0x4000, 0x10000)

13.676500733s ago: executing program 6 (id=2620):
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil)
mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

13.228384374s ago: executing program 6 (id=2635):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r2, 0x787)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

13.213465365s ago: executing program 6 (id=2637):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13.181637297s ago: executing program 6 (id=2639):
socket$vsock_stream(0x28, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy")
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpid()
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

13.104223102s ago: executing program 6 (id=2641):
r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)

12.743680337s ago: executing program 6 (id=2644):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81)
getdents64(r2, &(0x7f0000001700)=""/127, 0x7f)
lseek(r2, 0x4, 0x0)
getdents64(r2, 0x0, 0x4f)

12.743497647s ago: executing program 46 (id=2644):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81)
getdents64(r2, &(0x7f0000001700)=""/127, 0x7f)
lseek(r2, 0x4, 0x0)
getdents64(r2, 0x0, 0x4f)

12.685647631s ago: executing program 3 (id=2648):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.510502723s ago: executing program 3 (id=2649):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12.483135535s ago: executing program 3 (id=2650):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20)

12.272311529s ago: executing program 3 (id=2653):
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x8)

12.137828518s ago: executing program 3 (id=2656):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

11.850182968s ago: executing program 3 (id=2662):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
pipe(&(0x7f0000000080))
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

11.780169613s ago: executing program 47 (id=2662):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
pipe(&(0x7f0000000080))
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

10.053228011s ago: executing program 0 (id=2674):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)
write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101"], 0xe4)
close(0x3)

10.014892304s ago: executing program 0 (id=2675):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000400)=""/171, 0xab}], 0x2, 0x111, 0x4)

9.812573958s ago: executing program 0 (id=2678):
pipe(&(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x400000000000004)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$xdp(0x2c, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0x2)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)

9.735042643s ago: executing program 0 (id=2680):
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x8)

9.722604264s ago: executing program 0 (id=2681):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7)

8.89898242s ago: executing program 0 (id=2683):
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

8.89861737s ago: executing program 48 (id=2683):
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.962250715s ago: executing program 2 (id=2777):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef)

1.882153761s ago: executing program 1 (id=2779):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
fallocate(r0, 0x0, 0x0, 0x8800000)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000025c0)="87", 0x1}], 0x1}, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

1.75907872s ago: executing program 9 (id=2781):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040)

1.731439701s ago: executing program 9 (id=2782):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

1.681498875s ago: executing program 9 (id=2783):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xfdef, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

1.538191505s ago: executing program 2 (id=2784):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setresuid(0x0, 0xee00, 0x0)
r0 = io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf})
setrlimit(0x40000000000008, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.233573645s ago: executing program 4 (id=2785):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a0776094d8808411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.233467015s ago: executing program 9 (id=2786):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="23d1df978264", 0x6}], 0x1, 0x0, 0x0, 0x1}, 0xc0)

1.134985342s ago: executing program 9 (id=2787):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c)

841.031413ms ago: executing program 4 (id=2791):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

838.003393ms ago: executing program 2 (id=2792):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94)

769.300167ms ago: executing program 5 (id=2793):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000120)

756.644748ms ago: executing program 2 (id=2794):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
close(r0)
sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x40)

744.126719ms ago: executing program 4 (id=2795):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde601110004"], 0xfdef)

713.259041ms ago: executing program 2 (id=2796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
gettid()
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24008080)

711.715711ms ago: executing program 5 (id=2797):
pipe2(&(0x7f0000000000), 0x800)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
fchdir(r0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

633.010356ms ago: executing program 2 (id=2798):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]})
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

632.398846ms ago: executing program 5 (id=2799):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x10340, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x4000, 0x10001, 0xda, 0x4, 0x7, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

569.740641ms ago: executing program 1 (id=2800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000640)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4)
bind$can_j1939(r2, &(0x7f00000005c0)={0x1d, r1, 0x3, {0x0, 0xf0}, 0x1}, 0x18)

569.249961ms ago: executing program 4 (id=2801):
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmsg$inet_sctp(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="200000000000000084000000020000000700040001000100ff8c0000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac1414010000000018000000000000008400000005000000000000000700000030000000000000008400000001000000008007000702000004000000000000000d0000000900000005000000", @ANYRES32=0x0, @ANYBLOB="12"], 0x98, 0x8004084}, 0x4041)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0xff, 0x8000, 0x400}, 0x10)

525.595614ms ago: executing program 5 (id=2802):
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
syz_open_pts(r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

524.956904ms ago: executing program 4 (id=2803):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f801ffe8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0xfffffe51)

362.841285ms ago: executing program 1 (id=2804):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x6145, 0x7721, 0x17, 0x0, 0x0)

293.38566ms ago: executing program 1 (id=2805):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
fdatasync(0xffffffffffffffff)
set_mempolicy(0x8006, 0x0, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x4010, &(0x7f0000000b80)=ANY=[], 0x4, 0x24f, &(0x7f00000004c0)="$eJzs2kFrXFUUB/Dz0tbUlHQiotKCeNGFunk0WbtokBbEgKKNUAXpq3nRIc+ZkDcEpojJQnTrR3AtLt0J0qWbbPwELtxlk2UR8UkyU+2UqRAkmdH+fps5w53/zLlz71zuYvZf+/rTjfU6Xy96MZNlMXM1duNeFgsxE/ftxqsv3/zp+Xdvvv/m8srKtXdSur58Y3EppXTxhR8/+Oy7F+/2Lrz3/cUfZmNv4cP9g6Vf957du7T/x41P2nVq16nT7aUi3e52e8Xtqkxr7XojT+ntqizqMrU7dbk1Mr5edTc3+6norM3PbW6VdZ2KTj9tlP3U66beVj8VHxftTsrzPM3PBf/G6rf3miZmh8+e/CYu3I35X6IV2VMpe/pq9syt7Lnd7NJB07Qm3Ckn43D9D5pzt6JpGuv/+HngUD8fUX21vbq9OngcjC+vRzuqKONKtOL3ONwmQ4P6+hsr166kIwvxZbUzzO9sr54ZzS9GKxbG5xcH+TSan425iHMRR/kz9/sdl18amz8fr7z0wOfn0YqfP4puVLF29D5/5z9fTOn1t1Yeyl8+et3QzumvDADAycjTX8be3/L8UeOD/DHuhw/dr87G5bOTnTsRdf/ORlFV5db/tjic5RS0MZXFF1nEFLRx/GI2jpXKInYP98FUNP/EP//0fmuaZtJf752YqSZ6LHFKRs9JAAAAAAAAAAAA/itO6x+4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/JnAAAA//9cNsbx")
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
sendfile(r0, r0, 0x0, 0x252c000000000000)

260.447892ms ago: executing program 9 (id=2806):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x1e69, 0xc000, 0x0, 0xd1})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4af584f73552a348)
io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0)

199.914686ms ago: executing program 5 (id=2807):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

199.130746ms ago: executing program 1 (id=2808):
r0 = io_uring_setup(0x3442, &(0x7f00000001c0)={0x0, 0xddae, 0x8, 0x2, 0x31a})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

153.137969ms ago: executing program 1 (id=2809):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

93.423903ms ago: executing program 5 (id=2810):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r2, r3, 0x0, 0x8000fb00)

0s ago: executing program 4 (id=2811):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(0x0)
dup2(0xffffffffffffffff, r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

kernel console output (not intermixed with test programs):

batadv_slave_1
[  146.353478][ T2287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.363796][ T2287] veth1_macvtap: left promiscuous mode
[  146.369548][ T2287] veth0_macvtap: left promiscuous mode
[  146.375497][ T2287] veth1_vlan: left promiscuous mode
[  146.381046][ T2287] veth0_vlan: left promiscuous mode
[  146.406786][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  146.448121][ T2287] team0 (unregistering): Port device team_slave_1 removed
[  146.457604][ T2287] team0 (unregistering): Port device team_slave_0 removed
[  146.468795][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'.
[  146.479101][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'.
[  146.512091][ T9974] chnl_net:caif_netlink_parms(): no params data found
[  146.542420][T10081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  146.592872][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.608484][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.616426][ T9974] bridge_slave_0: entered allmulticast mode
[  146.628410][ T9974] bridge_slave_0: entered promiscuous mode
[  146.640595][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.660369][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.668212][ T9974] bridge_slave_1: entered allmulticast mode
[  146.675466][ T9974] bridge_slave_1: entered promiscuous mode
[  146.707880][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.730825][T10107] loop2: detected capacity change from 0 to 512
[  146.747056][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.770344][   T28] audit: type=1400 audit(1775597421.320:850): avc:  denied  { audit_write } for  pid=10110 comm="syz.0.2063" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  146.795149][   T28] audit: type=1107 audit(1775597421.320:851): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  146.809589][T10107] EXT4-fs (loop2): 1 truncate cleaned up
[  146.817340][T10107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.834390][ T9974] team0: Port device team_slave_0 added
[  146.847348][ T9974] team0: Port device team_slave_1 added
[  146.879597][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.882735][ T9036] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.900792][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  146.937817][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.949667][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.957079][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  146.983641][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.013335][ T9974] hsr_slave_0: entered promiscuous mode
[  147.013884][ T9974] hsr_slave_1: entered promiscuous mode
[  147.014199][ T9974] debugfs: 'hsr0' already exists in 'hsr'
[  147.014210][ T9974] Cannot create hsr debugfs directory
[  147.372730][ T9974] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  147.396137][ T9974] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  147.414940][ T9974] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  147.434852][ T9974] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  147.452066][T10165] loop2: detected capacity change from 0 to 1024
[  147.472187][T10165] ext4: Unknown parameter 'dont_appraise'
[  147.534676][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.577736][ T9974] 8021q: adding VLAN 0 to HW filter on device team0
[  147.599889][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.607512][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.633323][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.641005][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.699913][T10186] loop4: detected capacity change from 0 to 256
[  147.776763][T10191] EXT4-fs (loop6): 1 truncate cleaned up
[  147.792255][T10191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.857263][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.869713][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.094769][T10224] syzkaller0: entered promiscuous mode
[  148.135441][T10224] syzkaller0: entered allmulticast mode
[  148.229947][ T9974] veth0_vlan: entered promiscuous mode
[  148.249459][ T9974] veth1_vlan: entered promiscuous mode
[  148.295757][ T9974] veth0_macvtap: entered promiscuous mode
[  148.328083][ T9974] veth1_macvtap: entered promiscuous mode
[  148.359359][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.385553][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.417028][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.426346][ T2287] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  148.454736][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.491780][T10274] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2085'.
[  148.504226][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.541760][   T28] audit: type=1400 audit(1775597423.090:852): avc:  denied  { unmount } for  pid=8999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  148.564637][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.168041][T10346] set_capacity_and_notify: 1 callbacks suppressed
[  149.168056][T10346] loop8: detected capacity change from 0 to 512
[  149.229988][T10352] loop2: detected capacity change from 0 to 128
[  149.253057][T10346] EXT4-fs (loop8): 1 truncate cleaned up
[  149.265784][T10346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.305328][   T28] audit: type=1400 audit(1775597423.850:853): avc:  denied  { watch watch_reads } for  pid=10345 comm="syz.8.2098" path="/3/file1" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  149.337016][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.350557][   T28] audit: type=1400 audit(1775597423.850:854): avc:  denied  { create } for  pid=10345 comm="syz.8.2098" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  149.385395][T10352] loop2: detected capacity change from 128 to 0
[  149.389584][   T28] audit: type=1400 audit(1775597423.850:855): avc:  denied  { read write } for  pid=10345 comm="syz.8.2098" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  149.404644][    C1] I/O error, dev loop2, sector 66 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  149.429506][T10362] FAT-fs (loop2): Directory bread(block 66) failed
[  149.429646][   T28] audit: type=1400 audit(1775597423.850:856): avc:  denied  { open } for  pid=10345 comm="syz.8.2098" path="/3/file1/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  149.440526][T10362] FAT-fs (loop2): Directory bread(block 67) failed
[  149.518668][T10362] FAT-fs (loop2): Directory bread(block 68) failed
[  149.557038][T10362] FAT-fs (loop2): Directory bread(block 69) failed
[  149.583764][T10362] FAT-fs (loop2): Directory bread(block 70) failed
[  149.599670][T10362] FAT-fs (loop2): Directory bread(block 71) failed
[  149.607359][T10362] FAT-fs (loop2): Directory bread(block 72) failed
[  149.614469][T10362] FAT-fs (loop2): Directory bread(block 73) failed
[  149.622008][T10362] FAT-fs (loop2): Directory bread(block 74) failed
[  149.632054][T10362] FAT-fs (loop2): Directory bread(block 75) failed
[  149.694287][ T9036] FAT-fs (loop2): unable to read boot sector to mark fs as dirty
[  149.861962][ T8211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.958804][ T8211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.052050][ T8211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.114336][ T8211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.204528][ T8211] bridge_slave_1: left allmulticast mode
[  150.221481][ T8211] bridge_slave_1: left promiscuous mode
[  150.239893][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.247993][ T8211] bridge_slave_0: left allmulticast mode
[  150.253712][ T8211] bridge_slave_0: left promiscuous mode
[  150.260615][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.408039][ T8211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.418517][ T8211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.428938][ T8211] bond0 (unregistering): Released all slaves
[  150.473115][T10416] chnl_net:caif_netlink_parms(): no params data found
[  150.500763][ T8211] hsr_slave_0: left promiscuous mode
[  150.506585][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.514218][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.524730][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.532589][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.545271][ T8211] veth1_macvtap: left promiscuous mode
[  150.552359][ T8211] veth0_macvtap: left promiscuous mode
[  150.557989][ T8211] veth1_vlan: left promiscuous mode
[  150.563349][ T8211] veth0_vlan: left promiscuous mode
[  150.650152][ T8211] team0 (unregistering): Port device team_slave_1 removed
[  150.661669][ T8211] team0 (unregistering): Port device team_slave_0 removed
[  150.724783][T10416] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.733632][T10416] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.744116][T10416] bridge_slave_0: entered allmulticast mode
[  150.751340][T10416] bridge_slave_0: entered promiscuous mode
[  150.758910][T10416] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.770204][T10416] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.777733][T10416] bridge_slave_1: entered allmulticast mode
[  150.784452][T10416] bridge_slave_1: entered promiscuous mode
[  150.803276][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.814723][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.836682][T10416] team0: Port device team_slave_0 added
[  150.843517][T10416] team0: Port device team_slave_1 added
[  150.860710][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.867864][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.894684][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.906307][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.913457][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.940308][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.968333][T10416] hsr_slave_0: entered promiscuous mode
[  150.974534][T10416] hsr_slave_1: entered promiscuous mode
[  150.980518][T10416] debugfs: 'hsr0' already exists in 'hsr'
[  150.986657][T10416] Cannot create hsr debugfs directory
[  151.062771][T10416] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.103135][T10416] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.182983][T10416] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.254946][T10416] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.285287][   T28] audit: type=1400 audit(1775597425.830:857): avc:  denied  { ioctl } for  pid=10462 comm="syz.0.2116" path="socket:[28844]" dev="sockfs" ino=28844 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  151.357649][T10468] loop8: detected capacity change from 0 to 512
[  151.373418][T10468] EXT4-fs: Ignoring removed bh option
[  151.382158][T10468] EXT4-fs: inline encryption not supported
[  151.389950][T10468] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  151.435697][T10468] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  151.456152][T10468] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2117: bg 0: block 248: padding at end of block bitmap is not set
[  151.475313][T10468] loop8: lost filesystem error report for type 5 error -117
[  151.475642][T10468] Quota error (device loop8): write_blk: dquota write failed
[  151.490538][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  151.490565][    C0] EXT4-fs (loop8): last error at time 1775597426: ext4_validate_block_bitmap:441
[  151.545346][T10468] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  151.555211][T10468] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.2117: Failed to acquire dquot type 1
[  151.585355][T10468] loop8: lost filesystem error report for type 5 error -28
[  151.585883][T10468] EXT4-fs (loop8): 1 truncate cleaned up
[  151.626686][T10468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  151.900812][T10314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.923841][T10416] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  151.952202][T10416] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  151.969954][T10416] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  151.984399][T10416] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  152.108763][T10416] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.154266][T10416] 8021q: adding VLAN 0 to HW filter on device team0
[  152.166196][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  152.195428][   T54] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5
[  152.204846][   T54] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1
[  152.223768][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.230858][ T8213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.265353][   T54] loop8: lost filesystem error report for type 5 error -117
[  152.276420][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.291298][ T8213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.381221][T10496] sch_tbf: burst 1402 is lower than device syzkaller0 mtu (1514) !
[  152.489793][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.704912][T10416] veth0_vlan: entered promiscuous mode
[  152.720556][T10416] veth1_vlan: entered promiscuous mode
[  152.745809][T10416] veth0_macvtap: entered promiscuous mode
[  152.774268][T10416] veth1_macvtap: entered promiscuous mode
[  152.829322][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.850386][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.869817][ T2287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.885434][ T2287] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.906321][ T2287] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.939120][ T2287] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.028172][T10541] loop7: detected capacity change from 0 to 512
[  153.039733][T10541] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  153.055119][T10541] EXT4-fs (loop7): 1 truncate cleaned up
[  153.061216][T10541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.153911][T10552] netlink: 876 bytes leftover after parsing attributes in process `syz.8.2127'.
[  153.159733][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.165652][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2127'.
[  153.327467][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2131'.
[  153.336802][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2131'.
[  153.385135][   T54] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.415688][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2131'.
[  153.425914][   T54] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.435088][   T54] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.465562][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2131'.
[  153.502812][   T54] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.618551][T10599] loop8: detected capacity change from 0 to 512
[  153.639874][T10599] EXT4-fs: Ignoring removed bh option
[  153.655398][T10599] EXT4-fs: inline encryption not supported
[  153.689984][T10599] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  153.718050][T10599] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  153.758646][T10599] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2137: bg 0: block 248: padding at end of block bitmap is not set
[  153.785388][T10599] loop8: lost filesystem error report for type 5 error -117
[  153.785697][T10599] Quota error (device loop8): write_blk: dquota write failed
[  153.800492][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  153.800509][    C0] EXT4-fs (loop8): last error at time 1775597428: ext4_validate_block_bitmap:441
[  153.911798][T10599] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  153.942893][T10599] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.2137: Failed to acquire dquot type 1
[  153.978373][T10599] loop8: lost filesystem error report for type 5 error -28
[  153.986606][T10599] EXT4-fs (loop8): 1 truncate cleaned up
[  154.021828][T10599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  154.091048][T10599] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2137'.
[  154.117711][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2137'.
[  154.159404][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  154.447053][T10653] atomic_op ffff8881112edd28 conn xmit_atomic 0000000000000000
[  154.709477][T10676] loop7: detected capacity change from 0 to 1764
[  154.716421][T10676] iso9660: Unknown parameter 'utF8'
[  154.755310][ T8534] IPVS: starting estimator thread 0...
[  154.786244][T10688] loop6: detected capacity change from 0 to 128
[  154.800168][T10688] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.855322][T10685] IPVS: using max 2448 ests per chain, 122400 per kthread
[  154.862937][ T2287] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  155.602888][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2166'.
[  155.647770][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2166'.
[  155.688726][ T8213] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.713122][ T8213] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.742684][ T8213] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.772863][ T8213] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.168794][T10914] loop8: detected capacity change from 0 to 1764
[  157.175603][T10914] iso9660: Unknown parameter 'utF8'
[  157.234867][ T3423] IPVS: starting estimator thread 0...
[  157.335604][T10922] IPVS: using max 2448 ests per chain, 122400 per kthread
[  157.553597][ T3422] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  157.580983][ T3422] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  157.855626][T10975] loop7: detected capacity change from 0 to 512
[  157.943084][   T28] audit: type=1400 audit(1775597432.490:858): avc:  denied  { mounton } for  pid=10973 comm="syz.7.2182" path="/19/file0/file0" dev="loop7" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  158.162038][T11001] loop6: detected capacity change from 0 to 512
[  158.377984][T11011] syz.6.2189: attempt to access beyond end of device
[  158.377984][T11011] loop6: rw=2049, sector=8376, nr_sectors = 2056 limit=512
[  158.438228][T11011] syz.6.2189: attempt to access beyond end of device
[  158.438228][T11011] loop6: rw=2049, sector=10432, nr_sectors = 2048 limit=512
[  158.488321][T11011] syz.6.2189: attempt to access beyond end of device
[  158.488321][T11011] loop6: rw=2049, sector=12480, nr_sectors = 2056 limit=512
[  158.538193][T11011] syz.6.2189: attempt to access beyond end of device
[  158.538193][T11011] loop6: rw=2049, sector=14536, nr_sectors = 1928 limit=512
[  158.676351][T11031] loop7: detected capacity change from 0 to 512
[  158.700751][T11031] EXT4-fs: inline encryption not supported
[  158.735462][T11031] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  158.774102][T11031] EXT4-fs (loop7): 1 truncate cleaned up
[  158.817240][T11041] loop8: detected capacity change from 0 to 512
[  158.817400][T11031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.901709][T11041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.935387][T11041] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.955704][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.031279][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.264503][T11054] loop8: detected capacity change from 0 to 1764
[  159.271518][T11054] iso9660: Unknown parameter 'utF8'
[  159.323457][T11057] SELinux: failed to load policy
[  159.624522][T11064] loop6: detected capacity change from 0 to 512
[  159.667388][T11064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.732674][T11064] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.843797][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.021565][T11103] loop6: detected capacity change from 0 to 512
[  160.055296][   T28] audit: type=1400 audit(1775597434.590:859): avc:  denied  { write } for  pid=11100 comm="syz.0.2206" lport=59116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  160.114800][T11103] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  160.179698][T11117] loop8: detected capacity change from 0 to 4096
[  160.187617][T11114] loop7: detected capacity change from 0 to 1024
[  160.198375][T11103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.238274][T11117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.287202][T11117] SELinux: failed to load policy
[  160.289961][T11114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  160.321843][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.352997][T11114] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.391973][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.438297][T11114] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.2210: lblock 0 mapped to illegal pblock 0 (length 1)
[  160.465543][T11114] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  160.548660][T11114] EXT4-fs (loop7): This should not happen!! Data will be lost
[  160.548660][T11114] 
[  160.604434][ T2287] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1)
[  160.686687][ T2287] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  160.735377][ T2287] EXT4-fs (loop7): This should not happen!! Data will be lost
[  160.735377][ T2287] 
[  160.775717][T10416] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  160.810054][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  161.103460][T11171] loop8: detected capacity change from 0 to 1024
[  161.115927][T11171] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  161.127377][   T28] audit: type=1326 audit(1775597435.680:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.194616][T11171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.214131][   T35] IPVS: starting estimator thread 0...
[  161.244315][T11171] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  161.260620][   T28] audit: type=1326 audit(1775597435.680:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.297167][T11171] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  161.318245][T11174] IPVS: using max 2448 ests per chain, 122400 per kthread
[  161.376035][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.385174][   T28] audit: type=1326 audit(1775597435.680:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.448275][   T28] audit: type=1326 audit(1775597435.680:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.461960][T11190] loop8: detected capacity change from 0 to 1024
[  161.503380][   T28] audit: type=1326 audit(1775597435.710:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.537705][   T28] audit: type=1326 audit(1775597435.710:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.562142][   T28] audit: type=1326 audit(1775597435.710:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.588880][   T28] audit: type=1326 audit(1775597435.710:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.6.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeec79c819 code=0x7ffc0000
[  161.619551][T11190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.649133][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.745904][T11201] loop8: detected capacity change from 0 to 764
[  162.010349][T11226] loop8: detected capacity change from 0 to 1024
[  162.028124][T11226] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block
[  162.028124][T11226] 
[  162.104494][T11232] __nla_validate_parse: 2 callbacks suppressed
[  162.104512][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2233'.
[  162.122477][T11232] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.145489][T11232] bridge_slave_1 (unregistering): left allmulticast mode
[  162.157087][T11232] bridge_slave_1 (unregistering): left promiscuous mode
[  162.168025][T11232] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.442621][T11250] loop7: detected capacity change from 0 to 512
[  162.450984][T11250] EXT4-fs: Ignoring removed orlov option
[  162.472634][T11250] EXT4-fs: test_dummy_encryption option not supported
[  162.492935][T11250] loop7: detected capacity change from 0 to 128
[  162.501524][T11250] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  162.754137][T11255] loop6: detected capacity change from 0 to 1764
[  162.760866][T11255] iso9660: Unknown parameter 'utF8'
[  162.828737][T11260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.842218][T11260] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.005670][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.060723][T11268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.147444][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.049380][ T8213] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.078615][ T8213] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.128331][ T8213] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.177798][ T8213] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.234048][ T8213] bridge_slave_1: left allmulticast mode
[  164.240184][ T8213] bridge_slave_1: left promiscuous mode
[  164.246133][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.254405][ T8213] bridge_slave_0: left allmulticast mode
[  164.260337][ T8213] bridge_slave_0: left promiscuous mode
[  164.266168][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.319424][ T8213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.329628][ T8213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.339178][ T8213] bond0 (unregistering): Released all slaves
[  164.388773][ T8213] hsr_slave_0: left promiscuous mode
[  164.394823][ T8213] hsr_slave_1: left promiscuous mode
[  164.400643][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.408524][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.417855][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.426666][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.437199][ T8213] veth1_macvtap: left promiscuous mode
[  164.443117][ T8213] veth0_macvtap: left promiscuous mode
[  164.449331][ T8213] veth1_vlan: left promiscuous mode
[  164.454747][ T8213] veth0_vlan: left promiscuous mode
[  164.506482][ T8213] team0 (unregistering): Port device team_slave_1 removed
[  164.516489][ T8213] team0 (unregistering): Port device team_slave_0 removed
[  165.154533][T11236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.244945][T11290] set_capacity_and_notify: 2 callbacks suppressed
[  165.244962][T11290] loop7: detected capacity change from 0 to 128
[  165.682410][T11341] loop7: detected capacity change from 0 to 512
[  165.723161][T11341] EXT4-fs: Ignoring removed bh option
[  165.740716][T11341] EXT4-fs: inline encryption not supported
[  165.756649][T11341] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.757003][T11291] chnl_net:caif_netlink_parms(): no params data found
[  165.819658][T11341] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  165.841757][T11341] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2255: bg 0: block 248: padding at end of block bitmap is not set
[  165.856790][T11341] loop7: lost filesystem error report for type 5 error -117
[  165.857200][T11341] __quota_error: 22 callbacks suppressed
[  165.857212][T11341] Quota error (device loop7): write_blk: dquota write failed
[  165.865417][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  165.865438][    C1] EXT4-fs (loop7): last error at time 1775597440: ext4_validate_block_bitmap:441
[  165.898019][T11341] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  165.909070][T11341] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.2255: Failed to acquire dquot type 1
[  165.922124][T11341] loop7: lost filesystem error report for type 5 error -28
[  165.922697][T11341] EXT4-fs (loop7): 1 truncate cleaned up
[  165.939203][T11341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  165.961505][T11339] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2255'.
[  165.973198][T11339] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2255'.
[  166.048670][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  166.094567][T11363] loop7: detected capacity change from 0 to 128
[  166.104115][T11291] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.142400][T11291] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.151589][T11363] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.180950][T11291] bridge_slave_0: entered allmulticast mode
[  166.206342][T11363] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.218345][T11291] bridge_slave_0: entered promiscuous mode
[  166.245024][T11379] loop8: detected capacity change from 0 to 128
[  166.245828][T11291] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.259299][T11291] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.267628][T11291] bridge_slave_1: entered allmulticast mode
[  166.283413][T11291] bridge_slave_1: entered promiscuous mode
[  166.298461][T11379] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.313279][T11379] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.350032][T10416] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.369741][T11291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.380428][T11291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.392428][ T9974] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.400041][T11291] team0: Port device team_slave_0 added
[  166.408740][T11291] team0: Port device team_slave_1 added
[  166.436810][T11291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.447951][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.482671][T11291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.496434][T11291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.504190][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.531220][T11291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.537020][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x223
[  166.623303][T11399] loop7: detected capacity change from 0 to 512
[  166.635674][T11291] hsr_slave_0: entered promiscuous mode
[  166.643105][T11398] loop6: detected capacity change from 0 to 1024
[  166.652572][T11291] hsr_slave_1: entered promiscuous mode
[  166.659370][T11398] EXT4-fs: Ignoring removed bh option
[  166.670705][T11399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.685201][T11291] debugfs: 'hsr0' already exists in 'hsr'
[  166.695072][T11291] Cannot create hsr debugfs directory
[  166.702269][T11399] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.715774][T11398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.747658][T11398] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.795549][T11398] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.2263: lblock 0 mapped to illegal pblock 0 (length 1)
[  166.814780][T11398] EXT4-fs (loop6): Remounting filesystem read-only
[  166.825400][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.877185][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  167.284139][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  167.296475][T11291] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  167.307842][T11291] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  167.318170][T11291] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  167.345831][T11291] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  167.354511][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2280'.
[  167.457611][T11291] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.491390][T11291] 8021q: adding VLAN 0 to HW filter on device team0
[  167.518147][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.525651][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.544370][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.551521][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.567607][T11446] loop6: detected capacity change from 0 to 2048
[  167.595623][T11446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.616402][T11291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.674496][ T8211] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  167.698320][ T8211] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  167.704980][T11291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.721918][ T8211] EXT4-fs (loop6): This should not happen!! Data will be lost
[  167.721918][ T8211] 
[  167.737420][ T8211] EXT4-fs (loop6): Total free blocks count 0
[  167.743531][ T8211] EXT4-fs (loop6): Free/Dirty block details
[  167.757139][ T8211] EXT4-fs (loop6): free_blocks=4096
[  167.762719][ T8211] EXT4-fs (loop6): dirty_blocks=512
[  167.775960][ T8211] EXT4-fs (loop6): Block reservation details
[  167.782648][ T8211] EXT4-fs (loop6): i_reserved_data_blocks=32
[  167.796710][   T54] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  167.811610][ T4545] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  167.910006][ T2287] Bluetooth: hci0: Frame reassembly failed (-84)
[  167.912843][T11481] loop7: detected capacity change from 0 to 512
[  167.935125][T11481] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  167.959271][T11291] veth0_vlan: entered promiscuous mode
[  167.970684][T11481] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.2275: corrupted in-inode xattr: invalid ea_ino
[  167.985347][T11481] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  167.987036][T11481] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2275: couldn't read orphan inode 15 (err -117)
[  167.987514][T11291] veth1_vlan: entered promiscuous mode
[  167.996432][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  168.016426][T11291] veth0_macvtap: entered promiscuous mode
[  168.022296][    C0] EXT4-fs (loop7): initial error at time 1775597442: ext4_iget_extra_inode:5040: inode 15
[  168.022329][    C0] EXT4-fs (loop7): last error at time 1775597442: ext4_iget_extra_inode:5040: inode 15
[  168.059977][T11481] loop7: lost filesystem error report for type 5 error -117
[  168.061703][T11481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.084040][T11291] veth1_macvtap: entered promiscuous mode
[  168.097272][T11291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.108380][T11291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.120359][ T8211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.134784][ T8211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.157483][ T8211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.175334][ T8211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.213668][   T28] audit: type=1400 audit(1775597442.760:890): avc:  denied  { mount } for  pid=11291 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  168.240404][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.286238][T11499] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2288'.
[  168.308071][T11502] loop3: detected capacity change from 0 to 512
[  168.324864][T11499] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2288'.
[  168.347548][T11502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.373618][T11502] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.411271][T11512] netlink: 'syz.0.2276': attribute type 10 has an invalid length.
[  168.423304][T11512] 8021q: adding VLAN 0 to HW filter on device team0
[  168.433295][T11512] bond0: (slave team0): Enslaving as an active interface with an up link
[  168.534964][T11531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2284'.
[  169.176878][T11502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.954711][T11601] loop8: detected capacity change from 0 to 256
[  169.965987][ T3543] Bluetooth: hci0: command 0x1003 tx timeout
[  169.986817][ T4850] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  170.098231][T11606] netlink: 'syz.8.2295': attribute type 10 has an invalid length.
[  170.117269][T11604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.151798][T11606] 8021q: adding VLAN 0 to HW filter on device team0
[  170.165386][T11604] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.178166][T11606] bond0: (slave team0): Enslaving as an active interface with an up link
[  170.249081][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.362560][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  170.383941][T11618] set_capacity_and_notify: 1 callbacks suppressed
[  170.384023][T11618] loop3: detected capacity change from 0 to 512
[  170.406657][ T3402] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  170.460230][T11618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.485486][T11618] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.488862][T11623] only policy match revision 0 supported
[  170.514550][T11623] unable to load match
[  170.636437][T11291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.689299][T11650] loop3: detected capacity change from 0 to 1024
[  170.726111][T11656] loop7: detected capacity change from 0 to 1024
[  170.739888][T11656] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.756258][T11650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.776589][T11650] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.796378][T11656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.814316][T11656] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  170.821037][T11650] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.2303: lblock 0 mapped to illegal pblock 0 (length 1)
[  170.843178][T11650] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  170.856863][T11650] EXT4-fs (loop3): This should not happen!! Data will be lost
[  170.856863][T11650] 
[  170.857463][T11656] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  170.891618][   T50] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1)
[  170.922616][   T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  170.940083][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.951384][   T50] EXT4-fs (loop3): This should not happen!! Data will be lost
[  170.951384][   T50] 
[  170.978249][T11674] loop7: detected capacity change from 0 to 128
[  170.979314][T11291] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  171.006085][T11291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  171.031035][T11674] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.079520][T11674] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.168708][T11692] loop3: detected capacity change from 0 to 128
[  171.183726][T10416] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.374009][T11712] only policy match revision 0 supported
[  171.374024][T11712] unable to load match
[  171.445393][   T50] Bluetooth: hci0: Frame reassembly failed (-84)
[  171.623350][   T28] audit: type=1400 audit(1775597446.170:891): avc:  denied  { create } for  pid=11754 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  171.709431][T11766] SELinux: failed to load policy
[  171.760195][T11777] SELinux: failed to load policy
[  173.485557][ T4850] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  173.562765][T11635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.642202][   T28] audit: type=1326 audit(1775597448.190:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.714176][   T28] audit: type=1326 audit(1775597448.190:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.742913][T12019] xt_hashlimit: size too large, truncated to 1048576
[  173.765591][T12015] serio: Serial port ttyS3
[  173.783678][T12025] loop6: detected capacity change from 0 to 512
[  173.793670][   T28] audit: type=1326 audit(1775597448.190:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.794760][T12027] syzkaller1: entered promiscuous mode
[  173.856310][T12025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.872917][   T28] audit: type=1326 audit(1775597448.190:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.897199][   T28] audit: type=1326 audit(1775597448.190:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.921578][   T28] audit: type=1326 audit(1775597448.220:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.938932][T12027] syzkaller1: entered allmulticast mode
[  173.948658][   T28] audit: type=1326 audit(1775597448.220:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  173.977022][   T28] audit: type=1326 audit(1775597448.220:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  174.001034][   T28] audit: type=1326 audit(1775597448.220:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.8.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7905c819 code=0x7ffc0000
[  174.036346][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.084282][T12040] netlink: 'syz.6.2343': attribute type 12 has an invalid length.
[  174.100599][T12040] netlink: 'syz.6.2343': attribute type 29 has an invalid length.
[  174.108919][T12040] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2343'.
[  174.247514][T12052] loop7: detected capacity change from 0 to 512
[  174.261895][T12052] EXT4-fs: Ignoring removed i_version option
[  174.269083][T12052] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  174.380716][T12052] EXT4-fs (loop7): 1 truncate cleaned up
[  174.387965][T12052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.433805][T12052] SELinux: failed to load policy
[  174.461553][T10416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.523809][T12069] loop8: detected capacity change from 0 to 1764
[  174.531225][T12069] iso9660: Unknown parameter 'utF8'
[  174.737551][T12072] syzkaller1: entered promiscuous mode
[  174.767635][T12072] syzkaller1: entered allmulticast mode
[  175.645304][ T4850] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  175.646054][ T3543] Bluetooth: hci1: command 0x1003 tx timeout
[  175.921601][T12112] xt_hashlimit: size too large, truncated to 1048576
[  176.011063][T12117] syzkaller1: entered promiscuous mode
[  176.044226][T12117] syzkaller1: entered allmulticast mode
[  176.329966][T12145] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  176.342728][T12145] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  176.354423][T12145] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  176.387876][ T8213] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.398709][ T8213] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.477977][ T8213] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.488853][ T8213] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.552687][ T8213] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.563410][ T8213] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.619933][ T8213] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.641744][ T8213] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.720720][T12147] chnl_net:caif_netlink_parms(): no params data found
[  176.720694][T12168] loop6: detected capacity change from 0 to 8192
[  176.741948][T12168] syz.6.2399: attempt to access beyond end of device
[  176.741948][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  176.794563][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  176.810270][T12168] syz.6.2399: attempt to access beyond end of device
[  176.810270][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  176.847216][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  176.865644][T12168] syz.6.2399: attempt to access beyond end of device
[  176.865644][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  176.882821][T12147] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.891080][T12147] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.898696][T12147] bridge_slave_0: entered allmulticast mode
[  176.905905][T12147] bridge_slave_0: entered promiscuous mode
[  176.913375][T12147] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.916906][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  176.920881][T12147] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.936587][T12147] bridge_slave_1: entered allmulticast mode
[  176.943344][T12147] bridge_slave_1: entered promiscuous mode
[  176.956941][ T8213] bridge_slave_0: left allmulticast mode
[  176.958520][T12168] syz.6.2399: attempt to access beyond end of device
[  176.958520][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  176.962716][ T8213] bridge_slave_0: left promiscuous mode
[  176.962823][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.995379][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.005802][T12168] syz.6.2399: attempt to access beyond end of device
[  177.005802][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  177.020584][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.028898][T12174] syz.6.2399: attempt to access beyond end of device
[  177.028898][T12174] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  177.044927][T12174] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.055948][T12174] syz.6.2399: attempt to access beyond end of device
[  177.055948][T12174] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  177.095977][T12174] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.107411][T12168] syz.6.2399: attempt to access beyond end of device
[  177.107411][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  177.122202][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.134268][T12168] syz.6.2399: attempt to access beyond end of device
[  177.134268][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  177.167319][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.177645][T12168] syz.6.2399: attempt to access beyond end of device
[  177.177645][T12168] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  177.194548][ T8213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.203416][T12168] Buffer I/O error on dev loop6, logical block 57847, async page read
[  177.212141][ T8213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.222400][ T8213] bond0 (unregistering): Released all slaves
[  177.309054][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.402633][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.428928][ T8213] hsr_slave_0: left promiscuous mode
[  177.443883][ T8213] hsr_slave_1: left promiscuous mode
[  177.453121][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.463054][   T28] kauditd_printk_skb: 40 callbacks suppressed
[  177.463066][   T28] audit: type=1400 audit(1775597452.020:941): avc:  denied  { read } for  pid=12200 comm="syz.0.2407" path="socket:[32700]" dev="sockfs" ino=32700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  177.469649][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.501937][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.521512][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.542445][   T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  177.550621][   T10] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  177.565726][ T8213] veth1_macvtap: left promiscuous mode
[  177.571451][ T8213] veth0_macvtap: left promiscuous mode
[  177.578843][ T8213] veth1_vlan: left promiscuous mode
[  177.594280][ T8213] veth0_vlan: left promiscuous mode
[  177.742942][ T8213] team0 (unregistering): Port device team_slave_1 removed
[  177.753446][ T8213] team0 (unregistering): Port device team_slave_0 removed
[  177.802106][T12147] team0: Port device team_slave_0 added
[  177.811693][T12147] team0: Port device team_slave_1 added
[  177.841043][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.849502][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.889910][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.949253][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.965456][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.002436][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.096667][T12147] hsr_slave_0: entered promiscuous mode
[  178.103598][T12147] hsr_slave_1: entered promiscuous mode
[  178.110777][T12147] debugfs: 'hsr0' already exists in 'hsr'
[  178.132705][T12147] Cannot create hsr debugfs directory
[  178.140202][T12246] loop8: detected capacity change from 0 to 512
[  178.163869][T12243] syzkaller1: entered promiscuous mode
[  178.165644][T12246] EXT4-fs: Ignoring removed orlov option
[  178.177203][T12246] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  178.186789][T12243] syzkaller1: entered allmulticast mode
[  178.192445][T12246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  178.216502][T12246] EXT4-fs error (device loop8): ext4_iget_extra_inode:5040: inode #15: comm syz.8.2413: corrupted in-inode xattr: e_value size too large
[  178.277261][T12246] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.277446][T12246] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2413: couldn't read orphan inode 15 (err -117)
[  178.288244][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  178.288268][    C0] EXT4-fs (loop8): initial error at time 1775597452: ext4_iget_extra_inode:5040: inode 15
[  178.288313][    C0] EXT4-fs (loop8): last error at time 1775597452: ext4_iget_extra_inode:5040: inode 15
[  178.339630][T12246] loop8: lost filesystem error report for type 5 error -117
[  178.340115][T12246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.404824][ T8213] IPVS: stop unused estimator thread 0...
[  178.457950][ T9974] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  178.483306][   T28] audit: type=1400 audit(1775597453.010:942): avc:  denied  { unlink } for  pid=9974 comm="syz-executor" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  178.558312][ T9974] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  178.575332][   T28] audit: type=1400 audit(1775597453.130:943): avc:  denied  { read } for  pid=12278 comm="syz.6.2420" path="socket:[33215]" dev="sockfs" ino=33215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  178.667403][   T28] audit: type=1400 audit(1775597453.220:944): avc:  denied  { read } for  pid=12278 comm="syz.6.2420" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  178.693829][   T28] audit: type=1400 audit(1775597453.220:945): avc:  denied  { open } for  pid=12278 comm="syz.6.2420" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  178.805200][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.912471][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2429'.
[  178.956471][T12322] netlink: 'syz.3.2429': attribute type 30 has an invalid length.
[  178.967472][ T8213] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.979652][ T8213] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.003293][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2429'.
[  179.012420][ T2287] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.015562][T12322] netlink: 'syz.3.2429': attribute type 30 has an invalid length.
[  179.025373][ T2287] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.049649][ T8213] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.067014][ T8213] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.083236][ T2287] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.112156][ T2287] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.137871][ T8213] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.149546][ T8213] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.174629][T12147] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  179.202866][T12147] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  179.219877][ T8213] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.231147][ T8213] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.257852][T12338] syzkaller1: entered promiscuous mode
[  179.264212][T12338] syzkaller1: entered allmulticast mode
[  179.272753][T12147] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  179.292393][T12147] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  179.365671][ T8213] bridge_slave_1: left allmulticast mode
[  179.371704][ T8213] bridge_slave_1: left promiscuous mode
[  179.385625][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.400814][ T8213] bridge_slave_0: left allmulticast mode
[  179.413529][ T8213] bridge_slave_0: left promiscuous mode
[  179.430989][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.527735][ T8213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.538247][ T8213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.550487][ T8213] bond0 (unregistering): (slave team0): Releasing backup interface
[  179.561058][ T8213] bond0 (unregistering): Released all slaves
[  179.632023][ T8213] hsr_slave_0: left promiscuous mode
[  179.632734][T12393] loop5: detected capacity change from 0 to 7
[  179.644479][ T8213] hsr_slave_1: left promiscuous mode
[  179.656330][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.664673][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.698686][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.713331][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.729004][ T8213] veth1_macvtap: left promiscuous mode
[  179.734857][ T8213] veth0_macvtap: left promiscuous mode
[  179.741185][ T8213] veth1_vlan: left promiscuous mode
[  179.746722][ T8213] veth0_vlan: left promiscuous mode
[  179.757196][   T28] audit: type=1400 audit(1775597454.310:946): avc:  denied  { write } for  pid=12400 comm="syz.0.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  179.812835][ T8213] team0 (unregistering): Port device team_slave_1 removed
[  179.824822][ T8213] team0 (unregistering): Port device team_slave_0 removed
[  179.916648][T12323] chnl_net:caif_netlink_parms(): no params data found
[  179.938083][T12147] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.960841][T12147] 8021q: adding VLAN 0 to HW filter on device team0
[  179.979207][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.986580][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.006791][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.014835][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.044493][T12323] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.051728][T12323] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.059404][T12323] bridge_slave_0: entered allmulticast mode
[  180.066530][T12323] bridge_slave_0: entered promiscuous mode
[  180.073626][T12323] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.089518][T12323] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.105028][T12323] bridge_slave_1: entered allmulticast mode
[  180.113552][T12323] bridge_slave_1: entered promiscuous mode
[  180.144556][ T8213] IPVS: stop unused estimator thread 0...
[  180.150589][T12323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.166591][T12323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.226989][T12323] team0: Port device team_slave_0 added
[  180.238941][T12323] team0: Port device team_slave_1 added
[  180.311930][T12323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.319926][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.347095][T12323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.386464][T12323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.396797][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.415100][T12465] SELinux: failed to load policy
[  180.424679][T12323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.496052][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.524803][T12323] hsr_slave_0: entered promiscuous mode
[  180.537663][T12323] hsr_slave_1: entered promiscuous mode
[  180.544017][T12323] debugfs: 'hsr0' already exists in 'hsr'
[  180.549926][T12323] Cannot create hsr debugfs directory
[  180.630165][T12483] loop6: detected capacity change from 0 to 1024
[  180.656323][T12483] EXT4-fs: Ignoring removed bh option
[  180.680159][T12483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.731240][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.757958][T12505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2450'.
[  180.880490][T12504] loop3: detected capacity change from 0 to 8192
[  181.008811][T12147] veth0_vlan: entered promiscuous mode
[  181.026986][T12147] veth1_vlan: entered promiscuous mode
[  181.065821][T12147] veth0_macvtap: entered promiscuous mode
[  181.083299][T12147] veth1_macvtap: entered promiscuous mode
[  181.143214][T12147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.162739][T12323] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  181.186198][T12147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.200858][T12323] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  181.222426][T12323] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  181.250269][T12323] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  181.381393][   T28] audit: type=1400 audit(1775597455.930:947): avc:  denied  { read write } for  pid=12553 comm="syz.0.2454" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  181.436622][   T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.449750][   T28] audit: type=1400 audit(1775597455.930:948): avc:  denied  { open } for  pid=12553 comm="syz.0.2454" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  181.478822][   T54] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.490000][   T54] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.546910][ T8207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.596522][   T54] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.612510][T12323] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.644046][ T8207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.682191][T12323] 8021q: adding VLAN 0 to HW filter on device team0
[  181.696699][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.704255][ T8213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.723553][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.730853][ T8213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.758087][T12504] bio_check_eod: 29341 callbacks suppressed
[  181.758103][T12504] syz.3.2452: attempt to access beyond end of device
[  181.758103][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.781374][ T8207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.781647][T12504] syz.3.2452: attempt to access beyond end of device
[  181.781647][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.808163][T12504] buffer_io_error: 29342 callbacks suppressed
[  181.808177][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.823013][T12504] syz.3.2452: attempt to access beyond end of device
[  181.823013][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.827739][T12585] loop5: detected capacity change from 0 to 4096
[  181.838849][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.852244][T12504] syz.3.2452: attempt to access beyond end of device
[  181.852244][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.866669][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.875333][T12504] syz.3.2452: attempt to access beyond end of device
[  181.875333][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.890911][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.892199][T12585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.899396][T12504] syz.3.2452: attempt to access beyond end of device
[  181.899396][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.926155][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.934433][T12504] syz.3.2452: attempt to access beyond end of device
[  181.934433][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.948482][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.957180][T12504] syz.3.2452: attempt to access beyond end of device
[  181.957180][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  181.971552][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  181.980235][T12504] syz.3.2452: attempt to access beyond end of device
[  181.980235][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  182.006151][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  182.017640][ T8207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.039501][T12504] syz.3.2452: attempt to access beyond end of device
[  182.039501][T12504] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  182.059481][T12504] Buffer I/O error on dev loop3, logical block 57847, async page read
[  182.152290][T12147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.243359][T12323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.253277][ T8207] bridge_slave_1: left allmulticast mode
[  182.259079][ T8207] bridge_slave_1: left promiscuous mode
[  182.275322][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.496913][ T8207] bridge_slave_0: left allmulticast mode
[  182.503136][ T8207] bridge_slave_0: left promiscuous mode
[  182.533839][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.667605][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.679498][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.692389][ T8207] bond0 (unregistering): Released all slaves
[  182.748532][ T8207] tipc: Disabling bearer <udp:syz2>
[  182.754063][ T8207] tipc: Left network mode
[  182.762822][T12566] chnl_net:caif_netlink_parms(): no params data found
[  182.815162][ T8207] hsr_slave_0: left promiscuous mode
[  182.821537][ T8207] hsr_slave_1: left promiscuous mode
[  182.827797][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.835533][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.850379][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.858454][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.871396][ T8207] veth1_macvtap: left promiscuous mode
[  182.877425][ T8207] veth0_macvtap: left promiscuous mode
[  182.974817][ T8207] pimreg3 (unregistering): left allmulticast mode
[  183.006956][T12679] loop3: detected capacity change from 0 to 256
[  183.007034][ T8207] team0 (unregistering): Port device team_slave_1 removed
[  183.014032][T12679] msdos: Unknown parameter '01777777777777777777777'
[  183.028141][ T8207] team0 (unregistering): Port device team_slave_0 removed
[  183.126815][T12566] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.187317][T12566] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.218132][T12566] bridge_slave_0: entered allmulticast mode
[  183.252753][T12566] bridge_slave_0: entered promiscuous mode
[  183.278611][T12566] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.307995][T12566] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.316102][T12566] bridge_slave_1: entered allmulticast mode
[  183.322873][T12566] bridge_slave_1: entered promiscuous mode
[  183.350215][T12566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.398918][T12566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.433801][T12712] loop5: detected capacity change from 0 to 8192
[  183.443361][ T8207] IPVS: stop unused estimator thread 0...
[  183.451076][T12566] team0: Port device team_slave_0 added
[  183.464537][T12323] veth0_vlan: entered promiscuous mode
[  183.474195][T12708] Buffer I/O error on dev loop5, logical block 57847, async page read
[  183.483854][T12566] team0: Port device team_slave_1 added
[  183.512946][T12323] veth1_vlan: entered promiscuous mode
[  183.523058][ T6543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  183.531119][T12566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.553415][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.586143][ T6543] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  183.608815][T12566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.641272][T12566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.661530][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.724506][T12566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.799420][T12323] veth0_macvtap: entered promiscuous mode
[  183.820111][T12323] veth1_macvtap: entered promiscuous mode
[  183.834115][T12566] hsr_slave_0: entered promiscuous mode
[  183.840656][T12566] hsr_slave_1: entered promiscuous mode
[  183.854137][T12323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.881991][T12323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.900498][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.910595][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.941400][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.965511][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.059451][   T28] audit: type=1400 audit(1775597458.610:949): avc:  denied  { read } for  pid=12742 comm="syz.0.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  184.063581][T12749] loop9: detected capacity change from 0 to 1024
[  184.121838][T12749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.149771][T12749] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.213770][T12749] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: block 3: comm syz.9.2428: lblock 3 mapped to illegal pblock 3 (length 3)
[  184.246832][T12749] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  184.264133][T12749] EXT4-fs (loop9): This should not happen!! Data will be lost
[  184.264133][T12749] 
[  184.328757][ T8207] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 3)
[  184.345932][ T8207] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  184.361532][ T8207] EXT4-fs (loop9): This should not happen!! Data will be lost
[  184.361532][ T8207] 
[  184.389225][ T8213] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: block 4: comm kworker/u8:19: lblock 4 mapped to illegal pblock 4 (length 2)
[  184.411575][ T8213] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  184.429055][ T8213] EXT4-fs (loop9): This should not happen!! Data will be lost
[  184.429055][ T8213] 
[  184.439463][T12323] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  184.469366][T12323] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  184.545172][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  184.590418][T12566] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  184.611342][T12566] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  184.629638][T12566] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  184.642038][T12566] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  184.713836][T12566] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.727651][T12566] 8021q: adding VLAN 0 to HW filter on device team0
[  184.777045][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.785093][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.803674][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.811292][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.923483][T12831] loop5: detected capacity change from 0 to 128
[  184.951686][T12566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.996246][T12831] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.010723][T12831] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  185.164999][T12850] loop3: detected capacity change from 0 to 1764
[  185.172218][T12850] iso9660: Unknown parameter 'utF8'
[  185.265505][ T3483] IPVS: starting estimator thread 0...
[  185.375419][T12852] IPVS: using max 2448 ests per chain, 122400 per kthread
[  185.555327][   T28] audit: type=1400 audit(1775597460.010:950): avc:  denied  { create } for  pid=12832 comm="syz.0.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  185.822434][T12147] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.057472][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'.
[  186.072343][T12566] veth0_vlan: entered promiscuous mode
[  186.090710][T12566] veth1_vlan: entered promiscuous mode
[  186.114074][T12566] veth0_macvtap: entered promiscuous mode
[  186.122284][T12566] veth1_macvtap: entered promiscuous mode
[  186.136035][T12566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.149452][T12566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.160769][ T8213] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.202755][ T8213] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.253390][T12885] loop5: detected capacity change from 0 to 1024
[  186.274009][ T8213] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.297251][T12885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  186.330442][ T8213] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.384896][T12885] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.451077][T12885] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 3: comm syz.5.2491: lblock 3 mapped to illegal pblock 3 (length 3)
[  186.497860][T12885] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  186.549956][T12885] EXT4-fs (loop5): This should not happen!! Data will be lost
[  186.549956][T12885] 
[  186.605311][ T4850] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  186.606419][ T3543] Bluetooth: hci0: command 0x1003 tx timeout
[  186.665521][ T8206] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 3)
[  186.683462][ T8206] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  186.705400][   T28] audit: type=1400 audit(1775597461.240:951): avc:  denied  { watch } for  pid=12913 comm="syz.6.2498" path="/" dev="hugetlbfs" ino=35846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[  186.711447][ T8206] EXT4-fs (loop5): This should not happen!! Data will be lost
[  186.711447][ T8206] 
[  186.762011][T12926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2501'.
[  186.799839][ T8213] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 4: comm kworker/u8:19: lblock 4 mapped to illegal pblock 4 (length 2)
[  186.841174][ T8213] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  186.843579][T12940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12940 comm=syz.0.2504
[  186.872149][ T8213] EXT4-fs (loop5): This should not happen!! Data will be lost
[  186.872149][ T8213] 
[  186.900127][T12938] loop6: detected capacity change from 0 to 512
[  186.907033][T12147] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  186.924873][T12147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  186.943421][T12938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.012751][T12566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.045811][T12953] netlink: 'syz.0.2507': attribute type 8 has an invalid length.
[  187.060848][T12953] netlink: 'syz.0.2507': attribute type 7 has an invalid length.
[  187.092746][T12953] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2507'.
[  187.263202][T12989] batman_adv: batadv0: Adding interface: ip6gretap1
[  187.280838][T12999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12999 comm=syz.9.2516
[  187.294883][T12989] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.334932][T12989] batman_adv: batadv0: Interface activated: ip6gretap1
[  190.473033][T13128] loop6: detected capacity change from 0 to 1024
[  190.484030][T13128] /dev/loop6: Can't open blockdev
[  190.728429][   T28] audit: type=1400 audit(1775597465.280:952): avc:  denied  { remount } for  pid=13153 comm="syz.6.2539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  191.272944][T13120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  191.872675][T13282] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2553'.
[  191.927746][T13295] loop3: detected capacity change from 0 to 256
[  191.996016][T13295] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.045866][T13295] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  192.173309][   T28] audit: type=1400 audit(1775597466.720:953): avc:  denied  { write } for  pid=13311 comm="syz.5.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  192.651260][T13338] syz.6.2566 (13338) used greatest stack depth: 8848 bytes left
[  192.698245][   T28] audit: type=1400 audit(1775597467.250:954): avc:  denied  { read } for  pid=13339 comm="syz.6.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  192.749437][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'.
[  193.043732][T13350] sctp: [Deprecated]: syz.5.2571 (pid 13350) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.043732][T13350] Use struct sctp_sack_info instead
[  193.098206][ T8207] Bluetooth: hci0: Frame reassembly failed (-84)
[  193.118057][   T28] audit: type=1400 audit(1775597467.670:955): avc:  denied  { bind } for  pid=13354 comm="syz.9.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  193.144388][T13360] netlink: 'syz.3.2575': attribute type 4 has an invalid length.
[  193.175848][T13360] netlink: 'syz.3.2575': attribute type 4 has an invalid length.
[  193.340566][T13369] loop5: detected capacity change from 0 to 512
[  193.361486][T13369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  193.410265][T13369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.426332][T13369] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.472125][T12147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.261324][T13393] loop3: detected capacity change from 0 to 4096
[  194.274611][T13393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.306969][T13397] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.316576][T13397] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.351342][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2590'.
[  194.400875][T13397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.413922][T13397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.421413][T11291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.461944][T13397] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  194.491085][ T8211] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.513657][ T8207] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.527491][ T8207] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.557873][ T8207] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.584974][T13414] loop3: detected capacity change from 0 to 1024
[  194.595900][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2596'.
[  194.640946][T13414] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  194.706443][T13414] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #3: block 1: comm syz.3.2594: lblock 1 mapped to illegal pblock 1 (length 1)
[  194.736061][T13414] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  194.736799][T13414] Quota error (device loop3): write_blk: dquota write failed
[  194.746793][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  194.746844][    C0] EXT4-fs (loop3): initial error at time 1775597469: ext4_map_blocks:828: inode 3: block 1
[  194.746877][    C0] EXT4-fs (loop3): last error at time 1775597469: ext4_map_blocks:828: inode 3: block 1
[  194.782664][T13414] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  194.794284][T13414] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.2594: Failed to acquire dquot type 0
[  194.808403][T13414] loop3: lost filesystem error report for type 5 error -117
[  194.808734][T13414] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.2594: Freeing blocks not in datazone - block = 0, count = 4096
[  194.832310][T13414] loop3: lost filesystem error report for type 5 error -117
[  194.833086][T13414] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2594: Invalid inode bitmap blk 0 in block_group 0
[  194.875359][ T8211] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  194.893579][ T8211] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  194.893681][ T8211] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  194.920617][T13414] loop3: lost filesystem error report for type 5 error -117
[  194.922586][T13414] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  194.946922][ T8211] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 0
[  194.960267][ T8211] loop3: lost filesystem error report for type 5 error -117
[  194.960553][T13414] loop3: lost filesystem error report for type 5 error -117
[  194.969266][T13414] EXT4-fs (loop3): 1 orphan inode deleted
[  194.986246][T13414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.008565][T13414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.172569][ T3543] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  195.181157][ T3543] Bluetooth: hci0: command 0x1003 tx timeout
[  195.189359][ T4850] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  195.217933][   T28] audit: type=1400 audit(1775597469.760:956): avc:  denied  { accept } for  pid=13443 comm="syz.6.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  195.387759][   T28] audit: type=1400 audit(1775597469.760:957): avc:  denied  { read } for  pid=13443 comm="syz.6.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  196.226467][T13471] loop5: detected capacity change from 0 to 1024
[  196.251792][T13471] EXT4-fs: Ignoring removed orlov option
[  196.314033][T13471] EXT4-fs: Ignoring removed nobh option
[  196.418402][T13471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.814956][T12147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.896394][T13481] loop9: detected capacity change from 0 to 256
[  196.922034][T13482] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.924568][T13481] FAT-fs (loop9): codepage cp863 not found
[  196.961760][T13482] bridge_slave_1: left allmulticast mode
[  196.968935][T13482] bridge_slave_1: left promiscuous mode
[  196.976183][T13482] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.238087][T13513] netlink: 'syz.9.2632': attribute type 5 has an invalid length.
[  197.334482][ T7346] kernel write not supported for file bpf-prog (pid: 7346 comm: kworker/1:6)
[  197.343536][T13515] TCP: TCP_TX_DELAY enabled
[  197.433010][T13529] loop6: detected capacity change from 0 to 4096
[  197.444079][T13529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.488313][T12566] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  197.503371][T12566] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  197.801018][T12566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.026365][T13546] chnl_net:caif_netlink_parms(): no params data found
[  198.124631][T13546] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.133970][T13546] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.142534][T13546] bridge_slave_0: entered allmulticast mode
[  198.150016][T13546] bridge_slave_0: entered promiscuous mode
[  198.157110][T13546] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.164599][T13546] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.171989][T13546] bridge_slave_1: entered allmulticast mode
[  198.179993][T13546] bridge_slave_1: entered promiscuous mode
[  198.197013][T13546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.207747][T13546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.228736][T13546] team0: Port device team_slave_0 added
[  198.236138][T13546] team0: Port device team_slave_1 added
[  198.260293][T13546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.277920][T13546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.325882][T13546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.342233][T13546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.349543][T13546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.381457][T13546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.439155][T13588] io-wq is not configured for unbound workers
[  198.461004][T13546] hsr_slave_0: entered promiscuous mode
[  198.498034][T13546] hsr_slave_1: entered promiscuous mode
[  198.504146][T13546] debugfs: 'hsr0' already exists in 'hsr'
[  198.514275][T13546] Cannot create hsr debugfs directory
[  198.674144][   T28] audit: type=1400 audit(1775597473.220:958): avc:  denied  { read } for  pid=13604 comm="syz.9.2658" laddr=fe80::10 lport=53852 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  198.693251][T13609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2659'.
[  198.783242][   T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.801224][   T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.880665][   T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.900129][   T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.056174][   T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.238681][   T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.322905][   T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.348605][   T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.380451][T13546] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.394988][T13546] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.414211][T13673] bridge0: port 2(erspan0) entered blocking state
[  199.423345][T13673] bridge0: port 2(erspan0) entered disabled state
[  199.442943][T13673] erspan0: entered allmulticast mode
[  199.456783][T13673] erspan0: entered promiscuous mode
[  199.462577][T13679] netlink: 'syz.0.2666': attribute type 10 has an invalid length.
[  199.473190][T13673] bridge0: port 2(erspan0) entered blocking state
[  199.480429][T13673] bridge0: port 2(erspan0) entered forwarding state
[  199.492026][T13546] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.503047][T13679] bridge0: port 2(erspan0) entered disabled state
[  199.510707][T13679] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.524685][T13679] bridge0: port 2(erspan0) entered blocking state
[  199.532104][T13679] bridge0: port 2(erspan0) entered forwarding state
[  199.539598][T13679] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.547175][T13679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.558661][T13679] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  199.568734][T13629] chnl_net:caif_netlink_parms(): no params data found
[  199.615344][T13546] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  199.616045][T13693] loop5: detected capacity change from 0 to 1024
[  199.677737][T13693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.734551][T12147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.832400][T13629] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.925916][T13629] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.927161][   T28] audit: type=1326 audit(1775597474.480:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.5.2670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d5f60c819 code=0x0
[  199.955769][T13629] bridge_slave_0: entered allmulticast mode
[  199.978586][T13629] bridge_slave_0: entered promiscuous mode
[  199.986943][T13629] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.994466][T13629] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.002356][T13629] bridge_slave_1: entered allmulticast mode
[  200.010105][T13629] bridge_slave_1: entered promiscuous mode
[  200.017922][   T50] bridge_slave_1: left allmulticast mode
[  200.023795][   T50] bridge_slave_1: left promiscuous mode
[  200.030091][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.038752][   T50] bridge_slave_0: left allmulticast mode
[  200.044918][   T50] bridge_slave_0: left promiscuous mode
[  200.051560][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.173744][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.186614][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.197049][   T50] bond0 (unregistering): Released all slaves
[  200.224100][T13629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.237834][T13629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.250854][   T50] hsr_slave_0: left promiscuous mode
[  200.256894][   T50] hsr_slave_1: left promiscuous mode
[  200.262834][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.272669][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.281085][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.289106][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.302030][   T50] veth1_macvtap: left promiscuous mode
[  200.307909][   T50] veth0_macvtap: left promiscuous mode
[  200.313681][   T50] veth1_vlan: left promiscuous mode
[  200.319503][   T50] veth0_vlan: left promiscuous mode
[  200.388059][   T50] team0 (unregistering): Port device team_slave_1 removed
[  200.398458][   T50] team0 (unregistering): Port device team_slave_0 removed
[  200.442877][T13752] syzkaller0: entered promiscuous mode
[  200.449120][T13752] syzkaller0: entered allmulticast mode
[  200.461993][T13629] team0: Port device team_slave_0 added
[  200.468913][T13629] team0: Port device team_slave_1 added
[  200.488301][T13629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.495579][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.539683][T13629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.551841][T13629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.576688][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.604592][T13629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.622536][T13546] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.657855][T13629] hsr_slave_0: entered promiscuous mode
[  200.664598][T13629] hsr_slave_1: entered promiscuous mode
[  200.671169][T13629] debugfs: 'hsr0' already exists in 'hsr'
[  200.677401][T13629] Cannot create hsr debugfs directory
[  200.685030][T13546] 8021q: adding VLAN 0 to HW filter on device team0
[  200.700776][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.708582][ T2055] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.739601][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.747060][ T2055] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.770034][   T50] IPVS: stop unused estimator thread 0...
[  200.871674][T13546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.948657][T13812] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  201.718647][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2687'.
[  201.759281][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.773070][   T28] audit: type=1400 audit(1775597476.320:960): avc:  denied  { mount } for  pid=13828 comm="syz.9.2688" name="/" dev="autofs" ino=37833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  201.873519][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.899599][T13843] batadv_slave_1: entered promiscuous mode
[  201.944565][T13843] batadv_slave_1: left promiscuous mode
[  201.962929][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.983641][T13546] veth0_vlan: entered promiscuous mode
[  202.005012][T13546] veth1_vlan: entered promiscuous mode
[  202.052459][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.083451][T13546] veth0_macvtap: entered promiscuous mode
[  202.091071][T13546] veth1_macvtap: entered promiscuous mode
[  202.125069][T13629] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  202.151862][T13629] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  202.164398][T13629] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  202.191134][T13877] loop5: detected capacity change from 0 to 1024
[  202.201317][T13877] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  202.217066][T13546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.234378][T13629] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  202.244967][T13877] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #3: block 1: comm syz.5.2695: lblock 1 mapped to illegal pblock 1 (length 1)
[  202.265009][T13877] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  202.265259][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  202.281508][    C1] EXT4-fs (loop5): initial error at time 1775597476: ext4_map_blocks:828: inode 3: block 1
[  202.286985][T13877] Quota error (device loop5): write_blk: dquota write failed
[  202.292703][    C1] EXT4-fs (loop5): last error at time 1775597476: ext4_map_blocks:828: inode 3: block 1
[  202.310562][T13877] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  202.321237][T13877] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.2695: Failed to acquire dquot type 0
[  202.340727][T13877] loop5: lost filesystem error report for type 5 error -117
[  202.343427][T13877] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.2695: Freeing blocks not in datazone - block = 0, count = 4096
[  202.366659][T13877] loop5: lost filesystem error report for type 5 error -117
[  202.368114][T13877] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2695: Invalid inode bitmap blk 0 in block_group 0
[  202.382313][T13546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.395407][T13877] loop5: lost filesystem error report for type 5 error -117
[  202.397111][ T8211] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  202.397217][T13877] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  202.404761][ T8211] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  202.419772][T13877] loop5: lost filesystem error report for type 5 error -117
[  202.442225][ T8211] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  202.460562][ T8211] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 0
[  202.461629][T13877] EXT4-fs (loop5): 1 orphan inode deleted
[  202.462814][T13821] chnl_net:caif_netlink_parms(): no params data found
[  202.483622][T13877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.501420][ T8211] loop5: lost filesystem error report for type 5 error -117
[  202.508411][T13877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.529016][   T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.544216][   T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.554537][   T50] erspan0: left allmulticast mode
[  202.560967][   T50] erspan0: left promiscuous mode
[  202.566575][   T50] bridge0: port 2(erspan0) entered disabled state
[  202.575002][   T50] bridge_slave_0: left allmulticast mode
[  202.585619][   T50] bridge_slave_0: left promiscuous mode
[  202.593057][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.713322][   T50] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  202.789646][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.800280][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.816588][   T50] bond0 (unregistering): (slave team0): Releasing backup interface
[  202.832167][   T50] bond0 (unregistering): Released all slaves
[  202.854307][   T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.874128][   T50] hsr_slave_0: left promiscuous mode
[  202.881492][   T50] hsr_slave_1: left promiscuous mode
[  202.887969][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.895913][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.908014][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.917042][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.936257][   T50] veth1_macvtap: left promiscuous mode
[  202.953120][   T50] veth0_macvtap: left promiscuous mode
[  202.963420][   T50] veth1_vlan: left promiscuous mode
[  202.970006][   T50] veth0_vlan: left promiscuous mode
[  203.051723][   T50] team0 (unregistering): Port device team_slave_1 removed
[  203.062640][   T50] team0 (unregistering): Port device team_slave_0 removed
[  203.104075][   T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.179747][T13821] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.201073][T13821] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.225181][T13821] bridge_slave_0: entered allmulticast mode
[  203.243783][T13821] bridge_slave_0: entered promiscuous mode
[  203.271750][T13629] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.291446][T13821] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.299056][T13821] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.306716][T13821] bridge_slave_1: entered allmulticast mode
[  203.313555][T13821] bridge_slave_1: entered promiscuous mode
[  203.341326][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.362247][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.374056][T13629] 8021q: adding VLAN 0 to HW filter on device team0
[  203.383014][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.395601][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.408734][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.416011][ T8213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.426257][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.433457][ T8213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.500971][T13979] bridge_slave_0: left allmulticast mode
[  203.523980][T13979] bridge_slave_0: left promiscuous mode
[  203.533432][T13979] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.550729][T13979] bridge_slave_1: left allmulticast mode
[  203.572615][T13979] bridge_slave_1: left promiscuous mode
[  203.578534][T13979] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.617252][T13979] bond0: (slave bond_slave_0): Releasing backup interface
[  203.707445][T13979] bond0: (slave bond_slave_1): Releasing backup interface
[  203.723013][T13979] team0: Port device team_slave_0 removed
[  203.732749][T13979] team0: Port device team_slave_1 removed
[  203.740132][T13979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.754363][T13979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.763481][T13979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.771448][T13979] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.781687][T13979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  203.878493][T14019] loop5: detected capacity change from 0 to 1764
[  203.886101][T14019] iso9660: Unknown parameter 'utF8'
[  203.988522][ T8533] IPVS: starting estimator thread 0...
[  204.107300][T13821] team0: Port device team_slave_0 added
[  204.115910][T14022] IPVS: using max 2448 ests per chain, 122400 per kthread
[  204.197921][T13821] team0: Port device team_slave_1 added
[  204.205328][   T50] IPVS: stop unused estimator thread 0...
[  204.339196][T13821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.393009][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  204.615124][T13821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.710122][T13821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.794703][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  204.864770][T13821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.880049][T14047] netlink: 'syz.9.2720': attribute type 10 has an invalid length.
[  204.901338][T14043] bridge0: port 1(erspan0) entered blocking state
[  204.918034][T14043] bridge0: port 1(erspan0) entered disabled state
[  204.938034][T14043] erspan0: entered allmulticast mode
[  204.961414][T14043] erspan0: entered promiscuous mode
[  204.975459][T14043] bridge0: port 1(erspan0) entered blocking state
[  204.982148][T14043] bridge0: port 1(erspan0) entered forwarding state
[  205.011884][T13629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.027276][T14047] bridge0: port 1(erspan0) entered disabled state
[  205.045919][T14047] bridge0: port 1(erspan0) entered blocking state
[  205.052679][T14047] bridge0: port 1(erspan0) entered forwarding state
[  205.080410][T14047] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  205.168352][T13821] hsr_slave_0: entered promiscuous mode
[  205.205743][T13821] hsr_slave_1: entered promiscuous mode
[  205.236177][T13821] debugfs: 'hsr0' already exists in 'hsr'
[  205.242522][T13821] Cannot create hsr debugfs directory
[  205.487363][T13629] veth0_vlan: entered promiscuous mode
[  205.519179][T13629] veth1_vlan: entered promiscuous mode
[  205.551324][T14088] loop9: detected capacity change from 0 to 512
[  205.580860][T14088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.625831][T13629] veth0_macvtap: entered promiscuous mode
[  205.637446][T14088] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.696364][T13629] veth1_macvtap: entered promiscuous mode
[  205.743285][T13629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.814192][T13629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.843445][   T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.852869][   T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.875590][   T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.884840][   T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.912199][T12323] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.982668][T13821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.008029][T13821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.030046][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.042113][T14137] netlink: 'syz.2.2664': attribute type 10 has an invalid length.
[  206.063750][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.073996][T13821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.082065][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'.
[  206.093774][T14133] loop5: detected capacity change from 0 to 128
[  206.107157][   T28] audit: type=1400 audit(1775597480.660:961): avc:  denied  { bind } for  pid=14143 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  206.111245][T14133] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  206.162549][T13821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  206.183775][T14133] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  206.199951][   T28] audit: type=1400 audit(1775597480.680:962): avc:  denied  { getopt } for  pid=14147 comm="syz.9.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  206.228115][T14158] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2740'.
[  206.229304][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'.
[  206.317654][T13821] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.339737][T13821] 8021q: adding VLAN 0 to HW filter on device team0
[  206.594204][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.601602][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.635729][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.642941][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.751855][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.914040][ T3402] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  206.942059][ T3402] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  207.179501][T13821] veth0_vlan: entered promiscuous mode
[  207.214088][T13821] veth1_vlan: entered promiscuous mode
[  207.253651][T13821] veth0_macvtap: entered promiscuous mode
[  207.296429][T13821] veth1_macvtap: entered promiscuous mode
[  207.317108][T13821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.341421][T13821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.353608][ T8207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.366757][ T8207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.430214][ T8207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.451670][ T8207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.553170][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'.
[  207.637305][T14294] loop4: detected capacity change from 0 to 164
[  207.684374][T14294] Unable to read rock-ridge attributes
[  207.735570][T14294] Unable to read rock-ridge attributes
[  207.963416][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'.
[  208.179669][T14346] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2765'.
[  208.199919][   T28] audit: type=1326 audit(1775597482.750:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.248457][   T28] audit: type=1326 audit(1775597482.750:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.346963][   T28] audit: type=1326 audit(1775597482.750:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.436117][   T28] audit: type=1326 audit(1775597482.750:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.498291][   T28] audit: type=1326 audit(1775597482.750:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.579932][   T28] audit: type=1326 audit(1775597482.750:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.675426][   T28] audit: type=1326 audit(1775597482.750:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.758198][   T28] audit: type=1326 audit(1775597482.750:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14349 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f60c819 code=0x7ffc0000
[  208.919762][T14418] xt_hashlimit: size too large, truncated to 1048576
[  209.897941][T14499] syzkaller1: entered promiscuous mode
[  209.922098][T14499] syzkaller1: entered allmulticast mode
[  210.067571][T14521] loop5: detected capacity change from 0 to 256
[  210.145590][T14521] FAT-fs (loop5): Directory bread(block 64) failed
[  210.172840][T14521] FAT-fs (loop5): Directory bread(block 65) failed
[  210.196580][T14521] FAT-fs (loop5): Directory bread(block 66) failed
[  210.211709][T14521] FAT-fs (loop5): Directory bread(block 67) failed
[  210.230654][T14521] FAT-fs (loop5): Directory bread(block 68) failed
[  210.251642][T14521] FAT-fs (loop5): Directory bread(block 69) failed
[  210.275479][T14521] FAT-fs (loop5): Directory bread(block 70) failed
[  210.298099][T14521] FAT-fs (loop5): Directory bread(block 71) failed
[  210.308233][T14521] FAT-fs (loop5): Directory bread(block 72) failed
[  210.337191][T14521] FAT-fs (loop5): Directory bread(block 73) failed
[  210.690104][T14579] ==================================================================
[  210.698234][T14579] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run
[  210.706407][T14579] 
[  210.708818][T14579] write to 0xffff88810f689358 of 8 bytes by task 14581 on cpu 0:
[  210.716547][T14579]  cpu_map_kthread_run+0x4fe/0x1680
[  210.722014][T14579]  kthread+0x22a/0x280
[  210.726132][T14579]  ret_from_fork+0x150/0x360
[  210.730822][T14579]  ret_from_fork_asm+0x1a/0x30
[  210.735600][T14579] 
[  210.737990][T14579] read to 0xffff88810f689358 of 8 bytes by task 14579 on cpu 1:
[  210.745622][T14579]  bq_flush_to_queue+0x124/0x360
[  210.751004][T14579]  cpu_map_enqueue+0x1ad/0x1c0
[  210.755871][T14579]  xdp_do_redirect_frame+0x27b/0x580
[  210.761601][T14579]  bpf_test_run_xdp_live+0xac3/0x1360
[  210.767090][T14579]  bpf_prog_test_run_xdp+0x57b/0xa10
[  210.772423][T14579]  bpf_prog_test_run+0x204/0x340
[  210.777467][T14579]  __sys_bpf+0x52e/0x7e0
[  210.781809][T14579]  __x64_sys_bpf+0x41/0x50
[  210.786246][T14579]  x64_sys_call+0x10cb/0x3020
[  210.791220][T14579]  do_syscall_64+0x12c/0x370
[  210.795815][T14579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.802171][T14579] 
[  210.804495][T14579] value changed: 0xffff88813e317070 -> 0x0000000000000000
[  210.811625][T14579] 
[  210.814039][T14579] Reported by Kernel Concurrency Sanitizer on:
[  210.820379][T14579] CPU: 1 UID: 0 PID: 14579 Comm: syz.4.2811 Not tainted syzkaller #0 PREEMPT(full) 
[  210.829855][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  210.840001][T14579] ==================================================================
[  211.207976][ T8207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.281319][ T8207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.348062][ T8207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.384553][ T8207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.468779][ T8207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.508725][ T8207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.548793][ T8207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.598573][ T8207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.677273][ T8207] bridge_slave_1: left allmulticast mode
[  211.685320][ T8207] bridge_slave_1: left promiscuous mode
[  211.691589][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.702115][ T8207] bridge_slave_0: left allmulticast mode
[  211.708285][ T8207] bridge_slave_0: left promiscuous mode
[  211.714195][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.726045][ T8207] bridge_slave_1: left allmulticast mode
[  211.731723][ T8207] bridge_slave_1: left promiscuous mode
[  211.737603][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.745824][ T8207] bridge_slave_0: left allmulticast mode
[  211.751493][ T8207] bridge_slave_0: left promiscuous mode
[  211.759922][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.847366][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.858500][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.869294][ T8207] bond0 (unregistering): Released all slaves
[  211.909821][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.919924][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.930340][ T8207] bond0 (unregistering): Released all slaves
[  211.971384][ T8207] hsr_slave_0: left promiscuous mode
[  211.977890][ T8207] hsr_slave_1: left promiscuous mode
[  211.983650][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.991991][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.999843][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.008122][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.017674][ T8207] hsr_slave_0: left promiscuous mode
[  212.023536][ T8207] hsr_slave_1: left promiscuous mode
[  212.029421][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.037065][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.044772][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.055401][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.072985][ T8207] veth1_macvtap: left promiscuous mode
[  212.080002][ T8207] veth0_macvtap: left promiscuous mode
[  212.086512][ T8207] veth1_vlan: left promiscuous mode
[  212.092927][ T8207] veth0_vlan: left promiscuous mode
[  212.100934][ T8207] veth1_macvtap: left promiscuous mode
[  212.106780][ T8207] veth0_macvtap: left promiscuous mode
[  212.113744][ T8207] veth1_vlan: left promiscuous mode
[  212.120141][ T8207] veth0_vlan: left promiscuous mode
[  212.239131][ T8207] team0 (unregistering): Port device team_slave_1 removed
[  212.250612][ T8207] team0 (unregistering): Port device team_slave_0 removed
[  212.301054][ T8207] team0 (unregistering): Port device team_slave_1 removed
[  212.310608][ T8207] team0 (unregistering): Port device team_slave_0 removed
[  212.749866][ T8207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.788696][ T8207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.839187][ T8207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.889750][ T8207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.987720][ T8207] bridge_slave_1: left allmulticast mode
[  212.993486][ T8207] bridge_slave_1: left promiscuous mode
[  212.999282][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.007388][ T8207] bridge_slave_0: left allmulticast mode
[  213.013441][ T8207] bridge_slave_0: left promiscuous mode
[  213.019293][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.069493][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.079574][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.090049][ T8207] bond0 (unregistering): Released all slaves
[  213.135831][ T8207] hsr_slave_0: left promiscuous mode
[  213.141687][ T8207] hsr_slave_1: left promiscuous mode
[  213.147620][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.155532][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.163612][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.171552][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.183058][ T8207] veth1_macvtap: left promiscuous mode
[  213.188814][ T8207] veth0_macvtap: left promiscuous mode
[  213.194573][ T8207] veth1_vlan: left promiscuous mode
[  213.200133][ T8207] veth0_vlan: left promiscuous mode
[  213.261900][ T8207] team0 (unregistering): Port device team_slave_1 removed
[  213.272465][ T8207] team0 (unregistering): Port device team_slave_0 removed
[  218.608178][ T2154] bridge_slave_1: left allmulticast mode
[  218.614079][ T2154] bridge_slave_1: left promiscuous mode
[  218.619969][ T2154] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.628365][ T2154] bridge_slave_0: left allmulticast mode
[  218.634204][ T2154] bridge_slave_0: left promiscuous mode
[  218.640006][ T2154] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.700610][ T2154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.711077][ T2154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.721001][ T2154] bond0 (unregistering): (slave team0): Releasing backup interface
[  218.730315][ T2154] bond0 (unregistering): Released all slaves
[  218.789189][ T2154] hsr_slave_0: left promiscuous mode
[  218.795098][ T2154] hsr_slave_1: left promiscuous mode
[  218.801021][ T2154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.808752][ T2154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.816491][ T2154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.824043][ T2154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.833873][ T2154] veth1_macvtap: left promiscuous mode
[  218.840402][ T2154] veth0_macvtap: left promiscuous mode
[  218.845953][ T2154] veth1_vlan: left promiscuous mode
[  218.851220][ T2154] veth0_vlan: left promiscuous mode
[  218.903576][ T2154] team0 (unregistering): Port device team_slave_1 removed
[  218.913474][ T2154] team0 (unregistering): Port device team_slave_0 removed
[  219.208157][ T2154] IPVS: stop unused estimator thread 0...