last executing test programs:

2m55.148203115s ago: executing program 32 (id=141):
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000600)={0x77359400}, 0x0)
r0 = gettid()
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085"], 0x3c}}, 0x40000)

2m30.419006283s ago: executing program 33 (id=635):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x14241, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x400000000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
close(0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120)

1m18.046088952s ago: executing program 34 (id=2261):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0xa, 0x0, 0x42000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

1m6.723381696s ago: executing program 5 (id=2415):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x4)
sendfile(r0, r0, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)

1m6.545803526s ago: executing program 5 (id=2416):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x83c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x810, 0x2, [@TCA_FW_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x80e, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x2000003, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000004, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x7, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0xfffffffe, 0x9, 0x8400, 0x3, 0x0, 0x4cf, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x401, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0x5, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x20000009, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x1, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xec, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9a, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x0, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x80000000, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0x625, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x2, 0x7, 0x2, 0x1ff, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x10000, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbaf5)

1m6.500927724s ago: executing program 5 (id=2418):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
fcntl$setsig(r0, 0xa, 0x7)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m6.117176748s ago: executing program 5 (id=2423):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e)
mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
fdatasync(r0)

1m5.646683377s ago: executing program 5 (id=2425):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

1m5.007899244s ago: executing program 5 (id=2437):
r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
fstatfs(r2, &(0x7f0000000140)=""/83)

1m5.007422343s ago: executing program 2 (id=2439):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff0}, {0x0, 0xfff1}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

1m4.96716698s ago: executing program 35 (id=2437):
r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
fstatfs(r2, &(0x7f0000000140)=""/83)

1m4.892465003s ago: executing program 2 (id=2442):
r0 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r0, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

1m4.853244049s ago: executing program 2 (id=2443):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

1m4.807581687s ago: executing program 2 (id=2444):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]})
r1 = open(&(0x7f0000000000)='.\x00', 0x181000, 0x0)
getdents(r1, 0x0, 0x0)

1m4.61268396s ago: executing program 2 (id=2446):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m4.157321056s ago: executing program 2 (id=2449):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x80)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)=[0x5, 0xfff], &(0x7f0000000180)=[0x2], 0x0, 0x2, 0x1}}, 0x40)

1m4.13122584s ago: executing program 36 (id=2449):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x80)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)=[0x5, 0xfff], &(0x7f0000000180)=[0x2], 0x0, 0x2, 0x1}}, 0x40)

57.000207193s ago: executing program 1 (id=2558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

56.84093309s ago: executing program 1 (id=2563):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x72)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$9p(r0, &(0x7f0000000180)="ddb49d", 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

56.794118878s ago: executing program 1 (id=2564):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

56.616762927s ago: executing program 1 (id=2568):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000976000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ebe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

56.587673262s ago: executing program 1 (id=2570):
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
unshare(0x60000600)
sync()
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f3ffffffffffffff010000030900010073797a310000000040000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000014000000110001"], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x160}}, 0x0)

56.212742115s ago: executing program 1 (id=2580):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)

56.211583146s ago: executing program 37 (id=2580):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)

45.592831662s ago: executing program 9 (id=2760):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x80}, 0x28)
add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r1, 0x38, "8b730fb6c3d87f30d86def297d8aba09ad5875ef21d7bedaf92b8e549b8fb3fe7d89ad74b37835b196e629034cca9fb2f8dff476ffd9830d"}, &(0x7f0000000380)=0x40)

45.573356775s ago: executing program 9 (id=2761):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x5, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

45.516817365s ago: executing program 9 (id=2762):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0)

45.454473205s ago: executing program 9 (id=2763):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107)

45.42382331s ago: executing program 9 (id=2764):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWINFO(r1, 0x4004480d, 0x0)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, 0x0)

45.196488208s ago: executing program 9 (id=2767):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
r3 = getpid()
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2, 0x1000000})

45.165260873s ago: executing program 38 (id=2767):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
r3 = getpid()
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2, 0x1000000})

42.824716866s ago: executing program 8 (id=2822):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

42.773854524s ago: executing program 8 (id=2825):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x88000cc, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
close(r1)

42.636213476s ago: executing program 8 (id=2835):
write(0xffffffffffffffff, &(0x7f0000000100)='>', 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

42.43407315s ago: executing program 8 (id=2830):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvTH8gArYi/uCHWkVj44+WAioHD2o08YCJiR702LSFIIUaWhMhRMAYPBlj4t149F/wpBdjPJl41bshIYYL4GnM7M7Q3WV3oWWX0e7nkwy8N/OG97775u2+mbdLAANrIv8jidgaEX9ExFg921xgov7XtStn565fOTuXRJa9+3dSK3f1ytm5smh53pYiM5lGpJ8nsbtNvcunzxyfXVxcOFXkp1dOfDS9fPrMC8dOzB5dOLpwcv+hQwcPzLz80v4XexJn3qaruz5d2rPzrQ++fvvwl03xt8TRIxPdDj6dZT2urlrbGtLJcIUNYU2GIiLvrpHa+B+LoVjtvLF487NKGwf0VZZl2ZbOh89nwAaWRHPekIdBUX7Q5/e/5dY6CXi1f9OPyl1+rX4DlMd9rdhqB7IsO1eUGWm5v+2liYh4//w/3+Zb9Oc5BABAkx/z+c/z7eZ/aTzUUO6+Ym1oPCLuj4jtEfFAROyIiAcjamUfjohH1lh/6yLJzfOf9NK6ArtN+fzvlWJtq2n+F2lZZHyoyG2rxT+SHDm2uLCveE0mY2RTnp/pUsdPb/z+VadjjfO/fMvrL+eCRTsuDW9qPmd+dmX2TmJudPlCxK7hdvEnN1YCkojYGRG71lnHsWe/39Pp2K3j76IH60zZdxHP1Pv/fLTEX0q6r09O3xOLC/umy6viZr/+dvGdTvXfUfw9kPf/vW2v/xvxjyeN67XLa6/j4p9fdLynWe/1P5q8V0uPFvs+mV1ZOTUTMZocrje6cf/+1XPLfFk+j39yb/vxvz1WX4ndEZFfxI9GxGMR8XjR9ici4smI2Nsl/l9ef+rD9cffX3n882vq/9XEaLTuaZ8YOv7zD02Vjt8U//Xu/X+wlpos9tzO+9/ttGt9VzMAAAD8/6QRsTWSdOpGOk2npurfl98RkS4uLa88d2Tp45Pz9d8IjMdIWj7pGmt4HjpT3NbX8xciov7VgvL4geK58TdDm2v5qbmlxfmqg4cBt6XD+M/9NVR164C+G47YVHUbgGr4vSYMLuMfBpfxD4OrzfjfXEU7gLuv3ef/uQraAdx9LePfsh8MEPf/MLg6jv+N/D//ADU+/2EgLW+OW/9Ivmui/JfWefqGTcTIf6IZd57IkradG2nVDZPoZ6La9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+TcAAP//yinjzA==")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x4000, 0x0, 0x0, r2}])

41.350379792s ago: executing program 8 (id=2845):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000000))
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

41.112863311s ago: executing program 8 (id=2850):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7fff, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xfb, 0x1}, {0x1, 0xd}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)

41.068872389s ago: executing program 39 (id=2850):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7fff, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xfb, 0x1}, {0x1, 0xd}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)

2.286577998s ago: executing program 7 (id=3571):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mprotect(&(0x7f00001b4000/0x2000)=nil, 0x2000, 0x3000005)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

2.173769147s ago: executing program 7 (id=3576):
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
pipe2(&(0x7f0000001440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)

1.899165483s ago: executing program 7 (id=3579):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x4a4, &(0x7f0000001300)="$eJzs3M1rHGUYAPBndjdJvxNr/WitNlrF4kfSpFULCn6A4EFB0EM9SUzSUps20kRoS7BRSr0IWvAughfRv8CTJ1FPgle9S6FIL62eViY7s26S3U2y+dh8/H4w2Xl33pn3feadj3dmdhLAltWb/kkidkXEHxHRHRGF2gzbK0Oa786tqeF/bk0NJ1Euv/V3ks4Wt29NDedZk+xzZyVRShdUuJrES3XKnbh0+ezQ2NjohSzdP3nug/6JS5efPnNu6PTo6dHzgydOHD828Nyzg8+sSJxpnW4f+Gj84P7X3rn+xvDJ6+/98n0SsSOfXhvHMj3fXR2dqq6TuR5bocLWi90140mpjRVhSboiIm2ujpn9vzuKV/dUp3XHq5+0tXLAqiqXy+XBxpOny8AmlkQrcxWzYwewceUn+vT6Nx/WqOuxLtx8uXIBlMZ9JxsqU0qV+yBdlWuj3atUfm9EnJz+96t0iCXfh+hYpVoBAJvZj2n/56k6/b9SxL01+fZkz4Z6IuKuiNgbEXdHxL6IuCcqee+LiPvrF9P7boPye+ek5/d/CjeWEd6C0v7fC9mzrdn9v+pTsJ5ilto9E39HcurM2OjRbJ0ciY6uND1Qd+lJxHT6+fvnjcqv7f+lQ1p+3hfM6nGj1DV7npGhyaFlB565+XHEgVK9+JMo/R9F7I+IAy2WceaJbw/O/qZYHVs4/iZW4DlT+euIxyvtPx1z4s8lzZ9P9m+LsdGj/flWMd+vv117s1H5lfgL0Tz+7csPtIG0/XfU2/5frMbfk9Q+r52Yt4jOhcq49uenDa9pWt3+O5O3ZxV+cWhy8sJARGfy+vzva25w5+mLI9/N5E/jP3K4/v6/N5snjf+BiEg34gcj4qGIOJTV/eGIeCQiDjeJ/+dXHn2/YfyHFr/9Tzcpo1Vp/CN1j3+N2n8JI9uyJZz96YdG5VfbP2+wuu1/PE/MVGoxx7/F1rSVdQYAAAAbTSEidkVS6KuOFwp9fZXfy++LHYWx8YnJJ0+Nf3h+pPKOQE90FPI7Xd0190MHsnvDeXowS1/J0sey+8ZfFrfPpPuGx8dG2h08bHE7G+z/qb+K7a4dsOrmPUcrd7enIsCa874mbF2t7/+OHLDRLbAXF9aqHsDacxaHrave/n+lNpFE5VfywKbj/A9bV3X//2IRmWte95r78iaw8TQ7//spAGxu+v+wJbX0Xv96GolvIprnSdZLVZc08tlyZi+tQQ2j0Mb109mWRhksRrRxkygt9r9axKXylWUX2u4jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMr4LwAA//9nM9m2")
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000012c0), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x5, 0x0, 0x1534a1bca631fc4, 0xfc8, 0x20c202a1})

1.61582589s ago: executing program 6 (id=3582):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.31434272s ago: executing program 6 (id=3584):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="96", 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)

1.294326124s ago: executing program 6 (id=3586):
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x771e, 0x16, 0x0, 0x0)

1.252173491s ago: executing program 7 (id=3587):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x3)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, 0x0, 0x0)

1.184009772s ago: executing program 6 (id=3589):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1.163864305s ago: executing program 7 (id=3591):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

705.086822ms ago: executing program 4 (id=3605):
r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
utimensat(r2, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0)

665.952199ms ago: executing program 4 (id=3607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r2, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x11, 0x6, @random="c62599a33a3d"}, 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

555.256607ms ago: executing program 4 (id=3612):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

528.494912ms ago: executing program 0 (id=3614):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r1, 0x0, r0, 0x0, 0x7fffe000, 0x1)

475.250811ms ago: executing program 0 (id=3616):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)

474.887101ms ago: executing program 3 (id=3617):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0)

417.0779ms ago: executing program 3 (id=3618):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x0, 0x8, 0x0, 0x0, 0x8, 0x10})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000"], 0x50)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)}, 0x20)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

416.605761ms ago: executing program 0 (id=3619):
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080019726515cd047c9ecda4c0250f00000000000000000921907864820200084e210e"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

337.928124ms ago: executing program 4 (id=3620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
close(0x3)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f00000001c0)={{@_ha_fsid={[0x6, 0x3ff]}, {0x0, 0x9, 0x7e, 0x2}}, {{[0xfc, 0x3, 0x68f, 0x9]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000000)=[{{@align=0x5, {0x32b0, 0x81, 0x61, 0x35}}, 0x2, 0x0, '9p\x00'}, {{@_ha_fsid={[0xf, 0x100]}, {0x6, 0x1, 0x0, 0x1}}, 0x8d, 0x0, '+:$)\x00'}, {{@align=0x10001, {0x400, 0x5, 0xa, 0xb}}, 0x7, 0x0, '}\x00'}]}})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

335.612604ms ago: executing program 6 (id=3621):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)

324.480716ms ago: executing program 4 (id=3622):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

292.672871ms ago: executing program 0 (id=3623):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000240)="ef10f474fc", 0x5, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x85, 0x6, @broadcast}, 0x14)

255.468028ms ago: executing program 3 (id=3624):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00')
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/130, 0x82}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r3, 0x8, 0x93, 0x80}, &(0x7f0000000280)=0x10)

239.60678ms ago: executing program 6 (id=3625):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000000, 0xdd5}, 0x14000, 0x832, 0x10000, 0x5, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

238.96734ms ago: executing program 7 (id=3626):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000001000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x80, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r0 = io_uring_setup(0x7025, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r0, 0x2219, 0x7721, 0x52, 0x0, 0x0)

174.388711ms ago: executing program 3 (id=3627):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

174.063471ms ago: executing program 0 (id=3628):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000064c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0x6, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

169.367572ms ago: executing program 3 (id=3629):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x3)
accept4(r0, 0x0, 0x0, 0x0)

70.748389ms ago: executing program 3 (id=3630):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
r1 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x1000})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

68.534309ms ago: executing program 4 (id=3631):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0x80001da})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

0s ago: executing program 0 (id=3632):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5)

kernel console output (not intermixed with test programs):

ave_0) entered blocking state
[  152.625548][ T5635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.642782][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.650046][ T5635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.750672][T10191] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.811058][T10191] 8021q: adding VLAN 0 to HW filter on device team0
[  152.836858][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.844025][ T5622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.883457][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.898241][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.905507][ T5622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.936650][T10243] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  153.006403][T10243] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  153.026061][T10243] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  153.052500][T10243] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  153.111635][T10191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.223202][T10135] veth0_vlan: entered promiscuous mode
[  153.241286][T10135] veth1_vlan: entered promiscuous mode
[  153.289403][T10243] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.297785][T10135] veth0_macvtap: entered promiscuous mode
[  153.319572][T10243] 8021q: adding VLAN 0 to HW filter on device team0
[  153.330733][T10135] veth1_macvtap: entered promiscuous mode
[  153.345997][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.353225][ T5635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.366735][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.373860][ T5654] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.420095][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.440958][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.489447][ T5654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.502367][ T5654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.518963][ T5654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.551517][T10243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.574950][T10191] veth0_vlan: entered promiscuous mode
[  153.592740][ T5622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.627737][T10191] veth1_vlan: entered promiscuous mode
[  153.670896][T10191] veth0_macvtap: entered promiscuous mode
[  153.690324][T10191] veth1_macvtap: entered promiscuous mode
[  153.718124][T10191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.745657][T10191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.772006][ T5648] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.782832][ T5648] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.828988][ T5648] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.854674][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.868319][ T5648] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.898112][T10458] syzkaller0: entered promiscuous mode
[  153.903685][T10458] syzkaller0: entered allmulticast mode
[  154.020973][T10471] loop7: detected capacity change from 0 to 2048
[  154.065036][T10471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.151923][T10243] veth0_vlan: entered promiscuous mode
[  154.167506][T10243] veth1_vlan: entered promiscuous mode
[  154.188787][T10243] veth0_macvtap: entered promiscuous mode
[  154.203171][T10470] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  154.231333][T10243] veth1_macvtap: entered promiscuous mode
[  154.245941][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.253434][T10470] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  154.270526][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.282396][ T5622] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.292471][ T5622] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.301700][T10470] EXT4-fs (loop7): This should not happen!! Data will be lost
[  154.301700][T10470] 
[  154.312358][ T5622] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.321551][T10470] EXT4-fs (loop7): Total free blocks count 0
[  154.328969][T10470] EXT4-fs (loop7): Free/Dirty block details
[  154.336266][T10470] EXT4-fs (loop7): free_blocks=4096
[  154.344247][ T5622] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.352161][T10470] EXT4-fs (loop7): dirty_blocks=512
[  154.360922][T10470] EXT4-fs (loop7): Block reservation details
[  154.367407][T10470] EXT4-fs (loop7): i_reserved_data_blocks=32
[  154.436637][ T5622] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 496 with error 28
[  154.454168][ T9554] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  154.471314][T10496] netlink: 'syz.8.2473': attribute type 1 has an invalid length.
[  154.604850][T10496] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.737643][T10518] netlink: 'syz.9.2480': attribute type 12 has an invalid length.
[  154.745554][T10518] netlink: 'syz.9.2480': attribute type 29 has an invalid length.
[  154.770225][T10518] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2480'.
[  154.952561][T10528] loop9: detected capacity change from 0 to 2048
[  154.984158][T10528] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.040215][T10527] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  155.055509][T10527] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  155.068355][T10527] EXT4-fs (loop9): This should not happen!! Data will be lost
[  155.068355][T10527] 
[  155.078309][T10527] EXT4-fs (loop9): Total free blocks count 0
[  155.084545][T10527] EXT4-fs (loop9): Free/Dirty block details
[  155.091291][T10527] EXT4-fs (loop9): free_blocks=4096
[  155.096621][T10527] EXT4-fs (loop9): dirty_blocks=512
[  155.102008][T10527] EXT4-fs (loop9): Block reservation details
[  155.108548][T10527] EXT4-fs (loop9): i_reserved_data_blocks=32
[  155.144186][ T5622] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 496 with error 28
[  155.162717][T10243] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  155.262381][   T28] audit: type=1326 audit(1776610553.418:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.309652][   T28] audit: type=1326 audit(1776610553.418:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.334465][   T28] audit: type=1326 audit(1776610553.418:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.361040][   T28] audit: type=1326 audit(1776610553.418:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.361551][T10550] loop7: detected capacity change from 0 to 1024
[  155.385601][   T28] audit: type=1326 audit(1776610553.458:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.443624][T10555] loop1: detected capacity change from 0 to 128
[  155.449985][   T28] audit: type=1326 audit(1776610553.458:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.479700][T10550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.494709][   T28] audit: type=1326 audit(1776610553.468:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.518470][   T28] audit: type=1326 audit(1776610553.468:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.521929][T10550] SELinux:  Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped).
[  155.542106][   T28] audit: type=1326 audit(1776610553.468:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.562190][T10558] syz.1.2494: attempt to access beyond end of device
[  155.562190][T10558] loop1: rw=2049, sector=841, nr_sectors = 200 limit=128
[  155.575982][   T28] audit: type=1326 audit(1776610553.468:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  155.680106][ T9554] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.858765][T10571] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2497'.
[  156.131462][T10589] loop7: detected capacity change from 0 to 512
[  156.721507][T10608] loop8: detected capacity change from 0 to 764
[  157.058923][T10616] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  157.084024][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2523'.
[  157.203932][T10636] loop9: detected capacity change from 0 to 128
[  157.308815][T10636] syz.9.2529: attempt to access beyond end of device
[  157.308815][T10636] loop9: rw=0, sector=121, nr_sectors = 920 limit=128
[  157.415227][T10646] netlink: 'syz.7.2534': attribute type 1 has an invalid length.
[  157.485424][T10650] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2545'.
[  157.658981][T10646] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.759666][T10659] loop9: detected capacity change from 0 to 512
[  157.812861][T10659] EXT4-fs: Ignoring removed bh option
[  157.850040][T10659] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  157.897095][T10659] EXT4-fs (loop9): 1 truncate cleaned up
[  157.903228][T10659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.984252][T10659] Direct I/O collision with buffered writes! File: /file1 Comm: syz.9.2538
[  158.028713][T10243] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.073010][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'.
[  158.090770][T10678] loop9: detected capacity change from 0 to 512
[  158.138510][T10683] loop1: detected capacity change from 0 to 1024
[  158.159947][T10678] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.193129][T10685] delete_channel: no stack
[  158.209555][T10689] geneve2: entered promiscuous mode
[  158.217825][T10683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.248071][T10689] geneve2: entered allmulticast mode
[  158.254194][T10243] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  158.259529][ T5654] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  158.290454][ T5654] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  158.314994][ T5654] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  158.350859][T10135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.361439][ T5654] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  158.446261][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'.
[  158.786366][T10726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.799596][T10726] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.835898][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.857525][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.869413][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.882515][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.894567][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.906369][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.918661][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.930885][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.942717][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  158.954637][T10135] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.'
[  159.118530][T10135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.134709][ T5655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.191665][ T5655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.255769][ T5655] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.310303][ T5655] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.506874][ T5655] bridge_slave_1: left allmulticast mode
[  159.516971][ T5655] bridge_slave_1: left promiscuous mode
[  159.522748][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.533197][ T5655] bridge_slave_0: left allmulticast mode
[  159.539263][ T5655] bridge_slave_0: left promiscuous mode
[  159.550400][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.625661][T10787] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2590'.
[  159.709552][ T5655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.720257][ T5655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.733264][ T5655] bond0 (unregistering): Released all slaves
[  159.790200][ T5655] hsr_slave_0: left promiscuous mode
[  159.795969][ T5655] hsr_slave_1: left promiscuous mode
[  159.802196][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.811038][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.818797][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.826815][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.841210][ T5655] veth1_macvtap: left promiscuous mode
[  159.846875][ T5655] veth0_macvtap: left promiscuous mode
[  159.866472][ T5655] veth1_vlan: left promiscuous mode
[  159.877452][ T5655] veth0_vlan: left promiscuous mode
[  159.996525][ T5655] team0 (unregistering): Port device team_slave_1 removed
[  160.024183][ T5655] team0 (unregistering): Port device team_slave_0 removed
[  160.080181][T10758] chnl_net:caif_netlink_parms(): no params data found
[  160.223296][T10758] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.260863][T10758] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.275789][T10758] bridge_slave_0: entered allmulticast mode
[  160.286467][T10758] bridge_slave_0: entered promiscuous mode
[  160.295859][T10830] set_capacity_and_notify: 2 callbacks suppressed
[  160.295878][T10830] loop9: detected capacity change from 0 to 512
[  160.313089][T10758] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.349229][T10758] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.363186][T10758] bridge_slave_1: entered allmulticast mode
[  160.370190][T10758] bridge_slave_1: entered promiscuous mode
[  160.379610][T10830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.396228][T10830] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.420314][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.430884][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.453244][T10243] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.503690][T10758] team0: Port device team_slave_0 added
[  160.515177][T10842] loop8: detected capacity change from 0 to 128
[  160.524654][T10842] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.543223][T10758] team0: Port device team_slave_1 added
[  160.556835][T10842] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.616671][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.639862][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.695040][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.728392][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.747958][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.774370][T10844] loop9: detected capacity change from 0 to 32768
[  160.805122][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.877726][T10758] hsr_slave_0: entered promiscuous mode
[  160.919304][T10758] hsr_slave_1: entered promiscuous mode
[  161.018133][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  161.018150][   T28] audit: type=1400 audit(1776610559.178:1218): avc:  denied  { read } for  pid=10873 comm="syz.8.2604" path="socket:[35267]" dev="sockfs" ino=35267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  161.349593][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2616'.
[  161.362578][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2616'.
[  161.371518][ T5655] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.382674][ T5655] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.407057][ T5655] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.416919][ T5655] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.529925][T10758] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  161.539373][T10758] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  161.549974][T10758] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  161.560772][T10758] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  161.691637][T10758] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.738212][T10758] 8021q: adding VLAN 0 to HW filter on device team0
[  161.787263][T10758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.843670][T10758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.002885][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.010018][ T5647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.041342][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2627'.
[  162.068468][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.075726][ T5647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.433052][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.754121][T10758] veth0_vlan: entered promiscuous mode
[  162.799396][T10758] veth1_vlan: entered promiscuous mode
[  162.862312][T10758] veth0_macvtap: entered promiscuous mode
[  162.884814][T10758] veth1_macvtap: entered promiscuous mode
[  162.911593][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.927439][T11028] loop8: detected capacity change from 0 to 128
[  162.931564][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.962335][T11028] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  162.982088][ T5647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.997054][ T5635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.005878][ T5635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.028541][ T5635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.067718][ T5635] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.336872][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2640'.
[  163.558742][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'.
[  163.600842][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2645'.
[  163.658742][ T5648] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.669020][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'.
[  163.687235][ T5648] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.696374][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2645'.
[  163.714093][ T5648] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.729194][ T5648] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.945929][T11125] loop2: detected capacity change from 0 to 7
[  164.218552][T11148] sch_tbf: burst 545 is lower than device lo mtu (65550) !
[  164.747417][T11212] dummy0: entered promiscuous mode
[  164.824917][T11212] dummy0: left promiscuous mode
[  164.885946][   T28] audit: type=1326 audit(1776610563.038:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  164.954050][   T28] audit: type=1326 audit(1776610563.038:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.032467][   T28] audit: type=1326 audit(1776610563.038:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.103981][   T28] audit: type=1326 audit(1776610563.038:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.176199][   T28] audit: type=1326 audit(1776610563.038:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.228768][   T28] audit: type=1326 audit(1776610563.108:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.271661][   T28] audit: type=1326 audit(1776610563.108:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.320653][   T28] audit: type=1326 audit(1776610563.108:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.348011][T11245] loop7: detected capacity change from 0 to 512
[  165.363691][T11245] FAT-fs (loop7): bogus logical sector size 0
[  165.373622][T11245] FAT-fs (loop7): Can't find a valid FAT filesystem
[  165.383711][   T28] audit: type=1326 audit(1776610563.138:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.8.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x7ffc0000
[  165.881374][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'.
[  165.979672][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'.
[  166.271661][T11293] loop5: detected capacity change from 0 to 7
[  166.317806][T11287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.352849][T11287] batadv0: mtu less than device minimum
[  166.361438][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.372421][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.383414][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.394836][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.405918][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.417044][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.428155][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.439111][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.450167][T11287] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  166.568114][T11303] loop8: detected capacity change from 0 to 512
[  166.588102][T11303] EXT4-fs: Ignoring removed bh option
[  166.618320][T11287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.625791][T11303] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  166.652058][T11303] EXT4-fs error (device loop8): ext4_iget_extra_inode:5040: inode #15: comm syz.8.2704: corrupted in-inode xattr: e_value size too large
[  166.666831][T11303] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  166.667384][T11303] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2704: couldn't read orphan inode 15 (err -117)
[  166.679840][T11311] loop4: detected capacity change from 0 to 256
[  166.688449][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  166.688469][    C1] EXT4-fs (loop8): initial error at time 1776610564: ext4_iget_extra_inode:5040: inode 15
[  166.711129][    C1] EXT4-fs (loop8): last error at time 1776610564: ext4_iget_extra_inode:5040: inode 15
[  166.721751][T11303] loop8: lost filesystem error report for type 5 error -117
[  166.722397][T11303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.748693][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  166.748711][   T28] audit: type=1400 audit(1776610564.908:1251): avc:  denied  { create } for  pid=11302 comm="syz.8.2704" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  166.800187][T11303] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.2704: Unrecognised inode hash code 4
[  166.816983][T11303] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2704: Corrupt directory, running e2fsck is recommended
[  166.858008][T11318] loop4: detected capacity change from 0 to 512
[  166.876445][T10191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.887343][T11318] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  166.933344][T11318] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  166.949440][T11318] EXT4-fs (loop4): 1 truncate cleaned up
[  166.955587][T11318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.049779][T10758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.059175][T11334] loop9: detected capacity change from 0 to 1024
[  167.103995][T11334] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.142591][T10243] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.342714][T11360] netlink: 'syz.8.2727': attribute type 4 has an invalid length.
[  167.356886][ T5635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.385653][T11360] __nla_validate_parse: 1 callbacks suppressed
[  167.385672][T11360] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2727'.
[  167.401327][   T28] audit: type=1326 audit(1776610565.538:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  167.425281][   T28] audit: type=1326 audit(1776610565.538:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  167.449586][   T28] audit: type=1326 audit(1776610565.538:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  167.477947][T11360] .`: renamed from bond0 (while UP)
[  167.488512][   T28] audit: type=1326 audit(1776610565.538:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  167.528337][ T5635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.529198][   T28] audit: type=1326 audit(1776610565.538:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  167.604117][ T5635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.642772][T11374] loop8: detected capacity change from 0 to 512
[  167.656527][T11374] EXT4-fs: inline encryption not supported
[  167.668458][T11378] loop7: detected capacity change from 0 to 1024
[  167.687104][T11374] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  167.699843][ T5635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.732015][T11374] EXT4-fs (loop8): 1 truncate cleaned up
[  167.745203][T11374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.759945][T11378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  167.784760][T11378] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.822050][T11390] netlink: 'syz.3.2735': attribute type 1 has an invalid length.
[  167.845405][T10191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.871791][T11390] bond0: (slave geneve3): making interface the new active one
[  167.879863][T11390] bond0: (slave geneve3): Enslaving as an active interface with an up link
[  167.902701][ T5622] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  167.919100][T11378] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.934393][ T5622] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  167.983976][ T5622] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  168.015364][ T5635] bridge_slave_1: left allmulticast mode
[  168.021374][ T5635] bridge_slave_1: left promiscuous mode
[  168.030274][T11378] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  168.050862][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.061236][T11378] EXT4-fs (loop7): This should not happen!! Data will be lost
[  168.061236][T11378] 
[  168.072065][T11406] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.093281][ T5635] bridge_slave_0: left allmulticast mode
[  168.101769][ T5635] bridge_slave_0: left promiscuous mode
[  168.107756][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.118861][T11375] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.134272][T11406] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.191072][T11375] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.220270][T11406] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.234945][T11375] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.249707][T11406] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.266494][T11375] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.283879][ T5635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.293987][ T5635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.303823][ T5635] bond0 (unregistering): Released all slaves
[  168.317029][ T5622] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  168.343780][T11406] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: block 1: comm syz.7.2730: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.403011][ T5635] hsr_slave_0: left promiscuous mode
[  168.413216][ T5635] hsr_slave_1: left promiscuous mode
[  168.437210][ T5635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.462146][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.482904][ T5635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.492766][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.524082][ T5635] veth1_macvtap: left promiscuous mode
[  168.532995][ T5635] veth0_macvtap: left promiscuous mode
[  168.546991][ T5635] veth1_vlan: left promiscuous mode
[  168.577837][ T5635] veth0_vlan: left promiscuous mode
[  168.610878][ T9554] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  168.650955][ T9554] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  168.733917][ T5635] team0 (unregistering): Port device team_slave_1 removed
[  168.751814][ T5635] team0 (unregistering): Port device team_slave_0 removed
[  168.768547][   T28] audit: type=1326 audit(1776610566.928:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11428 comm="syz.8.2745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9741dc819 code=0x0
[  168.829161][T11363] chnl_net:caif_netlink_parms(): no params data found
[  168.960067][   T28] audit: type=1326 audit(1776610567.108:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.7.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  168.984657][T11363] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.992060][T11363] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.999794][T11363] bridge_slave_0: entered allmulticast mode
[  169.006409][T11363] bridge_slave_0: entered promiscuous mode
[  169.012171][   T28] audit: type=1326 audit(1776610567.108:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.7.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  169.015501][T11363] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.043078][T11363] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.050279][T11363] bridge_slave_1: entered allmulticast mode
[  169.056962][T11363] bridge_slave_1: entered promiscuous mode
[  169.063447][   T28] audit: type=1326 audit(1776610567.118:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.7.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  169.099806][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.110620][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.131488][T11363] team0: Port device team_slave_0 added
[  169.138389][T11363] team0: Port device team_slave_1 added
[  169.156487][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.167571][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.194168][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.205653][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.242170][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.268840][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.330935][T11363] hsr_slave_0: entered promiscuous mode
[  169.331699][T11483] loop8: detected capacity change from 0 to 1024
[  169.347296][T11363] hsr_slave_1: entered promiscuous mode
[  169.376785][T11483] EXT4-fs (loop8): VFS: Can't find ext4 filesystem
[  169.899395][T11363] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  169.925636][T11363] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  169.935036][T11363] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  169.945475][T11363] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  170.013086][T11363] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.030175][T11363] 8021q: adding VLAN 0 to HW filter on device team0
[  170.040790][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.047888][ T5635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.060039][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.067138][ T5635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.139740][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.252131][ T5635] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.292707][T11607] loop8: detected capacity change from 0 to 1024
[  170.312393][ T5635] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.331275][T11607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.379366][T10191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.403230][ T5635] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.439261][T11363] veth0_vlan: entered promiscuous mode
[  170.463255][T11363] veth1_vlan: entered promiscuous mode
[  170.486811][ T5635] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.530808][T11363] veth0_macvtap: entered promiscuous mode
[  170.548663][T11363] veth1_macvtap: entered promiscuous mode
[  170.561566][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.573560][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.621255][ T5608] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.633080][ T5608] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.649624][ T5608] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.663783][ T5608] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.723051][ T5635] bridge_slave_1: left allmulticast mode
[  170.729442][ T5635] bridge_slave_1: left promiscuous mode
[  170.735171][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.743083][ T5635] bridge_slave_0: left allmulticast mode
[  170.748948][ T5635] bridge_slave_0: left promiscuous mode
[  170.754699][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.831280][ T5635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.841584][ T5635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.851607][ T5635] bond0 (unregistering): Released all slaves
[  170.906664][ T5635] hsr_slave_0: left promiscuous mode
[  170.923517][ T5635] hsr_slave_1: left promiscuous mode
[  170.946772][ T5635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.968946][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.987884][ T5635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.997629][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.020358][ T5635] veth1_macvtap: left promiscuous mode
[  171.026699][ T5635] veth0_macvtap: left promiscuous mode
[  171.034586][ T5635] veth1_vlan: left promiscuous mode
[  171.040254][ T5635] veth0_vlan: left promiscuous mode
[  171.159511][ T5635] team0 (unregistering): Port device team_slave_1 removed
[  171.183298][ T5635] team0 (unregistering): Port device team_slave_0 removed
[  171.346149][T11623] chnl_net:caif_netlink_parms(): no params data found
[  171.764220][T11623] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.787810][T11623] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.795118][T11623] bridge_slave_0: entered allmulticast mode
[  171.802375][T11623] bridge_slave_0: entered promiscuous mode
[  171.811211][T11623] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.818869][T11623] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.826140][T11623] bridge_slave_1: entered allmulticast mode
[  171.832748][T11623] bridge_slave_1: entered promiscuous mode
[  171.851666][T11623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.875135][T11623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.905192][T11623] team0: Port device team_slave_0 added
[  171.916509][T11623] team0: Port device team_slave_1 added
[  171.960865][T11623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.968036][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.002290][T11623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.015757][T11623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.022909][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.035072][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  172.035088][   T28] audit: type=1400 audit(1776610570.188:1293): avc:  denied  { write } for  pid=11770 comm="syz.4.2808" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  172.049711][T11623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.115340][T11623] hsr_slave_0: entered promiscuous mode
[  172.121621][T11623] hsr_slave_1: entered promiscuous mode
[  172.128095][T11623] debugfs: 'hsr0' already exists in 'hsr'
[  172.133842][T11623] Cannot create hsr debugfs directory
[  172.198570][   T28] audit: type=1400 audit(1776610570.358:1294): avc:  denied  { write } for  pid=11783 comm="syz.7.2810" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  172.462036][T11623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  172.471992][T11623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  172.483820][T11623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  172.500969][T11623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  172.539694][   T28] audit: type=1326 audit(1776610570.698:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.569213][T11623] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.624050][T11623] 8021q: adding VLAN 0 to HW filter on device team0
[  172.653183][   T28] audit: type=1326 audit(1776610570.738:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.668193][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.683861][ T5608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.705549][   T28] audit: type=1326 audit(1776610570.738:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.716720][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.736172][ T5608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.763132][   T28] audit: type=1326 audit(1776610570.738:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.832796][   T28] audit: type=1326 audit(1776610570.738:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.883794][   T28] audit: type=1326 audit(1776610570.738:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.908630][   T28] audit: type=1326 audit(1776610570.738:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  172.944505][   T28] audit: type=1326 audit(1776610570.738:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  173.001716][T11881] loop8: detected capacity change from 0 to 512
[  173.010691][T11881] EXT4-fs: inline encryption not supported
[  173.021356][T11881] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  173.044572][T11881] EXT4-fs (loop8): 1 truncate cleaned up
[  173.051694][T11881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.126029][T11881] loop8: detected capacity change from 512 to 0
[  173.134759][T11623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.165518][T11892] EXT4-fs error (device loop8): ext4_get_inode_loc:4935: inode #18: block 9: comm syz.8.2830: unable to read itable block
[  173.200121][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.208950][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.219733][T11892] EXT4-fs error (device loop8): ext4_get_inode_loc:4935: inode #18: block 9: comm syz.8.2830: unable to read itable block
[  173.233424][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.244200][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.286055][T11914] loop7: detected capacity change from 0 to 2048
[  173.303899][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.307823][T11892] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: IO failure
[  173.353154][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.368971][ T3302]  loop7: p3 < > p4 < >
[  173.373250][ T3302] loop7: partition table partially beyond EOD, truncated
[  173.380893][T11923] loop4: detected capacity change from 0 to 512
[  173.383828][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.395543][ T3302] loop7: p3 start 4284289 is beyond EOD, truncated
[  173.400984][T11892] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #18: comm syz.8.2830: mark_inode_dirty error
[  173.423538][T11923] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  173.433157][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.441762][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.456012][T11923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  173.464894][T11914]  loop7: p3 < > p4 < >
[  173.469694][T11914] loop7: partition table partially beyond EOD, truncated
[  173.477338][T11914] loop7: p3 start 4284289 is beyond EOD, truncated
[  173.484440][T11923] System zones: 1-12
[  173.487969][T11892] EXT4-fs error (device loop8): ext4_get_inode_loc:4935: inode #18: block 9: comm syz.8.2830: unable to read itable block
[  173.496753][T11923] EXT4-fs (loop4): orphan cleanup on readonly fs
[  173.507993][T11923] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2840: bg 0: block 361: padding at end of block bitmap is not set
[  173.514033][T11623] veth0_vlan: entered promiscuous mode
[  173.523098][T11923] loop4: lost filesystem error report for type 5 error -117
[  173.529174][T11923] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  173.545245][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  173.545266][    C1] EXT4-fs (loop4): initial error at time 1776610571: ext4_validate_block_bitmap:441
[  173.545288][    C1] EXT4-fs (loop4): last error at time 1776610571: ext4_validate_block_bitmap:441
[  173.560195][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.561511][T11923] loop4: lost filesystem error report for type 5 error -117
[  173.581895][T11923] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2840: attempt to clear invalid blocks 33619980 len 1
[  173.607796][T11923] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  173.607892][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.608634][T11623] veth1_vlan: entered promiscuous mode
[  173.617238][T11892] EXT4-fs error (device loop8): ext4_get_max_inline_size:121: inode #18: comm syz.8.2830: can't get inode location 18
[  173.644884][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.644913][T11923] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2840: invalid indirect mapped block 1811939328 (level 0)
[  173.667628][T11923] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  173.667775][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.674011][T11623] veth0_macvtap: entered promiscuous mode
[  173.689894][T11923] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2840: invalid indirect mapped block 2 (level 2)
[  173.703498][T11892] EXT4-fs error (device loop8): ext4_get_inode_loc:4935: inode #18: block 9: comm syz.8.2830: unable to read itable block
[  173.716526][T11923] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  173.716766][T11923] EXT4-fs (loop4): 1 truncate cleaned up
[  173.735631][T11923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  173.754572][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.763044][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.770212][T11892] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: IO failure
[  173.781027][T11623] veth1_macvtap: entered promiscuous mode
[  173.794662][T11946] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2842'.
[  173.808555][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.818995][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.826737][T11892] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #18: comm syz.8.2830: mark_inode_dirty error
[  173.842558][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.844114][T11923] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 5: comm syz.4.2840: lblock 0 mapped to illegal pblock 5 (length 1)
[  173.862226][T11892] EXT4-fs (loop8): I/O error while writing superblock
[  173.871483][T11623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.889130][T11623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.899465][T11923] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.2840: error -117 reading directory block
[  173.900586][T11892] EXT4-fs error (device loop8): ext4_wait_block_bitmap:584: comm syz.8.2830: Cannot read block bitmap - block_group = 0, block_bitmap = 3
[  173.951932][ T5635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.960510][T11892] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  173.977495][ T5635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.986694][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  173.999381][ T5635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.008567][ T5635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.070225][T10191] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  174.334582][ T5622] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.356399][ T5622] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.460678][ T5622] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.471448][ T5622] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.529779][ T5622] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.541897][ T5622] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.611646][ T5622] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.624319][ T5622] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.690618][T12004] chnl_net:caif_netlink_parms(): no params data found
[  174.811896][ T5622] bridge_slave_1: left allmulticast mode
[  174.823989][ T5622] bridge_slave_1: left promiscuous mode
[  174.844891][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.858642][T12045] loop7: detected capacity change from 0 to 128
[  174.868613][ T5622] bridge_slave_0: left allmulticast mode
[  174.874399][ T5622] bridge_slave_0: left promiscuous mode
[  174.880947][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.917909][T12045] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.933727][T12045] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.989458][ T9554] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.139263][ T5622] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.155161][ T5622] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.167738][ T5622] .` (unregistering): Released all slaves
[  175.175995][ T5622] bond1 (unregistering): Released all slaves
[  175.186238][ T5622] bond2 (unregistering): Released all slaves
[  175.202873][ T5622] hsr_slave_0: left promiscuous mode
[  175.223399][ T5622] hsr_slave_1: left promiscuous mode
[  175.232324][ T5622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.240077][ T5622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.260810][ T5622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.268374][ T5622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.282541][ T5622] veth1_macvtap: left promiscuous mode
[  175.288529][ T5622] veth0_macvtap: left promiscuous mode
[  175.294238][ T5622] veth1_vlan: left promiscuous mode
[  175.300152][ T5622] veth0_vlan: left promiscuous mode
[  175.420264][ T5622] team0 (unregistering): Port device team_slave_1 removed
[  175.439007][ T5622] team0 (unregistering): Port device team_slave_0 removed
[  175.516348][T12004] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.524729][T12004] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.532345][T12004] bridge_slave_0: entered allmulticast mode
[  175.539188][T12004] bridge_slave_0: entered promiscuous mode
[  175.564135][T12004] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.577174][T12004] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.594720][T12004] bridge_slave_1: entered allmulticast mode
[  175.601614][T12004] bridge_slave_1: entered promiscuous mode
[  175.630698][T12004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.649934][T12004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.672982][T12004] team0: Port device team_slave_0 added
[  175.691261][T12004] team0: Port device team_slave_1 added
[  175.753861][T12004] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.785070][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.819422][T12096] loop4: detected capacity change from 0 to 1024
[  175.848613][T12096] EXT4-fs: Ignoring removed i_version option
[  175.854771][T12096] EXT4-fs: Ignoring removed bh option
[  175.859147][T12004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.890434][T12004] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.917189][T12096] ext4: Unknown parameter 'noacl'
[  175.921733][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.017935][T12004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.110422][T12004] hsr_slave_0: entered promiscuous mode
[  176.131038][T12004] hsr_slave_1: entered promiscuous mode
[  176.150169][T12004] debugfs: 'hsr0' already exists in 'hsr'
[  176.166859][T12004] Cannot create hsr debugfs directory
[  176.740853][T12004] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  176.775850][T12004] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  176.809257][T12004] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  176.837582][T12004] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  176.936995][T12004] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.970261][T12004] 8021q: adding VLAN 0 to HW filter on device team0
[  176.992122][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.999301][ T5635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.012409][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.019572][ T5635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.249445][T12004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.579964][T12004] veth0_vlan: entered promiscuous mode
[  177.607669][T12004] veth1_vlan: entered promiscuous mode
[  177.657468][T12004] veth0_macvtap: entered promiscuous mode
[  177.686703][T12004] veth1_macvtap: entered promiscuous mode
[  177.720248][T12004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.754060][T12004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.781098][ T5608] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.976423][ T5608] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.987729][ T5608] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.041871][ T5608] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.045342][T12257] loop4: detected capacity change from 0 to 512
[  180.070880][T12257] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  180.079660][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'.
[  180.105875][T12257] EXT4-fs (loop4): 1 truncate cleaned up
[  180.117879][T12254] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.133423][T12257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.159267][T12254] bridge_slave_0 (unregistering): left allmulticast mode
[  180.166425][T12254] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.208483][   T28] kauditd_printk_skb: 43 callbacks suppressed
[  180.208500][   T28] audit: type=1400 audit(1776610578.368:1346): avc:  denied  { read } for  pid=12275 comm="syz.3.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  180.283621][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.627818][T12336] loop7: detected capacity change from 0 to 128
[  180.873814][T12359] SELinux:  Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped).
[  180.894603][   T28] audit: type=1400 audit(1776610579.048:1347): avc:  denied  { relabelto } for  pid=12357 comm="syz.4.2934" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0"
[  180.924864][   T28] audit: type=1400 audit(1776610579.048:1348): avc:  denied  { associate } for  pid=12357 comm="syz.4.2934" name="loop9" dev="devtmpfs" ino=109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hostname_exec_t:s0"
[  180.976273][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'.
[  181.129628][T12377] loop4: detected capacity change from 0 to 512
[  181.154204][T12377] EXT4-fs: Ignoring removed nobh option
[  181.171059][T12377] EXT4-fs (loop4): 1 orphan inode deleted
[  181.179769][T12377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.409856][T12416] loop0: detected capacity change from 0 to 512
[  181.419302][T12416] EXT4-fs: test_dummy_encryption option not supported
[  181.788085][   T28] audit: type=1326 audit(1776610579.948:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  181.843888][   T28] audit: type=1326 audit(1776610579.948:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  181.880322][   T28] audit: type=1326 audit(1776610579.978:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  181.933735][   T28] audit: type=1326 audit(1776610579.978:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  181.970207][   T28] audit: type=1326 audit(1776610579.978:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  181.995698][   T28] audit: type=1326 audit(1776610580.028:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  182.000166][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.019897][   T28] audit: type=1326 audit(1776610580.038:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58986c819 code=0x7ffc0000
[  182.109721][T12456] loop6: detected capacity change from 0 to 8192
[  182.335769][T12004] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  182.356236][T12004] FAT-fs (loop6): Filesystem has been set read-only
[  182.634770][T12507] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.642178][T12507] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.721530][T12507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.735372][T12507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.800205][ T5648] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.823143][ T5648] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.930988][ T5648] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.151560][ T5648] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.309089][T12587] loop6: detected capacity change from 0 to 512
[  183.334190][T12587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  183.355197][T12595] xt_hashlimit: size too large, truncated to 1048576
[  183.364048][T12587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.385159][T12587] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.405890][T12600] loop4: detected capacity change from 0 to 512
[  183.419186][T12602] �: renamed from vxcan1 (while UP)
[  183.437656][T12587] EXT4-fs error (device loop6): ext4_resize_begin:60: comm syz.6.2966: resize_inode disabled but reserved GDT blocks non-zero
[  183.461927][T12600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.483144][T12600] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.526013][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.548390][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.062380][T12691] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2990'.
[  184.073883][T12691] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.139020][T12691] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2990'.
[  184.251321][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2998'.
[  184.276097][T12714] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2998'.
[  184.351894][T12730] syzkaller1: entered promiscuous mode
[  184.375428][T12730] syzkaller1: entered allmulticast mode
[  184.397594][ T5647] Bluetooth: hci0: Frame reassembly failed (-84)
[  184.406355][ T8422] Bluetooth: hci0: unexpected event 0x07 length: 0 < 255
[  184.614521][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'.
[  184.648289][T12763] erspan0: entered promiscuous mode
[  184.653597][T12763] macvtap1: entered promiscuous mode
[  184.669695][T12763] macvtap1: entered allmulticast mode
[  184.675521][T12763] erspan0: entered allmulticast mode
[  184.687514][T12765] macvtap1: left promiscuous mode
[  184.692667][T12765] macvtap1: left allmulticast mode
[  184.709920][T12765] erspan0: left allmulticast mode
[  184.933133][T12798] loop4: detected capacity change from 0 to 1024
[  184.944719][T12798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  184.958043][T12798] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  184.973015][T12798] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.3023: lblock 2 mapped to illegal pblock 2 (length 1)
[  184.987288][T12798] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  184.987442][T12798] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 48: comm syz.4.3023: lblock 0 mapped to illegal pblock 48 (length 1)
[  185.010811][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  185.010840][    C1] EXT4-fs (loop4): initial error at time 1776610583: ext4_map_blocks:786: inode 3: block 2
[  185.010877][    C1] EXT4-fs (loop4): last error at time 1776610583: ext4_map_blocks:786: inode 3: block 2
[  185.039363][T12798] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  185.039549][T12798] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3023: Failed to acquire dquot type 0
[  185.060583][T12798] loop4: lost filesystem error report for type 5 error -117
[  185.060825][T12798] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem
[  185.077650][T12798] loop4: lost filesystem error report for type 5 error -117
[  185.080587][T12798] EXT4-fs error (device loop4): ext4_evict_inode:265: inode #11: comm syz.4.3023: mark_inode_dirty error
[  185.099705][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3024'.
[  185.135574][T12798] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  185.135900][T12798] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -117)
[  185.156634][T12798] EXT4-fs (loop4): 1 orphan inode deleted
[  185.165253][T12798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.177782][ T5647] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:52: lblock 1 mapped to illegal pblock 1 (length 1)
[  185.193039][ T5647] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  185.193298][ T5647] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:52: Failed to release dquot type 0
[  185.214061][ T5647] loop4: lost filesystem error report for type 5 error -117
[  185.223605][T12798] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm syz.4.3023: lblock 1 mapped to illegal pblock 1 (length 1)
[  185.245490][T12798] __quota_error: 64 callbacks suppressed
[  185.245537][T12798] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1
[  185.263540][T12798] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 60928
[  185.274583][T12798] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3023: Failed to acquire dquot type 0
[  185.300072][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.309593][ T5622] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1)
[  185.324137][ T5622] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  185.324290][ T5622] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  185.343543][ T5622] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:39: Failed to release dquot type 0
[  185.357228][ T5622] loop4: lost filesystem error report for type 5 error -117
[  185.357572][T11363] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0
[  185.399934][T11363] loop4: lost filesystem error report for type 5 error -117
[  185.400049][T11363] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem
[  185.423539][T11363] loop4: lost filesystem error report for type 5 error -117
[  185.424279][T11363] EXT4-fs error (device loop4): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error
[  185.443355][T11363] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  185.582833][T12820] xt_hashlimit: size too large, truncated to 1048576
[  185.650565][T12821] �: renamed from vxcan1 (while UP)
[  185.737905][   T28] audit: type=1400 audit(1776610583.898:1417): avc:  denied  { create } for  pid=12822 comm="syz.3.3032" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  185.874614][T12836] netlink: 'syz.4.3037': attribute type 10 has an invalid length.
[  185.882867][T12836] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.3037'.
[  186.339565][T12855] loop6: detected capacity change from 0 to 256
[  186.439493][T12863] syzkaller1: entered promiscuous mode
[  186.445300][T12863] syzkaller1: entered allmulticast mode
[  186.447083][ T8422] Bluetooth: hci0: command 0x1003 tx timeout
[  186.457234][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  186.583922][   T28] audit: type=1400 audit(1776610584.738:1418): avc:  denied  { create } for  pid=12867 comm="syz.0.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  186.657309][T12883] sctp: [Deprecated]: syz.6.3054 (pid 12883) Use of int in maxseg socket option.
[  186.657309][T12883] Use struct sctp_assoc_value instead
[  186.744458][T12902] loop0: detected capacity change from 0 to 256
[  186.977677][T12914] SELinux: failed to load policy
[  187.163421][T12937] netlink: 'syz.0.3070': attribute type 4 has an invalid length.
[  187.202544][T12937] netlink: 'syz.0.3070': attribute type 4 has an invalid length.
[  187.305984][T12951] netlink: 'syz.7.3075': attribute type 1 has an invalid length.
[  187.380459][T12957] gretap1: entered allmulticast mode
[  187.389226][T12957] bond2: (slave gretap1): making interface the new active one
[  187.414055][T12957] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  187.649020][   T28] audit: type=1400 audit(1776610585.808:1419): avc:  denied  { listen } for  pid=12961 comm="syz.7.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  187.745662][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3083'.
[  187.794593][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'.
[  187.803697][T12980] netlink: 'syz.4.3087': attribute type 32 has an invalid length.
[  188.266119][   T28] audit: type=1326 audit(1776610586.418:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.3.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  188.336408][   T28] audit: type=1326 audit(1776610586.418:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.3.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  188.401416][   T28] audit: type=1326 audit(1776610586.448:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.3.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  188.442175][   T28] audit: type=1326 audit(1776610586.448:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.3.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x7ffc0000
[  188.614949][T13044] sg_write: process 90 (syz.6.3107) changed security contexts after opening file descriptor, this is not allowed.
[  188.693338][T13054] sctp: [Deprecated]: syz.3.3111 (pid 13054) Use of int in maxseg socket option.
[  188.693338][T13054] Use struct sctp_assoc_value instead
[  188.785490][T13067] loop0: detected capacity change from 0 to 512
[  188.822561][T13071] loop6: detected capacity change from 0 to 1024
[  188.834686][T13074] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  188.868415][T13067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.886511][T13071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.924065][T13067] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.968987][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.051329][T11623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.216676][T13108] loop0: detected capacity change from 0 to 512
[  189.234613][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3132'.
[  189.244598][T13108] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  189.264842][T13108] EXT4-fs (loop0): 1 truncate cleaned up
[  189.271294][T13108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.291991][T13108] netlink: 'syz.0.3134': attribute type 2 has an invalid length.
[  189.426400][T11623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.715499][T13122] loop6: detected capacity change from 0 to 32768
[  189.803079][T13122]  loop6: p1 p3 < >
[  190.066460][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  190.078265][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  190.611212][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  190.611230][   T28] audit: type=1400 audit(1776610588.758:1455): avc:  denied  { write } for  pid=13191 comm="syz.0.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  190.700354][T13201] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  191.754667][T13257] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.761905][T13257] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.776051][T13257] bridge0: left promiscuous mode
[  191.817673][T13257] batman_adv: batadv0: Interface deactivated: dummy0
[  192.149939][T13257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.664019][T13257] bond1: left promiscuous mode
[  192.673509][T13257] bond2: left promiscuous mode
[  192.691608][T13257] ipip1: left promiscuous mode
[  192.739996][T13257] ip6erspan0: left promiscuous mode
[  192.832691][T13264] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3195'.
[  192.842383][ T5648] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.853358][ T5648] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.863345][ T5648] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  192.897250][ T5648] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.955322][ T5648] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.978502][ T5647] Bluetooth: hci0: Frame reassembly failed (-84)
[  192.985839][ T5648] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  193.021074][ T5648] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.043615][ T5648] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.064843][ T5648] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  193.341450][ T5647] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.361017][ T5647] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.386948][ T5647] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  193.512155][T13323] loop4: detected capacity change from 0 to 1024
[  193.522414][T13323] EXT4-fs: Ignoring removed bh option
[  193.569251][T13323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.615893][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.670110][T13338] loop6: detected capacity change from 0 to 1024
[  193.701958][T13338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  193.725673][T13338] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.742986][T13338] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3218: bg 0: block 112: padding at end of block bitmap is not set
[  193.760733][T13338] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.774977][T13338] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.789154][T13338] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.802829][T13338] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.818132][T13338] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.840404][T13337] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.857634][T13338] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.873642][T13337] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.906801][T13338] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.3218: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.966955][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  194.047304][T13355] loop6: detected capacity change from 0 to 256
[  194.155972][T13365] netlink: 'syz.6.3229': attribute type 1 has an invalid length.
[  194.192826][T13365] bond1: entered promiscuous mode
[  194.198250][T13365] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.308836][T13365] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.316070][T13365] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  194.326755][T13365] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  194.339322][T13365] bond1: (slave gre1): making interface the new active one
[  194.346735][T13365] gre1: entered promiscuous mode
[  194.353890][T13365] bond1: (slave gre1): Enslaving as an active interface with an up link
[  194.409430][T13369] netlink: 'syz.6.3230': attribute type 10 has an invalid length.
[  194.419865][T13369] 8021q: adding VLAN 0 to HW filter on device team0
[  194.428017][T13369] bond0: (slave team0): Enslaving as an active interface with an up link
[  194.459912][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'.
[  195.006939][ T8422] Bluetooth: hci0: command 0x1003 tx timeout
[  195.013377][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  195.020160][T13294] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  195.858131][T13519] bond1: entered allmulticast mode
[  195.884051][T13519] gre1: entered allmulticast mode
[  195.909824][T13519] bond1: left allmulticast mode
[  195.921864][T13519] gre1: left allmulticast mode
[  195.937096][    C0] net_ratelimit: 10 callbacks suppressed
[  195.937137][    C0] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently!
[  195.997098][    C0] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently!
[  196.121342][T13526] syz.0.3257 (13526) used greatest stack depth: 8000 bytes left
[  196.147087][    C0] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently!
[  196.374613][T13611] loop7: detected capacity change from 0 to 1024
[  196.462867][T13611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  196.475763][T13611] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.489765][T13611] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3269: bg 0: block 112: padding at end of block bitmap is not set
[  196.489940][T13631] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  196.521274][T13611] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.549361][   T28] audit: type=1326 audit(1776610594.698:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.591504][T13631] SELinux: failed to load policy
[  196.599758][T13611] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.633962][T13611] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.653129][T13611] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.679243][   T28] audit: type=1326 audit(1776610594.698:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.692104][T13611] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.718404][T13611] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.763618][T13638] xt_hashlimit: size too large, truncated to 1048576
[  196.765015][   T28] audit: type=1326 audit(1776610594.698:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.807178][T13611] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.843227][   T28] audit: type=1326 audit(1776610594.698:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.869556][   T28] audit: type=1326 audit(1776610594.698:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.893253][   T28] audit: type=1326 audit(1776610594.698:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.893401][T13608] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  196.917575][   T28] audit: type=1326 audit(1776610594.698:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.954574][   T28] audit: type=1326 audit(1776610594.698:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43dd0c819 code=0x7ffc0000
[  196.982987][T13608] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.3269: lblock 0 mapped to illegal pblock 0 (length 1)
[  197.046164][T13649] tipc: Failed to remove unknown binding: 66,1,1/0:1670348824/1670348826
[  197.076980][T13649] tipc: Failed to remove unknown binding: 66,1,1/0:1670348824/1670348826
[  197.192398][ T9554] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  197.366150][T13681] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  197.438643][   T28] audit: type=1400 audit(1776610595.588:1464): avc:  denied  { read } for  pid=13687 comm="syz.7.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  197.439507][T13689] can0: slcan on ttyS3.
[  197.558934][T13668] loop4: detected capacity change from 0 to 32768
[  197.618136][T13668]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  197.623651][T13668] loop4: p1 start 460800 is beyond EOD, truncated
[  197.633877][T13668] loop4: p2 size 83886080 extends beyond EOD, truncated
[  197.637014][T13687] can0 (unregistered): slcan off ttyS3.
[  197.654033][T13668] loop4: p5 start 460800 is beyond EOD, truncated
[  197.681068][T13668] loop4: p6 size 83886080 extends beyond EOD, truncated
[  197.897132][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  197.909439][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  197.921010][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  197.932806][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  197.960977][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  197.973566][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  197.982376][T13742] udevd[13742]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  197.984629][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  198.243612][T13756] loop6: detected capacity change from 0 to 1024
[  198.249141][   T28] audit: type=1400 audit(1776610596.398:1465): avc:  denied  { mounton } for  pid=13754 comm="syz.6.3313" path="/file0" dev="ramfs" ino=42733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  198.284360][T13756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.319245][T13762] loop4: detected capacity change from 0 to 1024
[  198.357171][T13756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.374191][T13762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  198.374259][T13762] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.388838][T13762] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 3: comm syz.4.3315: lblock 3 mapped to illegal pblock 3 (length 3)
[  198.430777][T13762] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  198.430857][T13762] EXT4-fs (loop4): This should not happen!! Data will be lost
[  198.430857][T13762] 
[  198.478084][ T5604] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:22: lblock 8 mapped to illegal pblock 8 (length 8)
[  198.478296][ T5604] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  198.478324][ T5604] EXT4-fs (loop4): This should not happen!! Data will be lost
[  198.478324][ T5604] 
[  198.495045][T11363] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  198.546766][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  198.639176][T13775] loop6: detected capacity change from 0 to 1024
[  198.675540][T13775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.760254][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.872730][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'.
[  198.900416][T13791] 8021q: adding VLAN 0 to HW filter on device team1
[  199.121797][T13804] netlink: 'syz.4.3332': attribute type 34 has an invalid length.
[  199.408965][T13825] netlink: 'syz.3.3340': attribute type 1 has an invalid length.
[  199.422109][T13812] loop6: detected capacity change from 0 to 32768
[  199.442551][T13825] gretap1: entered allmulticast mode
[  199.450024][T13825] bond4: (slave gretap1): making interface the new active one
[  199.458362][T13825] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  199.485813][ T3302]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  199.496095][ T3302] loop6: p1 start 460800 is beyond EOD, truncated
[  199.537016][ T3302] loop6: p2 size 83886080 extends beyond EOD, truncated
[  199.557232][ T3302] loop6: p5 start 460800 is beyond EOD, truncated
[  199.566954][ T3302] loop6: p6 size 83886080 extends beyond EOD, truncated
[  199.634207][T13812]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  199.639748][T13812] loop6: p1 start 460800 is beyond EOD, truncated
[  199.648611][T13812] loop6: p2 size 83886080 extends beyond EOD, truncated
[  199.666860][T13828] loop4: detected capacity change from 0 to 512
[  199.667946][T13812] loop6: p5 start 460800 is beyond EOD, truncated
[  199.704980][T13812] loop6: p6 size 83886080 extends beyond EOD, truncated
[  199.727046][T13828] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  199.762739][T13828] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3341: iget: bogus i_mode (2)
[  199.790957][T13828] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  199.826929][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  199.842530][    C0] EXT4-fs (loop4): initial error at time 1776610597: ext4_orphan_get:1397: inode 15
[  199.852034][    C0] EXT4-fs (loop4): last error at time 1776610597: ext4_orphan_get:1397: inode 15
[  199.867917][T13828] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3341: couldn't read orphan inode 15 (err -117)
[  199.907598][T13828] loop4: lost filesystem error report for type 5 error -117
[  199.914706][T13828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.996861][T13742] udevd[13742]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  199.996988][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  200.227593][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.284997][T13846] syzkaller1: entered promiscuous mode
[  200.298019][T13846] syzkaller1: entered allmulticast mode
[  200.366307][    C1] vcan0: j1939_tp_rxtimer: 0xffff888105094a00: rx timeout, send abort
[  200.382307][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888105094a00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  200.471258][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3351'.
[  200.691959][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3364'.
[  200.706799][T13884] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3364'.
[  200.726297][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3364'.
[  200.745574][T13884] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3364'.
[  200.821393][T13890] netlink: 'syz.4.3367': attribute type 1 has an invalid length.
[  200.875559][T13890] gretap1: entered allmulticast mode
[  200.896532][T13890] bond1: (slave gretap1): making interface the new active one
[  200.904966][T13890] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  201.105128][T13912] loop4: detected capacity change from 0 to 512
[  201.139465][T13912] EXT4-fs (loop4): 1 truncate cleaned up
[  201.146748][T13912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.192220][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.540111][T13932] netlink: 'syz.3.3384': attribute type 39 has an invalid length.
[  201.548587][T13934] netlink: 'syz.7.3383': attribute type 1 has an invalid length.
[  201.566665][   T28] kauditd_printk_skb: 271 callbacks suppressed
[  201.566681][   T28] audit: type=1326 audit(1776610599.718:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.601661][   T28] audit: type=1326 audit(1776610599.758:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.650676][   T28] audit: type=1326 audit(1776610599.758:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.674913][   T28] audit: type=1326 audit(1776610599.758:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.698596][   T28] audit: type=1326 audit(1776610599.758:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.724382][   T28] audit: type=1326 audit(1776610599.758:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.748345][   T28] audit: type=1326 audit(1776610599.758:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.778710][   T28] audit: type=1326 audit(1776610599.768:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.804096][   T28] audit: type=1326 audit(1776610599.768:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  201.827989][   T28] audit: type=1326 audit(1776610599.768:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.0.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff43dccd04e code=0x7ffc0000
[  202.324653][T13969] loop0: detected capacity change from 0 to 2048
[  202.369796][T13969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.398093][T11623] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  202.417786][T11623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.454016][T13981] loop7: detected capacity change from 0 to 512
[  202.467864][T13981] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  202.499787][T13981] EXT4-fs (loop7): orphan cleanup on readonly fs
[  202.506166][T13981] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3401: Invalid inode bitmap blk 4 in block_group 0
[  202.557105][T13981] loop7: lost filesystem error report for type 5 error -117
[  202.566226][T13981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.578126][T13992] netlink: 'syz.3.3405': attribute type 1 has an invalid length.
[  202.622910][ T9554] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.631096][T13992] 8021q: adding VLAN 0 to HW filter on device bond5
[  202.809913][T13992] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  202.973185][T14006] loop0: detected capacity change from 0 to 512
[  203.010507][T14006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.474516][T11623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.557750][T14041] xt_hashlimit: size too large, truncated to 1048576
[  203.619703][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'.
[  204.044098][T14062] loop6: detected capacity change from 0 to 1024
[  204.053660][T14062] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  204.077048][T14062] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  204.086709][T14062] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  204.097979][T14062] EXT4-fs error (device loop6): ext4_get_journal_inode:5888: inode #5: comm syz.6.3429: unexpected bad inode w/o EXT4_IGET_BAD
[  204.112374][T14062] loop6: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  204.112502][T14062] EXT4-fs (loop6): no journal found
[  204.121632][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  204.121654][    C1] EXT4-fs (loop6): initial error at time 1776610602: ext4_get_journal_inode:5888: inode 5
[  204.121694][    C1] EXT4-fs (loop6): last error at time 1776610602: ext4_get_journal_inode:5888: inode 5
[  204.160862][T14062] EXT4-fs (loop6): can't get journal size
[  204.167709][T14062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  204.184410][T14062] EXT4-fs error (device loop6): __ext4_remount:6829: comm syz.6.3429: Abort forced by user
[  204.195100][T14062] EXT4-fs (loop6): Remounting filesystem read-only
[  204.202092][T14062] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  204.211411][T14062] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  204.229293][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.591014][T14121] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  206.025790][T14097] syz.4.3451 (14097) used greatest stack depth: 7272 bytes left
[  206.311079][T14152] loop6: detected capacity change from 0 to 512
[  206.317811][T14152] EXT4-fs: Ignoring removed bh option
[  206.323729][T14152] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  206.335256][T14152] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.3464: corrupted in-inode xattr: e_value size too large
[  206.349502][T14152] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  206.349809][T14152] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3464: couldn't read orphan inode 15 (err -117)
[  206.359053][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  206.359075][    C1] EXT4-fs (loop6): initial error at time 1776610604: ext4_iget_extra_inode:5040: inode 15
[  206.359105][    C1] EXT4-fs (loop6): last error at time 1776610604: ext4_iget_extra_inode:5040: inode 15
[  206.397252][T14152] loop6: lost filesystem error report for type 5 error -117
[  206.397924][T14152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.423315][T14152] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.3464: Unrecognised inode hash code 4
[  206.434943][T14152] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3464: Corrupt directory, running e2fsck is recommended
[  206.458045][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.389539][T14158] syz.6.3466 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  207.394367][T14082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.403778][T14158] CPU: 0 UID: 0 PID: 14158 Comm: syz.6.3466 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  207.403839][T14158] Tainted: [W]=WARN
[  207.403846][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  207.403859][T14158] Call Trace:
[  207.403868][T14158]  <TASK>
[  207.403877][T14158]  __dump_stack+0x1d/0x30
[  207.403958][T14158]  dump_stack_lvl+0x95/0xd0
[  207.403983][T14158]  dump_stack+0x15/0x1b
[  207.404006][T14158]  dump_header+0x80/0x240
[  207.404030][T14158]  oom_kill_process+0x295/0x350
[  207.404054][T14158]  out_of_memory+0x97d/0xb80
[  207.404147][T14158]  try_charge_memcg+0x62e/0xa10
[  207.404186][T14158]  obj_cgroup_charge_pages+0x23/0xc0
[  207.404258][T14158]  __memcg_kmem_charge_page+0x9e/0x170
[  207.404352][T14158]  __alloc_frozen_pages_noprof+0x18a/0x360
[  207.404461][T14158]  alloc_pages_mpol+0xb3/0x260
[  207.404492][T14158]  alloc_pages_noprof+0x8f/0x140
[  207.404522][T14158]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  207.404560][T14158]  __kvmalloc_node_noprof+0x3d4/0x650
[  207.404599][T14158]  ? ip_set_alloc+0x24/0x30
[  207.404695][T14158]  ? ip_set_alloc+0x24/0x30
[  207.404725][T14158]  ? hash_netiface_create+0x21b/0x740
[  207.404755][T14158]  ? __kmalloc_cache_noprof+0x18a/0x410
[  207.404781][T14158]  ip_set_alloc+0x24/0x30
[  207.404832][T14158]  hash_netiface_create+0x282/0x740
[  207.404915][T14158]  ? __pfx_hash_netiface_create+0x10/0x10
[  207.404946][T14158]  ip_set_create+0x3cf/0x970
[  207.404974][T14158]  ? __nla_parse+0x40/0x60
[  207.405005][T14158]  nfnetlink_rcv_msg+0x509/0x5d0
[  207.405138][T14158]  netlink_rcv_skb+0x123/0x220
[  207.405171][T14158]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  207.405243][T14158]  nfnetlink_rcv+0x167/0x1720
[  207.405302][T14158]  ? wakeup_preempt+0x5c/0x90
[  207.405332][T14158]  ? _raw_spin_unlock+0x9/0x30
[  207.405427][T14158]  ? sched_balance_rq+0x1937/0x1e70
[  207.405464][T14158]  ? _raw_spin_lock_bh+0x56/0xb0
[  207.405494][T14158]  ? _raw_spin_unlock_bh+0x18/0x20
[  207.405580][T14158]  ? selinux_nlmsg_lookup+0x99/0x890
[  207.405602][T14158]  ? __rcu_read_unlock+0x33/0x70
[  207.405624][T14158]  ? __netlink_lookup+0x276/0x2b0
[  207.405678][T14158]  netlink_unicast+0x5c0/0x690
[  207.405762][T14158]  netlink_sendmsg+0x5c8/0x6f0
[  207.405811][T14158]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.405832][T14158]  ____sys_sendmsg+0x563/0x5b0
[  207.405887][T14158]  ___sys_sendmsg+0x195/0x1e0
[  207.405918][T14158]  __x64_sys_sendmsg+0xd4/0x160
[  207.405942][T14158]  x64_sys_call+0x194c/0x3020
[  207.405970][T14158]  do_syscall_64+0x12c/0x370
[  207.405998][T14158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.406026][T14158] RIP: 0033:0x7fe58986c819
[  207.406045][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.406064][T14158] RSP: 002b:00007fe5882c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.406087][T14158] RAX: ffffffffffffffda RBX: 00007fe589ae5fa0 RCX: 00007fe58986c819
[  207.406113][T14158] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003
[  207.406136][T14158] RBP: 00007fe589902c91 R08: 0000000000000000 R09: 0000000000000000
[  207.406150][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.406163][T14158] R13: 00007fe589ae6038 R14: 00007fe589ae5fa0 R15: 00007fff918f8d68
[  207.406217][T14158]  </TASK>
[  207.406264][T14158] memory: usage 307200kB, limit 307200kB, failcnt 100
[  207.882599][T14158] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0
[  207.923450][T14158] kmem: usage 305096kB, limit 9007199254740988kB, failcnt 0
[  207.987589][T14158] Memory cgroup stats for /syz6:
[  207.987761][T14158] cache 4096
[  208.036836][T14158] rss 4096
[  208.048687][T14158] shmem 0
[  208.070214][T14158] mapped_file 4096
[  208.075277][T14158] dirty 0
[  208.091850][T14158] writeback 32768
[  208.096256][T14158] workingset_refault_anon 709
[  208.101208][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3481'.
[  208.110817][T14158] workingset_refault_file 1
[  208.115775][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3481'.
[  208.130948][T14158] swap 151552
[  208.134299][T14158] swapcached 5533696
[  208.139690][T14158] pgpgin 183169
[  208.143402][T14158] pgpgout 182643
[  208.147647][T14158] pgfault 157201
[  208.151611][T14158] pgmajfault 106
[  208.203417][T14158] inactive_anon 53248
[  208.222205][T14158] active_anon 0
[  208.236211][T14202] syzkaller1: entered promiscuous mode
[  208.245968][T14158] inactive_file 790528
[  208.253722][T14202] syzkaller1: entered allmulticast mode
[  208.263334][T14158] active_file 1179648
[  208.282453][T14158] unevictable 0
[  208.291476][T14158] hierarchical_memory_limit 314572800
[  208.370875][T14206] bond_slave_0: entered promiscuous mode
[  208.376616][T14206] bond_slave_1: entered promiscuous mode
[  208.398832][T14158] hierarchical_memsw_limit 9223372036854771712
[  208.400098][T14206] macvlan2: entered allmulticast mode
[  208.430601][T14206] bond0: entered allmulticast mode
[  208.434785][T14158] total_cache 4096
[  208.446126][T14206] bond_slave_0: entered allmulticast mode
[  208.454702][T14206] bond_slave_1: entered allmulticast mode
[  208.460455][T14158] total_rss 4096
[  208.460469][T14158] total_shmem 0
[  208.460478][T14158] total_mapped_file 4096
[  208.460488][T14158] total_dirty 0
[  208.460496][T14158] total_writeback 32768
[  208.477431][T14206] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  208.497420][T14206] bond0: left allmulticast mode
[  208.502473][T14206] bond_slave_0: left allmulticast mode
[  208.512563][T14206] bond_slave_1: left allmulticast mode
[  208.526938][T14206] bond_slave_0: left promiscuous mode
[  208.532371][T14206] bond_slave_1: left promiscuous mode
[  208.555469][T14158] total_workingset_refault_anon 709
[  208.603664][T14158] total_workingset_refault_file 1
[  208.613816][T14158] total_swap 151552
[  208.636962][   T28] kauditd_printk_skb: 99 callbacks suppressed
[  208.637035][   T28] audit: type=1400 audit(1776610606.788:1846): avc:  denied  { listen } for  pid=14213 comm="syz.3.3489" lport=51396 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  208.684025][T14158] total_swapcached 5533696
[  208.690422][T14158] total_pgpgin 183169
[  208.694543][T14158] total_pgpgout 182643
[  208.700590][T14158] total_pgfault 157201
[  208.704768][T14158] total_pgmajfault 106
[  208.709446][T14158] total_inactive_anon 53248
[  208.713986][T14158] total_active_anon 0
[  208.724814][T14158] total_inactive_file 790528
[  208.737097][T14158] total_active_file 1179648
[  208.742329][T14158] total_unevictable 0
[  208.746405][T14158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3466,pid=14157,uid=0
[  208.860953][T14158] Memory cgroup out of memory: Killed process 14157 (syz.6.3466) total-vm:96080kB, anon-rss:1228kB, file-rss:22168kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  209.016050][T14236] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3498'.
[  209.025299][T14236] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3498'.
[  209.063725][   T28] audit: type=1326 audit(1776610607.218:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.3.3499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x0
[  209.094365][T14158] syz.6.3466 (14158) used greatest stack depth: 7256 bytes left
[  209.149086][T14242] loop6: detected capacity change from 0 to 1024
[  209.196776][T14242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.221784][T14242] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.303527][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  209.527053][T14261] loop4: detected capacity change from 0 to 1024
[  209.541817][T14261] EXT4-fs: Ignoring removed orlov option
[  209.658164][T14261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.758382][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.802780][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'.
[  210.328487][T14277] 9pnet: p9_errstr2errno: server reported unknown error 0000000
[  210.373209][T14290] loop4: detected capacity change from 0 to 512
[  210.400813][T14290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.421542][T14290] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.532709][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.647458][T14313] loop4: detected capacity change from 0 to 128
[  210.696311][T14313] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.711111][T14313] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.725875][   T28] audit: type=1400 audit(1776610608.888:1848): avc:  denied  { rename } for  pid=14312 comm="syz.4.3527" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  210.791359][T11363] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  210.821594][   T28] audit: type=1400 audit(1776610608.978:1849): avc:  denied  { accept } for  pid=14322 comm="syz.4.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  210.930172][T14329] loop6: detected capacity change from 0 to 1024
[  210.937939][T14329] EXT4-fs: Ignoring removed mblk_io_submit option
[  210.944980][T14329] ext4: Unknown parameter 'obj_role'
[  210.955038][T14329] loop6: detected capacity change from 0 to 512
[  210.969337][T14329] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3534: inode has both inline data and extents flags
[  210.983373][T14329] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  210.986897][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  210.987283][T14329] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3534: couldn't read orphan inode 15 (err -117)
[  210.996080][    C1] EXT4-fs (loop6): initial error at time 1776610609: ext4_orphan_get:1397
[  211.006680][T14329] loop6: lost filesystem error report for type 5 error -117
[  211.014316][    C1] : inode 15
[  211.014335][    C1] EXT4-fs (loop6): last error at time 1776610609: ext4_orphan_get:1397: inode 15
[  211.047526][T14329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.047858][T14332] netlink: 'syz.0.3535': attribute type 1 has an invalid length.
[  211.085007][T14332] bond1: (slave geneve2): making interface the new active one
[  211.095201][T14329] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  211.095625][T14332] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  211.113025][ T5608] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  211.122127][ T5608] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  211.122368][T14329] EXT4-fs: Ignoring removed bh option
[  211.131228][ T5608] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  211.145313][T14329] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring
[  211.148791][ T5608] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  211.179856][T14329] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  211.195786][T14329] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  211.264549][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.322226][T14348] loop6: detected capacity change from 0 to 512
[  211.332205][T14348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.581229][   T28] audit: type=1326 audit(1776610609.738:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14339 comm="syz.3.3539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x0
[  211.617748][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.701957][   T28] audit: type=1400 audit(1776610609.838:1851): avc:  denied  { bind } for  pid=14364 comm="syz.6.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  211.739939][   T28] audit: type=1400 audit(1776610609.888:1852): avc:  denied  { write } for  pid=14364 comm="syz.6.3547" path="socket:[44661]" dev="sockfs" ino=44661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  212.230574][T14392] loop7: detected capacity change from 0 to 1
[  212.256711][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'.
[  212.327990][   T28] audit: type=1326 audit(1776610610.488:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.3.3561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f783405c819 code=0x0
[  212.772736][T14416] loop0: detected capacity change from 0 to 128
[  212.796631][T14416] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.827854][T14416] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.103176][T11623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.174889][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.185017][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.284956][T14441] loop6: detected capacity change from 0 to 512
[  213.302102][T14441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.336990][T14441] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.422482][T12004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.534126][T14451] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.7.3579: corrupted xattr block 95: invalid header
[  213.637451][T14451] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  213.646914][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  213.662538][    C1] EXT4-fs (loop7): initial error at time 1776610611: ext4_expand_extra_isize_ea:2808: inode 11
[  213.672957][    C1] EXT4-fs (loop7): last error at time 1776610611: ext4_expand_extra_isize_ea:2808: inode 11
[  213.857159][T14451] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3579: bg 0: block 7: invalid block bitmap
[  213.885804][T14451] loop7: lost filesystem error report for type 5 error -117
[  213.885956][T14451] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  213.928076][T14451] loop7: lost filesystem error report for type 5 error -117
[  213.928327][T14451] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2970: inode #11: comm syz.7.3579: corrupted xattr block 95: invalid header
[  213.973220][T14451] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  213.973413][T14451] EXT4-fs warning (device loop7): ext4_evict_inode:285: xattr delete (err -117)
[  214.012464][T14451] EXT4-fs (loop7): 1 orphan inode deleted
[  214.025517][T14451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.169063][ T9554] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.187377][T14469] io-wq is not configured for unbound workers
[  214.554139][T14502] netlink: 'syz.0.3599': attribute type 13 has an invalid length.
[  214.661952][T14504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3600'.
[  214.777375][   T28] audit: type=1400 audit(1776610612.938:1854): avc:  denied  { write } for  pid=14519 comm="syz.3.3608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  215.069859][   T28] audit: type=1400 audit(1776610613.228:1855): avc:  denied  { ioctl } for  pid=14549 comm="syz.4.3620" path="socket:[44901]" dev="sockfs" ino=44901 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  215.150291][T14556] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  215.222051][   T28] audit: type=1326 audit(1776610613.378:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  215.255549][   T28] audit: type=1326 audit(1776610613.378:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  215.280674][   T28] audit: type=1326 audit(1776610613.408:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  215.306107][   T28] audit: type=1326 audit(1776610613.408:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  215.376065][T14573] set_capacity_and_notify: 1 callbacks suppressed
[  215.376084][T14573] loop4: detected capacity change from 0 to 1024
[  215.391038][   T28] audit: type=1326 audit(1776610613.408:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fca77edc819 code=0x7ffc0000
[  215.445663][ T6308] ==================================================================
[  215.453864][ T6308] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  215.461070][ T6308] 
[  215.463434][ T6308] read-write to 0xffff888237c2a8a4 of 4 bytes by task 6296 on cpu 0:
[  215.471500][ T6308]  wq_worker_running+0x9b/0x120
[  215.476358][ T6308]  synchronize_rcu_expedited+0x5f8/0x770
[  215.481997][ T6308]  try_check_zero+0x191/0x260
[  215.486686][ T6308]  process_srcu+0x1ff/0xdc0
[  215.491190][ T6308]  process_scheduled_works+0x513/0xa10
[  215.496651][ T6308]  worker_thread+0x58a/0x780
[  215.501241][ T6308]  kthread+0x22a/0x280
[  215.505303][ T6308]  ret_from_fork+0x150/0x360
[  215.509892][ T6308]  ret_from_fork_asm+0x1a/0x30
[  215.514653][ T6308] 
[  215.516968][ T6308] read to 0xffff888237c2a8a4 of 4 bytes by task 6308 on cpu 1:
[  215.524500][ T6308]  kick_pool+0x49/0x2d0
[  215.528739][ T6308]  __queue_work+0x896/0xaf0
[  215.533329][ T6308]  queue_work_on+0xa9/0x140
[  215.537918][ T6308]  process_srcu+0xa56/0xdc0
[  215.542413][ T6308]  process_scheduled_works+0x513/0xa10
[  215.547952][ T6308]  worker_thread+0x58a/0x780
[  215.552537][ T6308]  kthread+0x22a/0x280
[  215.556596][ T6308]  ret_from_fork+0x150/0x360
[  215.561182][ T6308]  ret_from_fork_asm+0x1a/0x30
[  215.566037][ T6308] 
[  215.568391][ T6308] value changed: 0x00000000 -> 0x00000001
[  215.574307][ T6308] 
[  215.576622][ T6308] Reported by Kernel Concurrency Sanitizer on:
[  215.582766][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: kworker/1:10 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  215.593786][ T6308] Tainted: [W]=WARN
[  215.597609][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  215.607754][ T6308] Workqueue: rcu_gp process_srcu
[  215.612687][ T6308] ==================================================================
[  215.623008][   T28] audit: type=1326 audit(1776610613.468:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca77e9d04e code=0x7ffc0000
[  215.651704][   T28] audit: type=1326 audit(1776610613.498:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca77e9d04e code=0x7ffc0000
[  215.678870][T14577] loop7: detected capacity change from 0 to 512
[  215.682340][   T28] audit: type=1326 audit(1776610613.498:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.7.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca77e9d04e code=0x7ffc0000
[  215.718394][T14573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.749463][T11363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.