last executing test programs:

12m25.646000898s ago: executing program 32 (id=272):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x4, 0x4, 0x1, 0xea2e, 0xfff}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xd6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)

10m30.953046877s ago: executing program 33 (id=3189):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0xe0, 0x3})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)

10m2.293248155s ago: executing program 34 (id=3838):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9m37.414070043s ago: executing program 35 (id=4499):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb679b98fb73e53ab4eeadf873895bea"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
close(0x3)

9m7.603199487s ago: executing program 36 (id=4849):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)

8m59.157893184s ago: executing program 37 (id=5389):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r0, 0x7d691000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

8m54.318552268s ago: executing program 38 (id=5466):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m35.273645541s ago: executing program 39 (id=5919):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@local, 0x4d, r2})

8m6.309223778s ago: executing program 40 (id=6513):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)

7m44.197702528s ago: executing program 41 (id=6928):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

7m25.602101077s ago: executing program 42 (id=7258):
socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10)

7m20.584212346s ago: executing program 43 (id=7340):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e24, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbcb}}], 0x18}, 0x440e0)

6m54.268308779s ago: executing program 44 (id=7561):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0xfffffffd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x856)

6m43.145938631s ago: executing program 45 (id=7950):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6)
fcntl$setpipe(r1, 0x407, 0x7000000)
fcntl$setpipe(r1, 0x407, 0x0)
bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14)

6m25.306017776s ago: executing program 46 (id=8304):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r1, 0x21, 0x0, 0x0)

5m56.258288446s ago: executing program 47 (id=8865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0x1}, 0x1000, 0x0, 0x80000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0xe, 0x6, @l2={'eth', 0x3a, '\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

5m54.046919485s ago: executing program 48 (id=8894):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1)

5m46.947871709s ago: executing program 49 (id=9057):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
read(r0, &(0x7f0000000440)=""/44, 0xbe)

5m21.725912257s ago: executing program 50 (id=9401):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m12.808490829s ago: executing program 51 (id=9527):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x2)

4m54.708167087s ago: executing program 7 (id=9907):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="40404c060a000200fe"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

4m54.560844321s ago: executing program 7 (id=9910):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = io_uring_setup(0x3bc, &(0x7f0000000280)={0x0, 0xfffffffe, 0x2, 0x0, 0x345})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)

4m54.512905133s ago: executing program 7 (id=9913):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

4m54.455657684s ago: executing program 7 (id=9917):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc}, 0x14}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3)

4m54.27260952s ago: executing program 7 (id=9927):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

4m53.858121363s ago: executing program 7 (id=9938):
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x4000004, &(0x7f0000000140)={[{@block_validity}, {@nodelalloc}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@bh}, {@quota}, {@nodioread_nolock}, {@norecovery}]}, 0xfe, 0x48d, &(0x7f0000000c00)="$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")
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x28106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xc0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

4m53.843068494s ago: executing program 52 (id=9938):
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x4000004, &(0x7f0000000140)={[{@block_validity}, {@nodelalloc}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@bh}, {@quota}, {@nodioread_nolock}, {@norecovery}]}, 0xfe, 0x48d, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvTLctP8RWxB8gSBWNxB8tLT/k4EWjCQdNTPSA8VTbQioLNbQmQohWD3g0JN6J/4XxpBejXjTxqndDQpQLqJc1szNT2rJbtrDtWvbzSbZ9b+dt3/vOzJt9M293GkDXGsp+JBH3RcRvETGQZ5cWGMp/3bh2YeLvaxcmkqjV3vozqZe7fu3CRFm0fN3WPFOrFfn+BvVefDdivFqdOlu8dD7ig5HZc+dfmD49fnLq5NSZsaNHDx3c03dk7HBb4sziur7r45ndO4+9c+mNieOX3vsxqUQedyyLo12G8rXb0NPtrqzDti1K11fsgr0/30w32hPopJ6IyDZXb73/D0RPbF5YNhCvfdbRxgFrqlar1VY4Ks/XgHtYEp1uAdAZxSlA/fy3fKzj8KPjrr6cnwBlcd8oHvmSSqR5Ym/vsvPbdhqKiOPz/2SPy7FG1yEAABb7Nhv/PN9o/JfGw3miL/txfzGHMhgRD0TE9oh4MCJ2RMRDEfWyj0TEo6usf/kMya3jn/TKHQfXgmz891Ixt7V0/JeWRQZ7ity2evy9yYnp6tSBYp3sj97+E9PJ1OgKdXz36q9fNFtWjP8ul4+s/nIsWLTjSqV/05LXTI7Pjd9V0Itc/TRiV6VR/EmU0zhJROyMiF13WMf0s5Wmy24f/wqa/9mW1b6KeCbf/vOxLP5SlhqZO91gfnL0xSNjh0c2RXXqwEi5V9zqp18uvtms/ruKvw2y7b+l4f6/EP9gsili9tz5U/X52tnV13Hx98+bntO0tv8vZI5tK/b/vuTt+hN9xYKPxufmzo5G9CWv3/r82M2/VubL8ln8+/c17v/b4+aaeCwidkfEnoh4PDspLNr+REQ8GRH7Voj/h1eeen/18a/PXGkW/+Tttn8s3v6rT/Sc+v6b28efHeOabf9D9dT+4plWjn+tNvBu1h0AAABsFGn9M/BJOpxUinSaDg/nn+HfEVvS6szs3HMnZj48M5l/Vn4wetPyStfAouuho8W14TI/tix/sLhu/GXP5np+eGKmOtnp4KHLbS37/8KxIO//mT96Ot06YM21YR4N2KBW6P++sQn3OO//0J0S/R+6mv4P3atR//+kaenhr9e0McC68v4P3auF/j+f/2o+KgA2Ju//0L30f+hKTb8bny5dFH/l9wu845sArHHi3+J+hv+X9qxfoi+K/6SwzrVH2vnYuyJRaflmFqtI1Aby/p8909+wTKePTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xXwAAAP//nSTmTw==")
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x28106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xc0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

4m45.686912474s ago: executing program 8 (id=10086):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20)

4m45.648318935s ago: executing program 8 (id=10087):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x48, &(0x7f0000000400)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x12, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x12, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "e3ff"}}}}}}}, 0x0)

4m45.603790097s ago: executing program 8 (id=10089):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r1, 0x80000000, {0x0, 0x4ad32af5f8ad3b02, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

4m44.299380928s ago: executing program 8 (id=10150):
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0xffffffff, 0xe, 0x200, 0x2], [0x8001, 0x80000001, 0x2000000000000f, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24d, 0x0, 0x1000000000000001, 0x6, 0x10000, 0x2, 0x10, 0x2, 0x1, 0x1, 0x6, 0x8, 0x4, 0x5, 0x1, 0x1, 0xc, 0xe, 0x1, 0xf, 0x7, 0x2, 0x6, 0x200, 0x1000, 0x12, 0x0, 0x0, 0x83, 0x2, 0x5ba9, 0x8, 0x0, 0x7, 0x8, 0x3, 0x400000000, 0x100000000, 0x8001, 0x9, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x4, 0x2, 0xd, 0x4, 0x0, 0x8000000000000000, 0x3, 0x58c1, 0x5, 0x0, 0x100, 0x2da74e41, 0x1, 0x10, 0x8, 0x6, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x5, 0x7, 0x8000003, 0x102, 0x1ff, 0x7, 0xe648, 0x5, 0x6, 0xdfb3, 0x3, 0x4000000000002, 0xfffffffffffffffd, 0x4, 0x3, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x724, 0x8, 0x5, 0x662, 0x7, 0x9, 0x1000, 0xfffffffffffffff9, 0x7, 0xc144, 0x2, 0xfffffffffffff371, 0x4]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8003}, 0x20000010)

4m44.244582439s ago: executing program 8 (id=10151):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

4m44.244046299s ago: executing program 8 (id=10152):
r0 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

4m29.104760719s ago: executing program 53 (id=10152):
r0 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

4m27.622888506s ago: executing program 3 (id=10263):
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x11, 0xa, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0xc)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x2e, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

4m27.50799273s ago: executing program 3 (id=10266):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xd)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffffff7, 0x6003ff, 0xfffffff9, 0xc4cf, 0x9, "02004c81dc06be9d0400b70001ffff00000100", 0x240000, 0x1fd})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000640)=0x4)

4m27.47397449s ago: executing program 3 (id=10267):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

4m27.423992792s ago: executing program 3 (id=10268):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

4m27.373443854s ago: executing program 3 (id=10269):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x9}, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)

4m26.621157078s ago: executing program 3 (id=10277):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x101, @private1, 0x8}}}, 0x32)
getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080))

4m26.602004478s ago: executing program 54 (id=10277):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x101, @private1, 0x8}}}, 0x32)
getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080))

4m2.571932488s ago: executing program 0 (id=10625):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m2.417656774s ago: executing program 0 (id=10631):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

4m2.370404235s ago: executing program 0 (id=10634):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

4m1.820586372s ago: executing program 0 (id=10637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x65)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00')

4m1.775738614s ago: executing program 0 (id=10639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x0)

4m1.058155467s ago: executing program 0 (id=10650):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @local, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000000bc0)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64045}, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)

4m0.987215579s ago: executing program 55 (id=10650):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @local, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000000bc0)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64045}, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)

2m58.148354969s ago: executing program 6 (id=11635):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m57.937058565s ago: executing program 6 (id=11639):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)

2m57.005289875s ago: executing program 6 (id=11644):
r0 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
shmctl$SHM_LOCK(r0, 0xb)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17)
shmctl$SHM_UNLOCK(r0, 0xc)

2m56.827227871s ago: executing program 6 (id=11649):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r1 = epoll_create(0x200004)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@delalloc}, {@grpquota}, {@nouid32}, {@nouid32}, {@data_writeback}]}, 0x2, 0x55d, &(0x7f0000000e80)="$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")
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11480, 0x0)

2m56.427989203s ago: executing program 6 (id=11658):
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000200)="dcef58b7f29c1f7c93d183044aedba283413e6", 0x13})
io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x0, 0x0, 0x28b})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r0, 0x80000001, 0x4)

2m56.109692493s ago: executing program 6 (id=11668):
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3)

2m56.050903645s ago: executing program 56 (id=11668):
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3)

3.710300503s ago: executing program 1 (id=14370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x91f8a0d13a97bc3e, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

3.639875745s ago: executing program 1 (id=14382):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc)
fcntl$notify(r0, 0x402, 0x8000002d)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x62)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
tee(r2, r3, 0x1, 0x0)

3.4870033s ago: executing program 1 (id=14384):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$tipc(0x1e, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)
r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3.194990989s ago: executing program 1 (id=14378):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = gettid()
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0)
tkill(r2, 0x13)

2.631646347s ago: executing program 9 (id=14390):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.424881064s ago: executing program 9 (id=14392):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x3723, 0xf080, 0xc, 0xa0002f5})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x10000, 0x3)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.094310194s ago: executing program 2 (id=14394):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3)
r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

1.871413661s ago: executing program 4 (id=14395):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1.817186903s ago: executing program 4 (id=14397):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0xe, 0x1}, 0x1d0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

1.756145865s ago: executing program 4 (id=14399):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc0049364, 0x0)

1.750107745s ago: executing program 9 (id=14401):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r1}}, 0x30)

1.694715977s ago: executing program 4 (id=14403):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r3, r2, 0x0, 0x3ffff)
write(r1, &(0x7f0000000200)="c788a5c93a6b7b3c8e9a2fe0760f01", 0xf)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.680346397s ago: executing program 9 (id=14405):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa8, 0x0, &(0x7f00000001c0)="bcd96e5d1b72c538f50f2831451adee0fa3899d6a1c9b98b4217605be0f00e5b7d2ce81631cec43ba6c54ab6e660675038782749da34d0ca4f16084d45182b54e404e85d5a4866624fd2fcb7bf3722912bb960546892b60512fe983ccf7da912c169fc1e92212a181d12b5a0b117f284811486f52d77a22c944e1651320e964a7bd58f023961f4e67f418e1c1b79272a1344c6e0bc096253976507253236798ab4f9be8014b32dd3", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8402, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.517726442s ago: executing program 2 (id=14407):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.447149815s ago: executing program 2 (id=14408):
close(0xffffffffffffffff)
r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
ptrace(0x4206, r0)
wait4(r0, 0x0, 0x20000000, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])

753.741556ms ago: executing program 4 (id=14409):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

753.536426ms ago: executing program 9 (id=14410):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getgid()
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@nobh}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid={'resgid', 0x3d, r0}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r2, r2, 0x0, 0xe3aa6ea)

752.194606ms ago: executing program 2 (id=14411):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0xe, 0x1}, 0x1d0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

670.401929ms ago: executing program 2 (id=14412):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

592.248391ms ago: executing program 5 (id=14413):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4067, &(0x7f0000000040)=0xfe3)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0)

502.311844ms ago: executing program 5 (id=14414):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
r3 = socket(0x2d, 0x2, 0x0)
bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r2, 0xc}, 0x10)
r4 = socket(0x2d, 0x2, 0x0)
bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

500.358584ms ago: executing program 9 (id=14415):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)

493.231134ms ago: executing program 5 (id=14416):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

361.707919ms ago: executing program 5 (id=14417):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
getcwd(&(0x7f0000000140)=""/251, 0xfb)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

307.9335ms ago: executing program 4 (id=14418):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3)
r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

305.62666ms ago: executing program 2 (id=14429):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x5000)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="01240c"], 0x7)

206.088624ms ago: executing program 5 (id=14420):
socket$inet6(0xa, 0x80001, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)

131.865336ms ago: executing program 5 (id=14421):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r3, r2, 0x0, 0x3ffff)
write(r1, &(0x7f0000000200)="c788a5c93a6b7b3c8e9a2fe0760f01", 0xf)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

122.168126ms ago: executing program 1 (id=14422):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
syz_pidfd_open(0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r1 = socket$inet(0x2, 0xa, 0x3)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

0s ago: executing program 1 (id=14423):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x14f5, 0x4)

kernel console output (not intermixed with test programs):

rs = 8 limit=128
[  733.817146][T10962] syz.9.13149: attempt to access beyond end of device
[  733.817146][T10962] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128
[  733.843564][T10962] syz.9.13149: attempt to access beyond end of device
[  733.843564][T10962] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128
[  733.865064][T10962] syz.9.13149: attempt to access beyond end of device
[  733.865064][T10962] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128
[  733.879656][T10962] syz.9.13149: attempt to access beyond end of device
[  733.879656][T10962] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128
[  733.894054][T10962] syz.9.13149: attempt to access beyond end of device
[  733.894054][T10962] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128
[  733.911440][T10962] syz.9.13149: attempt to access beyond end of device
[  733.911440][T10962] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128
[  733.927667][T10962] syz.9.13149: attempt to access beyond end of device
[  733.927667][T10962] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128
[  733.985496][T10962] syz.9.13149: attempt to access beyond end of device
[  733.985496][T10962] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128
[  734.536570][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13170'.
[  735.078618][T11062] netlink: 'syz.9.13191': attribute type 1 has an invalid length.
[  735.117740][T11062] bond3: entered promiscuous mode
[  735.134673][T11062] 8021q: adding VLAN 0 to HW filter on device bond3
[  735.152562][T11068] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  735.176216][T11068] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  735.199102][T11068] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  735.251875][T11067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  735.274860][ T8926] kernel write not supported for file bpf-prog (pid: 8926 comm: kworker/1:16)
[  735.330697][T11067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  735.374075][T11086] sit0: entered promiscuous mode
[  735.385507][T11086] netlink: 'syz.9.13200': attribute type 1 has an invalid length.
[  735.404757][T11086] netlink: 1 bytes leftover after parsing attributes in process `syz.9.13200'.
[  735.414120][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13201'.
[  735.435204][T11067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  735.468676][T11092] loop9: detected capacity change from 0 to 736
[  735.476439][T11092] iso9660: Bad value for 'mode'
[  735.491033][T11067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  735.568131][T19408] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  735.590564][T19408] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  735.605479][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13206'.
[  735.633017][   T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  735.661985][T19408] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  736.664976][T11153] netlink: 'syz.1.13227': attribute type 1 has an invalid length.
[  736.723533][T11153] 8021q: adding VLAN 0 to HW filter on device bond5
[  736.783107][T11155] bond5: (slave geneve2): making interface the new active one
[  736.826911][T11155] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  736.865386][ T3453] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.900028][ T3453] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.936639][ T3453] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.959660][ T3453] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.303133][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.332828][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.393199][T11192] netlink: 'syz.2.13239': attribute type 13 has an invalid length.
[  737.414345][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13239'.
[  737.434030][T11192] netlink: 'syz.2.13239': attribute type 13 has an invalid length.
[  737.450271][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13239'.
[  738.058571][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13249'.
[  738.098384][T11218] netlink: 'syz.9.13251': attribute type 13 has an invalid length.
[  738.115413][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13251'.
[  738.135301][T11220] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13250'.
[  738.157495][T25057] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  738.157573][T11218] netlink: 'syz.9.13251': attribute type 13 has an invalid length.
[  738.157594][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13251'.
[  738.189608][T25057] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  738.207313][T25057] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  738.218558][T25057] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  738.317126][   T28] kauditd_printk_skb: 111 callbacks suppressed
[  738.317146][   T28] audit: type=1400 audit(1778713833.543:8207): avc:  denied  { getopt } for  pid=11231 comm="syz.5.13257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  738.352881][T11235] loop9: detected capacity change from 0 to 512
[  738.383099][T11234] loop1: detected capacity change from 0 to 4096
[  738.389787][T11235] EXT4-fs: Ignoring removed bh option
[  738.395472][T11235] EXT4-fs: inline encryption not supported
[  738.403389][T11235] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  738.429945][T11234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  738.452301][T11235] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  738.469882][   T28] audit: type=1400 audit(1778713833.693:8208): avc:  denied  { write } for  pid=11233 comm="syz.1.13258" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  738.492755][T11235] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13256: bg 0: block 248: padding at end of block bitmap is not set
[  738.507619][T11235] loop9: lost filesystem error report for type 5 error -117
[  738.507873][T11235] Quota error (device loop9): write_blk: dquota write failed
[  738.515612][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  738.515634][    C0] EXT4-fs (loop9): last error at time 1778713833: ext4_validate_block_bitmap:441
[  738.545961][T11235] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota
[  738.556976][T11235] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.13256: Failed to acquire dquot type 1
[  738.569590][T11235] loop9: lost filesystem error report for type 5 error -28
[  738.570156][T11235] EXT4-fs (loop9): 1 truncate cleaned up
[  738.583583][T11235] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  738.636372][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.726094][T11256] loop1: detected capacity change from 0 to 128
[  738.839231][T11256] bio_check_eod: 101 callbacks suppressed
[  738.839252][T11256] syz.1.13264: attempt to access beyond end of device
[  738.839252][T11256] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  738.863577][T11256] syz.1.13264: attempt to access beyond end of device
[  738.863577][T11256] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  738.877615][T11256] syz.1.13264: attempt to access beyond end of device
[  738.877615][T11256] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  738.891900][T11256] syz.1.13264: attempt to access beyond end of device
[  738.891900][T11256] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  738.915141][T11256] syz.1.13264: attempt to access beyond end of device
[  738.915141][T11256] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  738.939742][T11256] syz.1.13264: attempt to access beyond end of device
[  738.939742][T11256] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  738.957493][T11256] syz.1.13264: attempt to access beyond end of device
[  738.957493][T11256] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  738.971927][T11256] syz.1.13264: attempt to access beyond end of device
[  738.971927][T11256] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  738.988014][T11256] syz.1.13264: attempt to access beyond end of device
[  738.988014][T11256] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  739.002863][T11256] syz.1.13264: attempt to access beyond end of device
[  739.002863][T11256] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  739.146583][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13277'.
[  739.204080][T11288] xfrm0 speed is unknown, defaulting to 1000
[  739.211168][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  739.261267][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13281'.
[  739.272939][T11292] loop1: detected capacity change from 0 to 256
[  739.289707][T11294] netlink: 7 bytes leftover after parsing attributes in process `syz.5.13281'.
[  739.320002][T11288] lo speed is unknown, defaulting to 1000
[  739.480277][T11305] netlink: 'syz.5.13286': attribute type 5 has an invalid length.
[  739.515417][T11312] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13289'.
[  739.552013][T11309] syzkaller0: entered promiscuous mode
[  739.557512][T11309] syzkaller0: entered allmulticast mode
[  739.651553][T11321] loop9: detected capacity change from 0 to 128
[  740.037520][T11332] loop1: detected capacity change from 0 to 8192
[  740.249074][    C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  740.249093][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  740.259114][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  740.588417][T11372] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.611096][T11372] batman_adv: batadv0: Interface activated: dummy0
[  740.624982][T11372] batadv0: mtu less than device minimum
[  740.637809][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.648782][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.659711][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.670875][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.681991][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.692850][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.703761][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.714980][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.725973][T11372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  740.889720][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  740.924895][T11372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  741.028215][T11372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  741.065783][T11372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  741.126682][T11372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  741.164414][T11372] veth1_vlan: left promiscuous mode
[  741.185705][T11372] veth0_vlan: left promiscuous mode
[  741.197593][T11372] veth0_vlan: entered promiscuous mode
[  741.237356][T11387] loop9: detected capacity change from 0 to 512
[  741.245411][T11372] veth1_vlan: entered promiscuous mode
[  741.264653][T11372] veth1_macvtap: left promiscuous mode
[  741.271769][T11372] veth0_macvtap: left promiscuous mode
[  741.288309][T11387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  741.310931][T11372] veth0_macvtap: entered promiscuous mode
[  741.330570][T11372] veth1_macvtap: entered promiscuous mode
[  741.336395][T11387] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.380087][T11372] bridge0: port 3(vlan2) entered blocking state
[  741.386439][T11372] bridge0: port 3(vlan2) entered forwarding state
[  741.394471][   T28] audit: type=1400 audit(1778713836.633:8209): avc:  denied  { write } for  pid=11386 comm="syz.9.13320" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  741.427835][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.454861][T11372] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  741.476233][T11372] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  741.513521][T11372] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  741.531913][T11372] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  741.547649][T11372] 8021q: adding VLAN 0 to HW filter on device bond1
[  741.558284][T11372] 8021q: adding VLAN 0 to HW filter on device bond2
[  741.584696][T25045] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.591976][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  741.609604][ T8903] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  741.633084][T11405] loop1: detected capacity change from 0 to 128
[  741.666644][T25057] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  741.696949][T25057] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  741.721178][T25057] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  741.730283][T25057] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  741.749959][T25057] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  741.766463][T25057] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  741.801355][T25057] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  741.836695][T25057] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  742.049793][T19412] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  742.069784][T11427] netlink: 'syz.2.13333': attribute type 11 has an invalid length.
[  742.098805][T11427] netlink: 'syz.2.13333': attribute type 12 has an invalid length.
[  742.388506][T11445] netlink: 'syz.1.13342': attribute type 1 has an invalid length.
[  742.403052][T11445] 8021q: adding VLAN 0 to HW filter on device bond6
[  742.417085][T11445] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  742.429637][T11445] bond6: entered promiscuous mode
[  742.434883][T11445] bond6: entered allmulticast mode
[  742.579638][ T6039] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  742.661337][T11458] netlink: 'syz.1.13346': attribute type 4 has an invalid length.
[  742.669907][T11458] netlink: 'syz.1.13346': attribute type 4 has an invalid length.
[  742.825375][T11465] loop1: detected capacity change from 0 to 128
[  743.130992][T25057] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  743.157617][T25057] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  743.344288][T11492] __nla_validate_parse: 2 callbacks suppressed
[  743.344307][T11492] netlink: 7 bytes leftover after parsing attributes in process `syz.9.13368'.
[  743.579836][T11503] xfrm0 speed is unknown, defaulting to 1000
[  743.598034][T11506] loop1: detected capacity change from 0 to 2048
[  743.653761][T11506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  743.768484][T11503] lo speed is unknown, defaulting to 1000
[  743.929136][ T8925] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  743.968166][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.776420][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13378'.
[  744.807568][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13378'.
[  744.860843][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13380'.
[  744.975766][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13383'.
[  745.085143][T11564] loop9: detected capacity change from 0 to 512
[  745.094466][T11564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  745.109440][T11564] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.13386: iget: bad i_size value: 38620345925642
[  745.123890][T11564] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  745.135000][T11564] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.13386: couldn't read orphan inode 15 (err -117)
[  745.144016][T11568] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.13389'.
[  745.144517][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  745.172193][    C1] EXT4-fs (loop9): initial error at time 1778713840: ext4_orphan_get:1397: inode 15
[  745.181734][    C1] EXT4-fs (loop9): last error at time 1778713840: ext4_orphan_get:1397: inode 15
[  745.191723][T11564] loop9: lost filesystem error report for type 5 error -117
[  745.191895][T11568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13389'.
[  745.199477][T11564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  745.262536][   T28] audit: type=1400 audit(1778713840.493:8210): avc:  denied  { write } for  pid=11563 comm="syz.9.13386" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  745.364830][T11564] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.13386: bg 0: block 5: invalid block bitmap
[  745.374937][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13392'.
[  745.378759][T11564] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  745.398913][T11564] EXT4-fs (loop9): This should not happen!! Data will be lost
[  745.398913][T11564] 
[  745.408763][T11564] EXT4-fs (loop9): Total free blocks count 0
[  745.414894][T11564] EXT4-fs (loop9): Free/Dirty block details
[  745.421062][T11564] EXT4-fs (loop9): free_blocks=0
[  745.426074][T11564] EXT4-fs (loop9): dirty_blocks=2132
[  745.431442][T11564] EXT4-fs (loop9): Block reservation details
[  745.437486][T11564] EXT4-fs (loop9): i_reserved_data_blocks=2132
[  745.457746][T19408] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 80 with error 28
[  745.602135][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13397'.
[  745.631604][T11591] loop1: detected capacity change from 0 to 128
[  745.739382][T11591] bio_check_eod: 2954 callbacks suppressed
[  745.739401][T11591] syz.1.13398: attempt to access beyond end of device
[  745.739401][T11591] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  745.759781][T11591] syz.1.13398: attempt to access beyond end of device
[  745.759781][T11591] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  745.773975][T11591] syz.1.13398: attempt to access beyond end of device
[  745.773975][T11591] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  745.787993][T11591] syz.1.13398: attempt to access beyond end of device
[  745.787993][T11591] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  745.803766][T11591] syz.1.13398: attempt to access beyond end of device
[  745.803766][T11591] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  745.829084][T11591] syz.1.13398: attempt to access beyond end of device
[  745.829084][T11591] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  745.830114][T19408] net_ratelimit: 67 callbacks suppressed
[  745.830129][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  745.843281][T11591] syz.1.13398: attempt to access beyond end of device
[  745.843281][T11591] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  745.848716][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  745.863657][T11591] syz.1.13398: attempt to access beyond end of device
[  745.863657][T11591] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  745.905388][T11591] syz.1.13398: attempt to access beyond end of device
[  745.905388][T11591] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  745.920595][T11591] syz.1.13398: attempt to access beyond end of device
[  745.920595][T11591] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  746.346250][T11621] loop9: detected capacity change from 0 to 1024
[  746.380850][T11621] EXT4-fs: Ignoring removed nomblk_io_submit option
[  746.409255][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  746.423781][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  746.430976][T11621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  746.591486][   T28] audit: type=1400 audit(1778713841.823:8211): avc:  denied  { write } for  pid=11620 comm="syz.9.13409" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  746.687155][T11635] xfrm0 speed is unknown, defaulting to 1000
[  746.737849][   T28] audit: type=1326 audit(1778713841.963:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.2.13416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x0
[  746.795600][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.870353][T11635] lo speed is unknown, defaulting to 1000
[  747.069054][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  747.083683][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  747.209087][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  747.605094][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13428'.
[  747.699288][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  747.713767][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  748.360976][T25057] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  748.375549][T25057] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  748.503915][T11703] loop1: detected capacity change from 0 to 1024
[  748.535731][T11703] EXT4-fs: Ignoring removed nomblk_io_submit option
[  748.554686][   T28] audit: type=1400 audit(1778713843.783:8213): avc:  denied  { connect } for  pid=11696 comm="syz.9.13435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  748.623516][T11703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  748.695822][   T28] audit: type=1400 audit(1778713843.923:8214): avc:  denied  { write } for  pid=11702 comm="syz.1.13432" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  748.805959][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.820069][   T28] audit: type=1400 audit(1778713844.053:8215): avc:  denied  { connect } for  pid=11712 comm="syz.4.13440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  748.889602][T11723] netlink: 'syz.4.13446': attribute type 1 has an invalid length.
[  748.943757][T11726] loop1: detected capacity change from 0 to 512
[  748.967154][T11723] 8021q: adding VLAN 0 to HW filter on device bond4
[  748.988143][T11726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  749.038679][T11728] bond4: (slave veth5): Enslaving as an active interface with a down link
[  749.063565][T11726] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.13437: iget: bad i_size value: 38620345925642
[  749.088063][T11730] 8021q: adding VLAN 0 to HW filter on device batadv2
[  749.120069][T11726] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  749.123728][T11726] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.13437: couldn't read orphan inode 15 (err -117)
[  749.133157][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  749.133184][    C0] EXT4-fs (loop1): initial error at time 1778713844: ext4_orphan_get:1397: inode 15
[  749.133216][    C0] EXT4-fs (loop1): last error at time 1778713844: ext4_orphan_get:1397: inode 15
[  749.170217][T11726] loop1: lost filesystem error report for type 5 error -117
[  749.170317][T11730] bond4: (slave batadv2): making interface the new active one
[  749.185856][T11726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  749.201164][T11730] batadv2: entered promiscuous mode
[  749.208822][   T28] audit: type=1400 audit(1778713844.433:8216): avc:  denied  { write } for  pid=11725 comm="syz.1.13437" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  749.235378][T11730] bond4: (slave batadv2): Enslaving as an active interface with an up link
[  749.268185][T11732] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.13437: bg 0: block 5: invalid block bitmap
[  749.313461][T11732] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 880 with error 28
[  749.358330][T11732] EXT4-fs (loop1): This should not happen!! Data will be lost
[  749.358330][T11732] 
[  749.393285][T11732] EXT4-fs (loop1): Total free blocks count 0
[  749.419241][T11732] EXT4-fs (loop1): Free/Dirty block details
[  749.425305][T11732] EXT4-fs (loop1): free_blocks=0
[  749.442091][T11732] EXT4-fs (loop1): dirty_blocks=884
[  749.461401][T11732] EXT4-fs (loop1): Block reservation details
[  749.479173][T11732] EXT4-fs (loop1): i_reserved_data_blocks=884
[  749.529057][T11726] EXT4-fs (loop1): shut down requested (0)
[  749.873317][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13454'.
[  749.993381][T11767] loop1: detected capacity change from 0 to 512
[  750.005014][T11769] netlink: 'syz.5.13461': attribute type 1 has an invalid length.
[  750.026278][T11767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  750.032083][T11769] 8021q: adding VLAN 0 to HW filter on device bond3
[  750.073929][T11767] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.13462: iget: bad i_size value: 38620345925642
[  750.110486][T11769] bond3: (slave veth7): Enslaving as an active interface with a down link
[  750.120465][T11767] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  750.120701][T11767] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.13462: couldn't read orphan inode 15 (err -117)
[  750.129883][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  750.129909][    C1] EXT4-fs (loop1): initial error at time 1778713845: ext4_orphan_get:1397: inode 15
[  750.129953][    C1] EXT4-fs (loop1): last error at time 1778713845: ext4_orphan_get:1397: inode 15
[  750.177692][T11775] 8021q: adding VLAN 0 to HW filter on device batadv1
[  750.186625][T11767] loop1: lost filesystem error report for type 5 error -117
[  750.187552][T11767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  750.205922][T11779] loop9: detected capacity change from 0 to 512
[  750.216220][T11779] EXT4-fs: Ignoring removed nobh option
[  750.229031][   T28] audit: type=1400 audit(1778713845.463:8217): avc:  denied  { write } for  pid=11765 comm="syz.1.13462" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  750.254448][T11775] bond3: (slave batadv1): making interface the new active one
[  750.275884][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13466'.
[  750.287871][T11775] batadv1: entered promiscuous mode
[  750.292389][T11779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  750.309317][T11775] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  750.326136][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13466'.
[  750.346552][T11779] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  750.358569][T11767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.13462: bg 0: block 5: invalid block bitmap
[  750.413993][   T28] audit: type=1400 audit(1778713845.643:8218): avc:  denied  { write } for  pid=11778 comm="syz.9.13465" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  750.415155][T11767] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1448 with error 28
[  750.473401][T11779] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.13465: iget: bad i_size value: 2533274857506816
[  750.500838][T11767] EXT4-fs (loop1): This should not happen!! Data will be lost
[  750.500838][T11767] 
[  750.520497][T11767] EXT4-fs (loop1): Total free blocks count 0
[  750.530956][T11779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.540329][T11767] EXT4-fs (loop1): Free/Dirty block details
[  750.546570][T11767] EXT4-fs (loop1): free_blocks=0
[  750.588138][T11767] EXT4-fs (loop1): dirty_blocks=1448
[  750.596217][T11767] EXT4-fs (loop1): Block reservation details
[  750.602390][T11767] EXT4-fs (loop1): i_reserved_data_blocks=1448
[  750.629715][T11767] EXT4-fs (loop1): shut down requested (0)
[  750.653183][T11789] netlink: 'syz.2.13478': attribute type 1 has an invalid length.
[  750.675770][T11796] loop9: detected capacity change from 0 to 128
[  750.690119][T11789] 8021q: adding VLAN 0 to HW filter on device bond6
[  750.725284][T11796] vfat: Unknown parameter ''
[  750.808201][T11799] bond6: (slave veth17): Enslaving as an active interface with a down link
[  750.844228][T11804] 8021q: adding VLAN 0 to HW filter on device batadv1
[  750.852854][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13474'.
[  750.871190][T11804] bond6: (slave batadv1): making interface the new active one
[  750.890958][T11804] batadv1: entered promiscuous mode
[  750.903417][T11804] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  750.962680][T11818] loop1: detected capacity change from 0 to 128
[  750.983087][T11818] vfat: Unknown parameter ''
[  751.010452][T25045] net_ratelimit: 8 callbacks suppressed
[  751.010503][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  751.030443][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  751.086389][T11831] loop9: detected capacity change from 0 to 512
[  751.102136][T11831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  751.115098][T11831] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.13483: iget: bad i_size value: 38620345925642
[  751.167930][T11831] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  751.168183][T11831] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.13483: couldn't read orphan inode 15 (err -117)
[  751.177516][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  751.177559][    C0] EXT4-fs (loop9): initial error at time 1778713846: ext4_orphan_get:1397: inode 15
[  751.177594][    C0] EXT4-fs (loop9): last error at time 1778713846: ext4_orphan_get:1397: inode 15
[  751.259665][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13489'.
[  751.290335][T11831] loop9: lost filesystem error report for type 5 error -117
[  751.291156][T11831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.319669][   T28] audit: type=1400 audit(1778713846.553:8219): avc:  denied  { write } for  pid=11830 comm="syz.9.13483" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  751.391162][T11853] netlink: 'syz.1.13491': attribute type 1 has an invalid length.
[  751.414397][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13492'.
[  751.448102][T11853] 8021q: adding VLAN 0 to HW filter on device bond7
[  751.474998][T11831] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.13483: bg 0: block 5: invalid block bitmap
[  751.507998][T11831] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1176 with error 28
[  751.539134][T11831] EXT4-fs (loop9): This should not happen!! Data will be lost
[  751.539134][T11831] 
[  751.560785][T11831] EXT4-fs (loop9): Total free blocks count 0
[  751.579012][T11831] EXT4-fs (loop9): Free/Dirty block details
[  751.585080][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  751.599448][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  751.622945][T11831] EXT4-fs (loop9): free_blocks=0
[  751.636169][T11831] EXT4-fs (loop9): dirty_blocks=1180
[  751.650465][T11831] EXT4-fs (loop9): Block reservation details
[  751.656640][T11831] EXT4-fs (loop9): i_reserved_data_blocks=1180
[  751.740547][T11831] EXT4-fs (loop9): shut down requested (0)
[  751.758196][T11859] bond7: (slave veth17): Enslaving as an active interface with a down link
[  751.795126][T11853] 8021q: adding VLAN 0 to HW filter on device batadv1
[  751.805144][T11853] bond7: (slave batadv1): making interface the new active one
[  751.815532][T11853] batadv1: entered promiscuous mode
[  751.821115][T11853] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  751.928176][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13497'.
[  751.948122][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13497'.
[  752.160447][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  752.174971][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  752.232262][T11890] loop1: detected capacity change from 0 to 512
[  752.248011][T11890] EXT4-fs: Ignoring removed nobh option
[  752.296027][T11890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  752.330951][T11890] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.357845][   T28] audit: type=1400 audit(1778713847.583:8220): avc:  denied  { read } for  pid=11889 comm="syz.1.13504" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  752.416126][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.434802][   T28] audit: type=1400 audit(1778713847.583:8221): avc:  denied  { open } for  pid=11889 comm="syz.1.13504" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  752.474873][   T28] audit: type=1400 audit(1778713847.583:8222): avc:  denied  { ioctl } for  pid=11889 comm="syz.1.13504" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  752.508726][T11903] netlink: 72 bytes leftover after parsing attributes in process `syz.5.13507'.
[  752.739492][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  752.753911][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  752.885482][T11931] tipc: Failed to remove unknown binding: 66,1,1/0:1297686734/1297686736
[  752.912977][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13519'.
[  753.071491][T11945] loop1: detected capacity change from 0 to 512
[  753.084455][T11945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  753.103077][T11945] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.13522: iget: bad i_size value: 38620345925642
[  753.116465][T11945] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  753.116689][T11945] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.13522: couldn't read orphan inode 15 (err -117)
[  753.125875][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  753.125897][    C0] EXT4-fs (loop1): initial error at time 1778713848: ext4_orphan_get:1397: inode 15
[  753.125928][    C0] EXT4-fs (loop1): last error at time 1778713848: ext4_orphan_get:1397: inode 15
[  753.163413][T11945] loop1: lost filesystem error report for type 5 error -117
[  753.165254][T11945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  753.204774][   T28] audit: type=1400 audit(1778713848.433:8223): avc:  denied  { write } for  pid=11944 comm="syz.1.13522" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  753.269115][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  753.283429][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  753.319446][T11945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.13522: bg 0: block 5: invalid block bitmap
[  753.332410][T11945] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1072 with error 28
[  753.345217][T11945] EXT4-fs (loop1): This should not happen!! Data will be lost
[  753.345217][T11945] 
[  753.360256][T11945] EXT4-fs (loop1): Total free blocks count 0
[  753.405184][T11945] EXT4-fs (loop1): Free/Dirty block details
[  753.431803][T11926] 9p: Bad value for 'wfdno'
[  753.455560][T11945] EXT4-fs (loop1): free_blocks=0
[  753.473072][T11945] EXT4-fs (loop1): dirty_blocks=1072
[  753.484631][T11945] EXT4-fs (loop1): Block reservation details
[  753.505515][T11945] EXT4-fs (loop1): i_reserved_data_blocks=1072
[  753.556985][T11953] EXT4-fs (loop1): shut down requested (0)
[  753.919429][T11966] syzkaller0: entered promiscuous mode
[  753.948352][T11966] syzkaller0: entered allmulticast mode
[  754.136323][T11968] netlink: 'syz.1.13532': attribute type 1 has an invalid length.
[  754.227480][T11968] bond8: entered promiscuous mode
[  754.274020][T11968] 8021q: adding VLAN 0 to HW filter on device bond8
[  754.393080][T11971] 8021q: adding VLAN 0 to HW filter on device bond8
[  754.430316][T11971] bond8: (slave vti0): The slave device specified does not support setting the MAC address
[  754.482930][T11971] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  754.536971][T11971] bond8: (slave vti0): making interface the new active one
[  754.564570][T11971] vti0: entered promiscuous mode
[  754.591135][T11971] bond8: (slave vti0): Enslaving as an active interface with an up link
[  754.926375][T11988] __nla_validate_parse: 3 callbacks suppressed
[  754.926394][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13538'.
[  754.969109][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  755.104262][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13540'.
[  755.269583][ T6036] ip6_tunnel:  xmit: Local address not yet configured!
[  755.277746][ T6036] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  755.293587][   T28] audit: type=1326 audit(1778713850.523:8224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11996 comm="syz.5.13541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  755.327549][   T28] audit: type=1326 audit(1778713850.553:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11996 comm="syz.5.13541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  755.354537][   T28] audit: type=1326 audit(1778713850.553:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11996 comm="syz.5.13541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  755.386488][   T28] audit: type=1326 audit(1778713850.553:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11996 comm="syz.5.13541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  755.419689][ T6036] ip6_tunnel:  xmit: Local address not yet configured!
[  755.444545][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  755.444565][   T28] audit: type=1326 audit(1778713850.663:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11996 comm="syz.5.13541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  755.449320][ T6036] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  755.649094][ T6036] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  755.702197][T12010] netlink: 'syz.5.13546': attribute type 1 has an invalid length.
[  755.740102][T12010] bond4: entered promiscuous mode
[  755.752296][T12010] 8021q: adding VLAN 0 to HW filter on device bond4
[  755.783584][T12017] 8021q: adding VLAN 0 to HW filter on device bond4
[  755.833648][T12017] bond4: (slave vti1): The slave device specified does not support setting the MAC address
[  755.888468][T12017] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  755.935744][T12017] bond4: (slave vti1): making interface the new active one
[  755.944820][T12017] vti1: entered promiscuous mode
[  755.952234][T12017] bond4: (slave vti1): Enslaving as an active interface with an up link
[  756.027385][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13554'.
[  756.087822][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13556'.
[  756.098847][   T28] audit: type=1326 audit(1778713851.323:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.156473][   T28] audit: type=1326 audit(1778713851.323:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.217721][   T28] audit: type=1326 audit(1778713851.323:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.249911][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  756.262377][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  756.287454][   T28] audit: type=1326 audit(1778713851.323:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.364553][   T28] audit: type=1326 audit(1778713851.363:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.390360][T19396] net_ratelimit: 10 callbacks suppressed
[  756.390380][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  756.410425][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  756.421218][   T28] audit: type=1326 audit(1778713851.363:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.427175][ T6039] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  756.542715][   T28] audit: type=1326 audit(1778713851.363:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.588147][   T28] audit: type=1326 audit(1778713851.363:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.640055][   T28] audit: type=1326 audit(1778713851.363:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.13557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  756.763347][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13573'.
[  756.889395][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  756.981794][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  756.996112][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  757.581242][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  757.595609][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  757.803738][T12111] loop1: detected capacity change from 0 to 512
[  757.832776][T12111] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.13579: bad orphan inode 11862016
[  757.851478][T12111] loop1: lost filesystem error report for type 5 error -117
[  757.852629][T12111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  757.881452][T12111] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  757.959511][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  758.029930][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13582'.
[  758.119947][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  758.134690][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  758.759293][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  758.773672][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  758.940022][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13609'.
[  759.252261][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13617'.
[  759.270673][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13617'.
[  759.392818][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13621'.
[  760.146835][T12238] __nla_validate_parse: 1 callbacks suppressed
[  760.146855][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13629'.
[  760.339089][ T6039] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  760.339107][ T6039] ip6_tunnel:  xmit: Local address not yet configured!
[  760.346605][T12257] loop9: detected capacity change from 0 to 512
[  760.361237][ T6039] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  760.399995][ T8901] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  760.418130][T12257] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.13636: corrupted in-inode xattr: overlapping e_value 
[  760.441071][T12257] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  760.441793][T12257] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.13636: couldn't read orphan inode 15 (err -117)
[  760.451153][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  760.451177][    C1] EXT4-fs (loop9): initial error at time 1778713855: ext4_iget_extra_inode:5128: inode 15
[  760.451211][    C1] EXT4-fs (loop9): last error at time 1778713855: ext4_iget_extra_inode:5128: inode 15
[  760.489695][T12257] loop9: lost filesystem error report for type 5 error -117
[  760.491042][T12257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  760.534062][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  760.544288][T25045] batadv2: left promiscuous mode
[  760.579215][ T8901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  760.609715][ T8901] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  760.786451][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13646'.
[  760.797538][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13646'.
[  760.814459][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13646'.
[  760.870813][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13648'.
[  760.949349][ T8926] ip6_tunnel:  xmit: Local address not yet configured!
[  760.958646][ T8926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  760.999719][ T8925] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  761.019187][ T8925] ip6_tunnel:  xmit: Local address not yet configured!
[  761.160587][ T8926] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  761.869201][T25057] net_ratelimit: 10 callbacks suppressed
[  761.869220][T25057] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  761.889396][T25057] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  761.900571][T10718] batadv1: left promiscuous mode
[  762.075306][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13667'.
[  762.090414][T12333] ip6erspan0: entered promiscuous mode
[  762.113702][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13668'.
[  762.135737][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13668'.
[  762.346456][T12353] loop9: detected capacity change from 0 to 1024
[  762.373766][T12353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  762.388163][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  762.388182][   T28] audit: type=1400 audit(1778713857.623:8268): avc:  denied  { write } for  pid=12352 comm="syz.9.13674" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  762.419695][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  762.434224][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  762.495584][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.582298][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  762.604169][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  762.675890][T25057] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.707014][T25057] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.730060][T25057] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.740122][T25057] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.749167][T25057] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.758266][T25057] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.767431][T25057] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.784022][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13680'.
[  762.800419][T25057] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.811254][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13680'.
[  762.909602][T25045] batadv1: left promiscuous mode
[  762.959352][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  762.976896][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  763.369592][T25057] batadv1: left promiscuous mode
[  763.499246][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  763.513571][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  763.810193][T12407] bridge0: port 3(vlan2) entered disabled state
[  763.816596][T12407] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.854772][T12407] batman_adv: batadv0: Interface deactivated: dummy0
[  763.891906][T12407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.957096][T12407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.026915][T12417] lo: Caught tx_queue_len zero misconfig
[  764.045423][T12417] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  764.078680][T25045] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.106904][T25045] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.126129][T25045] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  764.145981][T25045] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.165035][T25045] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.187916][T25045] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  764.210575][T12425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  764.213974][T25045] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.217869][T12425] IPv6: NLM_F_CREATE should be set when creating new route
[  764.217882][T12425] IPv6: NLM_F_CREATE should be set when creating new route
[  764.226934][T25045] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.234044][T12425] IPv6: NLM_F_CREATE should be set when creating new route
[  764.294801][T25045] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  764.304728][T25045] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.314022][T25045] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.323303][T25045] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  764.677185][T12452] xfrm0 speed is unknown, defaulting to 1000
[  764.751749][T12452] lo speed is unknown, defaulting to 1000
[  764.970775][T12472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  764.978262][T12472] IPv6: NLM_F_CREATE should be set when creating new route
[  764.985669][T12472] IPv6: NLM_F_CREATE should be set when creating new route
[  764.992937][T12472] IPv6: NLM_F_CREATE should be set when creating new route
[  765.088708][T25045] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  765.114977][T25045] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  765.125304][T25045] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  765.155343][T25045] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  765.971190][T12492] __nla_validate_parse: 5 callbacks suppressed
[  765.971211][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13724'.
[  766.022456][   T28] audit: type=1400 audit(1778713861.253:8269): avc:  denied  { read } for  pid=12496 comm="syz.2.13725" path="socket:[141539]" dev="sockfs" ino=141539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  766.057602][T12498] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  766.227745][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13727'.
[  766.881889][T12516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  766.889269][T12516] IPv6: NLM_F_CREATE should be set when creating new route
[  766.896563][T12516] IPv6: NLM_F_CREATE should be set when creating new route
[  766.903983][T12516] IPv6: NLM_F_CREATE should be set when creating new route
[  769.239381][ T8925] xfrm0 speed is unknown, defaulting to 1000
[  769.245580][T19408] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  769.254108][ T8925] syz0: Port: 1 Link DOWN
[  769.258510][T19408] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  769.268000][ T8925] xfrm0 speed is unknown, defaulting to 1000
[  769.274845][T19408] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  769.283375][T19408] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  769.291999][T10718] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  769.300721][T10718] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  769.310230][T10718] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  769.319657][T10718] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  769.928763][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13739'.
[  769.942158][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13752'.
[  769.963236][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13752'.
[  770.195594][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13742'.
[  770.473730][T12560] netlink: 'syz.1.13749': attribute type 1 has an invalid length.
[  770.475297][T12561] lo: Caught tx_queue_len zero misconfig
[  770.501828][T12561] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  770.541368][T12560] 8021q: adding VLAN 0 to HW filter on device bond9
[  770.565698][T12564] bond9: option tlb_dynamic_lb: unable to set because the bond device is up
[  770.677186][T12569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  770.684564][T12569] IPv6: NLM_F_CREATE should be set when creating new route
[  770.691820][T12569] IPv6: NLM_F_CREATE should be set when creating new route
[  770.699046][T12569] IPv6: NLM_F_CREATE should be set when creating new route
[  770.928864][T19408] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  770.971670][T19408] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  771.011766][T19408] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  771.042775][T19408] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  771.066142][T19408] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  771.077471][T19408] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  771.086354][T19408] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  771.095451][T19408] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  771.274057][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13757'.
[  771.323158][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13759'.
[  771.341064][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13759'.
[  771.468847][T12600] netlink: 'syz.4.13764': attribute type 1 has an invalid length.
[  771.502789][T12600] 8021q: adding VLAN 0 to HW filter on device bond5
[  771.523730][T12602] bond5: option tlb_dynamic_lb: unable to set because the bond device is up
[  771.755434][T12617] lo: Caught tx_queue_len zero misconfig
[  771.776301][T12617] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  772.574365][T12624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13771'.
[  772.920369][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13773'.
[  772.937093][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13773'.
[  773.082593][T12641] netlink: 'syz.2.13777': attribute type 1 has an invalid length.
[  773.130840][T12641] 8021q: adding VLAN 0 to HW filter on device bond7
[  773.162033][T12643] bond7: option tlb_dynamic_lb: unable to set because the bond device is up
[  773.368637][T12647] syzkaller0: entered allmulticast mode
[  773.396719][T12647] syzkaller0: entered promiscuous mode
[  773.428915][T12647] syzkaller0 (unregistering): left allmulticast mode
[  773.465119][T12647] syzkaller0 (unregistering): left promiscuous mode
[  773.617906][T12654] loop1: detected capacity change from 0 to 256
[  773.634849][T12654] vfat: Bad value for 'dmask'
[  773.672936][T12657] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  774.463417][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13787'.
[  774.470075][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13788'.
[  774.482967][T12669] loop9: detected capacity change from 0 to 256
[  774.495916][T12669] vfat: Bad value for 'dmask'
[  774.505637][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13788'.
[  774.867237][T12695] netlink: 'syz.2.13802': attribute type 27 has an invalid length.
[  774.897655][T12695] netlink: 'syz.2.13802': attribute type 3 has an invalid length.
[  774.921800][T12695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13802'.
[  775.388811][T12711] netlink: 'syz.4.13805': attribute type 10 has an invalid length.
[  775.420362][T12711] team0 (unregistering): Port device team_slave_0 removed
[  775.425056][   T28] audit: type=1400 audit(1778713870.653:8270): avc:  denied  { accept } for  pid=12708 comm="syz.5.13816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  775.456650][T12711] team0 (unregistering): Port device team_slave_1 removed
[  775.598075][T12714] syzkaller0: entered allmulticast mode
[  775.629800][T12714] syzkaller0: entered promiscuous mode
[  775.661906][T12714] syzkaller0 (unregistering): left allmulticast mode
[  775.696059][T12714] syzkaller0 (unregistering): left promiscuous mode
[  776.730685][T25045] bond0: left allmulticast mode
[  776.735645][T25045] bond_slave_0: left allmulticast mode
[  776.741874][T25045] bond_slave_1: left allmulticast mode
[  776.747551][T25045] bond0: left promiscuous mode
[  776.755446][T25045] bond_slave_0: left promiscuous mode
[  776.763171][T25045] bond_slave_1: left promiscuous mode
[  776.769757][T25045] bridge0: port 3(bond0) entered disabled state
[  776.776881][T25045] bridge_slave_1: left allmulticast mode
[  776.782770][T25045] bridge_slave_1: left promiscuous mode
[  776.788551][T25045] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.796934][T25045] bridge_slave_0: left allmulticast mode
[  776.802674][T25045] bridge_slave_0: left promiscuous mode
[  776.808397][T25045] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.971903][T25045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  776.985198][T25045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  776.995148][T25045] bond0 (unregistering): Released all slaves
[  777.003993][T25045] bond1 (unregistering): Released all slaves
[  777.055006][T25045] tipc: Disabling bearer <udp:s>
[  777.063333][T25045] tipc: Left network mode
[  777.220706][T25045] hsr_slave_0: left promiscuous mode
[  777.236053][T25045] hsr_slave_1: left promiscuous mode
[  777.252763][T25045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.273408][T25045] batman_adv: batadv0: Removing interface: batadv_slave_0
[  777.292610][T25045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  777.311593][T25045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  777.336775][T25045] batman_adv: batadv0: Interface deactivated: dummy0
[  777.355823][T25045] batman_adv: batadv0: Removing interface: dummy0
[  777.378588][T25045] veth1_macvtap: left promiscuous mode
[  777.394588][T25045] veth0_macvtap: left promiscuous mode
[  777.532262][T25045] team0 (unregistering): Port device veth0_to_hsr removed
[  777.574350][T25045] team0 (unregistering): Port device team_slave_1 removed
[  777.608379][T25045] team0 (unregistering): Port device team_slave_0 removed
[  777.735591][T19408] smc: removing ib device s
z1
[  777.743356][ T6039] lo speed is unknown, defaulting to 1000
[  777.767845][ T6039] s
z1: Port: 1 Link DOWN
[  778.641450][T25045] IPVS: stop unused estimator thread 0...
[  779.356710][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13825'.
[  779.716967][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13817'.
[  779.724105][T12756] netlink: 'syz.9.13815': attribute type 27 has an invalid length.
[  779.776966][T12756] netlink: 'syz.9.13815': attribute type 3 has an invalid length.
[  779.812193][T12756] netlink: 132 bytes leftover after parsing attributes in process `syz.9.13815'.
[  780.675153][T12770] loop1: detected capacity change from 0 to 128
[  781.889427][T12809] netlink: 'syz.4.13840': attribute type 27 has an invalid length.
[  781.910084][T12809] netlink: 'syz.4.13840': attribute type 3 has an invalid length.
[  781.929612][T12809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13840'.
[  782.109414][T12812] netlink: 'syz.2.13841': attribute type 10 has an invalid length.
[  784.007281][T12820] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  784.041779][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13848'.
[  784.153585][T12833] pimreg: entered allmulticast mode
[  784.188529][T12832] pimreg: left allmulticast mode
[  784.200373][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13851'.
[  785.215007][T12844] netlink: 'syz.1.13852': attribute type 27 has an invalid length.
[  785.225971][T12844] netlink: 'syz.1.13852': attribute type 3 has an invalid length.
[  785.234825][T12844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13852'.
[  785.324666][T12852] netlink: 'syz.9.13856': attribute type 10 has an invalid length.
[  785.352143][T12852] team0 (unregistering): Port device team_slave_0 removed
[  785.365743][T12852] team0 (unregistering): Port device team_slave_1 removed
[  785.628763][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13862'.
[  786.462458][T19396] batadv1: left allmulticast mode
[  786.488392][T19396] batadv1: left promiscuous mode
[  786.517204][T19396] bridge0: port 3(batadv1) entered disabled state
[  786.549953][T19396] bridge_slave_1: left allmulticast mode
[  786.573295][T19396] bridge_slave_1: left promiscuous mode
[  786.594887][T19396] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.624680][T19396] bridge_slave_0: left allmulticast mode
[  786.644788][T19396] bridge_slave_0: left promiscuous mode
[  786.670425][T19396] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.978267][T19396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.014947][T19396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.043619][T19396] bond0 (unregistering): Released all slaves
[  787.204115][T19396] hsr_slave_0: left promiscuous mode
[  787.223878][T19396] hsr_slave_1: left promiscuous mode
[  787.239765][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  787.263466][T19396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  787.288136][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  787.308645][T19396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.351334][T12892] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  787.362215][T19396] veth1_macvtap: left promiscuous mode
[  787.379451][T19396] veth0_macvtap: left promiscuous mode
[  787.395044][T19396] veth1_vlan: left promiscuous mode
[  787.409132][T19396] veth0_vlan: left promiscuous mode
[  787.597009][T19396] team0 (unregistering): Port device team_slave_1 removed
[  787.621035][T19396] team0 (unregistering): Port device team_slave_0 removed
[  787.686185][T19396] team0 (unregistering): Port device dummy0 removed
[  787.717464][T12900] bond4: entered allmulticast mode
[  787.729005][T12900] vti1: entered allmulticast mode
[  787.745013][T12902] pimreg: entered allmulticast mode
[  787.771441][T12897] pimreg: left allmulticast mode
[  787.786636][T12897] bond4: left allmulticast mode
[  787.791799][T12897] vti1: left allmulticast mode
[  788.060783][T19396] bridge_slave_1: left allmulticast mode
[  788.066592][T19396] bridge_slave_1: left promiscuous mode
[  788.072599][T19396] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.080467][T19396] bridge_slave_0: left allmulticast mode
[  788.086130][T19396] bridge_slave_0: left promiscuous mode
[  788.092028][T19396] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.231446][T19396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.241410][T19396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.251660][T19396] bond0 (unregistering): Released all slaves
[  788.260385][T19396] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  788.269537][T19396] bond1 (unregistering): Released all slaves
[  788.278822][T19396] bond2 (unregistering): Released all slaves
[  788.288702][T19396] bond3 (unregistering): (slave bond4): Releasing backup interface
[  788.296992][T19396] bond4 (unregistering): left promiscuous mode
[  788.303854][T19396] bond3 (unregistering): Released all slaves
[  788.313270][T19396] bond4 (unregistering): Released all slaves
[  788.394759][T19396] hsr_slave_0: left promiscuous mode
[  788.400679][T19396] hsr_slave_1: left promiscuous mode
[  788.406368][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  788.415760][T19396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  788.424200][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  788.431749][T19396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.443208][T19396] veth1_macvtap: left promiscuous mode
[  788.448826][T19396] veth0_macvtap: left promiscuous mode
[  788.518137][T19396] team0 (unregistering): Port device team_slave_1 removed
[  788.528638][T19396] team0 (unregistering): Port device team_slave_0 removed
[  788.591776][T12915] bond8: entered allmulticast mode
[  788.602794][T12915] vti0: entered allmulticast mode
[  788.620544][T12920] pimreg: entered allmulticast mode
[  788.640424][T12907] pimreg: left allmulticast mode
[  788.652557][T12907] bond8: left allmulticast mode
[  788.657886][T12907] vti0: left allmulticast mode
[  789.360223][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13880'.
[  789.632871][T12941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13881'.
[  789.889111][T12952] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  791.375360][T12965] bond3: entered allmulticast mode
[  791.383442][T12965] vti0: entered allmulticast mode
[  791.390239][T12971] loop1: detected capacity change from 0 to 256
[  791.399943][T12965] pimreg: entered allmulticast mode
[  791.421883][T12964] pimreg: left allmulticast mode
[  791.440277][T12964] bond3: left allmulticast mode
[  791.448159][T12964] vti0: left allmulticast mode
[  791.502833][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13899'.
[  791.556788][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13905'.
[  792.242226][T13009] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  793.179355][T13057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13927'.
[  794.419835][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13945'.
[  795.256175][T13132] sctp: [Deprecated]: syz.4.13957 (pid 13132) Use of int in max_burst socket option.
[  795.256175][T13132] Use struct sctp_assoc_value instead
[  795.304017][   T28] audit: type=1326 audit(1778713890.533:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.341707][   T28] audit: type=1326 audit(1778713890.563:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.368195][   T28] audit: type=1326 audit(1778713890.563:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.395545][   T28] audit: type=1326 audit(1778713890.563:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.421929][   T28] audit: type=1326 audit(1778713890.563:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.450032][   T28] audit: type=1326 audit(1778713890.563:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.477904][   T28] audit: type=1326 audit(1778713890.563:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.505917][   T28] audit: type=1326 audit(1778713890.563:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.554044][   T28] audit: type=1326 audit(1778713890.563:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff361f7d68e code=0x7ffc0000
[  795.582715][   T28] audit: type=1326 audit(1778713890.563:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.4.13959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361fbce59 code=0x7ffc0000
[  795.635372][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13962'.
[  795.654320][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13962'.
[  795.688129][T13150] netlink: 'syz.4.13965': attribute type 27 has an invalid length.
[  795.700334][T13150] b��Y�4��`Ҙ: left allmulticast mode
[  795.703131][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13976'.
[  795.710120][T13150] ipip0: left promiscuous mode
[  795.720405][T13150] bond3: left promiscuous mode
[  795.725273][T13150] vti0: left promiscuous mode
[  796.187927][T13146] veth0_macvtap: Caught tx_queue_len zero misconfig
[  796.216176][T13152] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.227152][T13152] batman_adv: batadv0: Interface activated: dummy0
[  796.240215][T13152] batadv0: mtu less than device minimum
[  796.250449][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.261385][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.264696][T13159] netlink: 264 bytes leftover after parsing attributes in process `syz.9.13968'.
[  796.272155][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.281341][T13159] netlink: 264 bytes leftover after parsing attributes in process `syz.9.13968'.
[  796.292102][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.311584][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.322492][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.333568][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.344595][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.355622][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.395336][T13152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.406904][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13971'.
[  796.428920][T13165] netlink: 'syz.9.13971': attribute type 30 has an invalid length.
[  796.452542][T13152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  796.460637][T13168] netlink: 'syz.9.13971': attribute type 30 has an invalid length.
[  796.484675][T13152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  796.505817][T13152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  796.518575][T13152] veth1_vlan: left promiscuous mode
[  796.524592][T13152] veth0_vlan: left promiscuous mode
[  796.531708][T13152] veth0_vlan: entered promiscuous mode
[  796.549274][T13152] veth1_vlan: entered promiscuous mode
[  796.558403][T13152] veth1_macvtap: left promiscuous mode
[  796.564906][T13152] veth0_macvtap: left promiscuous mode
[  796.571179][T13152] veth0_macvtap: entered promiscuous mode
[  796.577597][T13152] veth1_macvtap: entered promiscuous mode
[  796.585701][T13152] bridge0: port 3(vlan2) entered blocking state
[  796.592372][T13152] bridge0: port 3(vlan2) entered forwarding state
[  796.603874][T13152] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  796.613106][T13152] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  796.621564][T13152] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  796.629809][T13152] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  796.641887][T13152] 8021q: adding VLAN 0 to HW filter on device bond1
[  796.651042][T13152] 8021q: adding VLAN 0 to HW filter on device bond2
[  796.663131][T25045] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.670403][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.739353][T19412] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  796.757456][T19412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  796.778933][T19412] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  796.790963][T19412] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  796.801662][T19412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  796.837331][T19412] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  796.877750][T19412] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  796.887956][T13187] __nla_validate_parse: 2 callbacks suppressed
[  796.887975][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13990'.
[  796.892988][ T8925] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  796.893005][ T8925] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  796.907369][T19412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  796.946307][T19412] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  796.955829][T19412] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  796.964824][T19412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  796.979837][T19412] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  797.006928][T19412] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  797.017986][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13989'.
[  797.034228][T10718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  797.050580][T19412] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  797.075705][T19412] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  797.114188][T19412] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  797.155974][T13204] xfrm0 speed is unknown, defaulting to 1000
[  797.322634][T13208] xfrm0 speed is unknown, defaulting to 1000
[  797.351395][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14003'.
[  797.689352][   T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  797.714127][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14014'.
[  797.758380][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14014'.
[  797.791743][ T6039] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  797.820185][ T6039] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  797.897194][T13270] fido_id[13270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  798.024809][T13286] loop9: detected capacity change from 0 to 128
[  798.060384][T13287] loop1: detected capacity change from 0 to 1024
[  798.077220][T13287] EXT4-fs: Ignoring removed bh option
[  798.100192][T25045] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  798.102415][T13287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  798.122271][T25045] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  798.786986][T19412] bio_check_eod: 95 callbacks suppressed
[  798.787187][T19412] kworker/u8:14: attempt to access beyond end of device
[  798.787187][T19412] loop9: rw=1, sector=145, nr_sectors = 896 limit=128
[  798.972211][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.997048][T13314] xt_hashlimit: size too large, truncated to 1048576
[  799.049209][ T9163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  799.172326][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14048'.
[  799.179759][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14038'.
[  799.218700][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14048'.
[  799.626779][T13365] netlink: 116 bytes leftover after parsing attributes in process `syz.1.14047'.
[  799.644966][T13367] dvmrp1: entered allmulticast mode
[  799.740344][T13372] dvmrp1: left allmulticast mode
[  800.152174][T13385] bridge0: port 3(batadv2) entered blocking state
[  800.158792][T13385] bridge0: port 3(batadv2) entered disabled state
[  800.165470][T13385] batadv2: entered allmulticast mode
[  800.172191][T13385] batadv2: entered promiscuous mode
[  800.556873][   T28] kauditd_printk_skb: 46 callbacks suppressed
[  800.556903][   T28] audit: type=1326 audit(1778713895.783:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.629761][   T28] audit: type=1326 audit(1778713895.783:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.656267][T19396] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  800.665580][T19396] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  800.699381][   T28] audit: type=1326 audit(1778713895.783:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.742481][   T28] audit: type=1326 audit(1778713895.783:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.771001][   T28] audit: type=1326 audit(1778713895.783:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.811198][   T28] audit: type=1326 audit(1778713895.783:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.857972][   T28] audit: type=1326 audit(1778713895.783:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.928821][   T28] audit: type=1326 audit(1778713895.813:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  800.975949][   T28] audit: type=1326 audit(1778713895.813:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  801.014732][   T28] audit: type=1326 audit(1778713895.813:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.14075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f539c6bce59 code=0x7ffc0000
[  801.283175][T13454] loop1: detected capacity change from 0 to 128
[  801.384020][T13458] syz.1.14088: attempt to access beyond end of device
[  801.384020][T13458] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  801.430272][T19408] net_ratelimit: 68 callbacks suppressed
[  801.430318][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  801.431970][T13458] syz.1.14088: attempt to access beyond end of device
[  801.431970][T13458] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  801.436034][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  801.572135][T13458] syz.1.14088: attempt to access beyond end of device
[  801.572135][T13458] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  801.599182][T13458] syz.1.14088: attempt to access beyond end of device
[  801.599182][T13458] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  801.616295][T13458] syz.1.14088: attempt to access beyond end of device
[  801.616295][T13458] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  801.631146][T13458] syz.1.14088: attempt to access beyond end of device
[  801.631146][T13458] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  801.645028][T13458] syz.1.14088: attempt to access beyond end of device
[  801.645028][T13458] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  801.659072][T13458] syz.1.14088: attempt to access beyond end of device
[  801.659072][T13458] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  801.693692][T13458] syz.1.14088: attempt to access beyond end of device
[  801.693692][T13458] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  801.769059][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  801.803716][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.816240][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.959029][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  801.973529][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  802.354146][T13485] netlink: 264 bytes leftover after parsing attributes in process `syz.1.14098'.
[  802.364341][T13485] netlink: 264 bytes leftover after parsing attributes in process `syz.1.14098'.
[  802.490048][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  802.504743][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  802.542353][T13493] netlink: 'syz.2.14102': attribute type 1 has an invalid length.
[  802.554508][T13492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14101'.
[  802.557530][T13493] bond8: entered promiscuous mode
[  802.566599][T13492] netlink: 'syz.1.14101': attribute type 7 has an invalid length.
[  802.569078][T13493] 8021q: adding VLAN 0 to HW filter on device bond8
[  802.577570][T13492] netlink: 'syz.1.14101': attribute type 8 has an invalid length.
[  802.591968][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14101'.
[  802.611203][T13493] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  802.623672][T13493] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  802.634380][T13493] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  802.805400][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14113'.
[  802.834986][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14113'.
[  803.039989][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  803.054591][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  803.109530][T13535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14119'.
[  803.118874][T13535] netlink: 'syz.4.14119': attribute type 7 has an invalid length.
[  803.126878][T13535] netlink: 'syz.4.14119': attribute type 8 has an invalid length.
[  803.135167][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14119'.
[  803.147944][T13535] erspan0: entered promiscuous mode
[  803.154434][T13535] gretap0: entered promiscuous mode
[  803.160862][T13535] erspan0: left promiscuous mode
[  803.166863][T13535] gretap0: left promiscuous mode
[  803.527147][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14125'.
[  803.548577][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14125'.
[  803.579130][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  803.593645][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  804.130027][T13577] netlink: 'syz.9.14136': attribute type 7 has an invalid length.
[  804.149225][T13577] netlink: 'syz.9.14136': attribute type 8 has an invalid length.
[  804.369720][T13595] loop9: detected capacity change from 0 to 128
[  804.498253][T13595] bio_check_eod: 102 callbacks suppressed
[  804.498271][T13595] syz.9.14142: attempt to access beyond end of device
[  804.498271][T13595] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128
[  804.578125][T13595] syz.9.14142: attempt to access beyond end of device
[  804.578125][T13595] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  804.626235][T13595] syz.9.14142: attempt to access beyond end of device
[  804.626235][T13595] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128
[  804.668300][T13595] syz.9.14142: attempt to access beyond end of device
[  804.668300][T13595] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128
[  804.710224][T13595] syz.9.14142: attempt to access beyond end of device
[  804.710224][T13595] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128
[  804.761392][T13595] syz.9.14142: attempt to access beyond end of device
[  804.761392][T13595] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128
[  804.795667][T13595] syz.9.14142: attempt to access beyond end of device
[  804.795667][T13595] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128
[  804.851026][T13595] syz.9.14142: attempt to access beyond end of device
[  804.851026][T13595] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128
[  804.897808][T13595] syz.9.14142: attempt to access beyond end of device
[  804.897808][T13595] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128
[  804.953586][T13595] syz.9.14142: attempt to access beyond end of device
[  804.953586][T13595] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128
[  805.012317][T13618] xt_hashlimit: size too large, truncated to 1048576
[  805.084750][T13628] loop9: detected capacity change from 0 to 256
[  805.805542][   T28] kauditd_printk_skb: 104 callbacks suppressed
[  805.805607][   T28] audit: type=1400 audit(1778713901.033:8441): avc:  denied  { unmount } for  pid=4570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  806.181776][T13636] kexec: Could not allocate control_code_buffer
[  806.679055][T19408] net_ratelimit: 10 callbacks suppressed
[  806.679075][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  806.699134][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  807.259914][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  807.274478][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  807.381419][T13690] __nla_validate_parse: 4 callbacks suppressed
[  807.381474][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14191'.
[  807.413415][T13690] netlink: 'syz.9.14191': attribute type 11 has an invalid length.
[  807.430926][T13690] netlink: 'syz.9.14191': attribute type 12 has an invalid length.
[  808.001972][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  808.016355][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  808.423124][T13710] dummy0: Caught tx_queue_len zero misconfig
[  808.579191][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  808.593650][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  809.149213][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  809.163839][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  809.369406][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  809.882941][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14200'.
[  809.892529][T13729] xfrm0 speed is unknown, defaulting to 1000
[  809.927648][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14201'.
[  810.231765][T13757] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.14209'.
[  810.255097][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14209'.
[  810.287326][   T28] audit: type=1326 audit(1778713905.513:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.5.14210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x0
[  810.479451][T13768] xfrm0 speed is unknown, defaulting to 1000
[  811.042312][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14216'.
[  811.087537][T13782] loop1: detected capacity change from 0 to 1024
[  811.103723][T13782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  811.134459][T13782] EXT4-fs (loop1): shut down requested (0)
[  811.216430][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.769109][T19412] net_ratelimit: 8 callbacks suppressed
[  811.769131][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  811.789130][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  812.349113][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  812.363464][T10718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  812.909563][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  812.924252][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  813.005095][T13839] sctp: [Deprecated]: syz.5.14239 (pid 13839) Use of int in max_burst socket option.
[  813.005095][T13839] Use struct sctp_assoc_value instead
[  813.142054][T13850] sctp: [Deprecated]: syz.2.14255 (pid 13850) Use of int in max_burst socket option.
[  813.142054][T13850] Use struct sctp_assoc_value instead
[  813.248473][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14246'.
[  813.287690][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14246'.
[  813.489093][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  813.503618][T19412] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  813.595981][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14253'.
[  813.905873][T13882] sctp: [Deprecated]: syz.1.14257 (pid 13882) Use of int in max_burst socket option.
[  813.905873][T13882] Use struct sctp_assoc_value instead
[  813.946334][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14258'.
[  813.996365][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14258'.
[  814.099027][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  814.113518][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  814.146501][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14263'.
[  814.152594][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14278'.
[  814.164944][T13904] netlink: 'syz.2.14278': attribute type 30 has an invalid length.
[  814.197301][T25045] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  814.218784][T25045] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  814.222059][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14278'.
[  814.236939][T25045] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  814.253390][T13904] netlink: 'syz.2.14278': attribute type 30 has an invalid length.
[  814.253796][T13915] loop1: detected capacity change from 0 to 128
[  814.268354][T25045] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  814.476557][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14276'.
[  814.486857][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14276'.
[  814.822964][T25057] bio_check_eod: 21 callbacks suppressed
[  814.822983][T25057] kworker/u8:23: attempt to access beyond end of device
[  814.822983][T25057] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  814.902129][T13943] netlink: 'syz.1.14282': attribute type 27 has an invalid length.
[  814.919393][T13949] netlink: 'syz.5.14287': attribute type 30 has an invalid length.
[  814.939996][T13943] bond6: left promiscuous mode
[  814.945380][T13943] bond6: left allmulticast mode
[  814.951264][T13943] bond8: left promiscuous mode
[  814.956746][T13943] vti0: left promiscuous mode
[  814.969954][T13951] netlink: 'syz.5.14287': attribute type 30 has an invalid length.
[  815.008934][T13950] 8021q: adding VLAN 0 to HW filter on device bond0
[  815.017190][T13950] 8021q: adding VLAN 0 to HW filter on device team0
[  815.026077][T13950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  815.052329][T13950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  815.061998][T13950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  815.073300][T13950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  815.084073][T13950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  815.096849][T13950] veth1_macvtap: left promiscuous mode
[  815.108720][T13950] veth0_macvtap: left promiscuous mode
[  815.115575][T13950] veth0_macvtap: entered promiscuous mode
[  815.122330][T13950] veth1_macvtap: entered promiscuous mode
[  815.130360][T13950] bridge0: port 3(vlan0) entered blocking state
[  815.136659][T13950] bridge0: port 3(vlan0) entered forwarding state
[  815.146895][T13950] 8021q: adding VLAN 0 to HW filter on device bond1
[  815.155730][T13950] 8021q: adding VLAN 0 to HW filter on device bond2
[  815.167710][T13950] 8021q: adding VLAN 0 to HW filter on device bond3
[  815.178328][T13950] 8021q: adding VLAN 0 to HW filter on device bond4
[  815.195849][T13950] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  815.206176][T13950] 8021q: adding VLAN 0 to HW filter on device eth0
[  815.214202][T13950] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  815.225105][T13950] 8021q: adding VLAN 0 to HW filter on device eth1
[  815.233383][T13950] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  815.243474][T13950] 8021q: adding VLAN 0 to HW filter on device eth2
[  815.251638][T13950] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  815.261884][T13950] 8021q: adding VLAN 0 to HW filter on device eth3
[  815.270282][T13950] 8021q: adding VLAN 0 to HW filter on device bond5
[  815.280643][T13950] 8021q: adding VLAN 0 to HW filter on device bond6
[  815.291189][T13950] 8021q: adding VLAN 0 to HW filter on device bond7
[  815.301086][T13950] 8021q: adding VLAN 0 to HW filter on device batadv1
[  815.310314][T13950] 8021q: adding VLAN 0 to HW filter on device bond8
[  815.322307][T13950] 8021q: adding VLAN 0 to HW filter on device bond9
[  815.334648][T19412] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  815.356378][T19412] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  815.377122][T25057] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.384377][T25057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.425420][T19412] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  815.434526][T19412] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  815.445919][T10718] ip6_tunnel: �������� xmit: Local address not yet configured!
[  815.464299][T10718] ip6_tunnel: �������� xmit: Local address not yet configured!
[  815.484240][T10718] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  815.491565][ T8907] ip6_tunnel: �������� xmit: Local address not yet configured!
[  815.499066][T10718] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  815.539917][T10718] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  815.559646][T10718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.569661][T10718] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  815.597822][T10718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.609764][    T9] ip6_tunnel: �������� xmit: Local address not yet configured!
[  815.625635][T10718] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  815.644241][T10718] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.678383][T25057] ip6_tunnel:  xmit: Local address not yet configured!
[  815.704555][ T6039] ip6_tunnel:  xmit: Local address not yet configured!
[  815.712161][T25057] ip6_tunnel:  xmit: Local address not yet configured!
[  815.749221][T19408] bond6: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  815.771523][T19408] bond6: (slave veth0_to_bond): making interface the new active one
[  815.784903][T19408] bond6: active interface up!
[  815.799371][T10718] bond7: (slave veth17): link status definitely up, 10000 Mbps full duplex
[  816.049732][    T9] ip6_tunnel:  xmit: Local address not yet configured!
[  816.249310][ T9163] ip6_tunnel: �������� xmit: Local address not yet configured!
[  816.569459][    T9] ip6_tunnel:  xmit: Local address not yet configured!
[  816.752611][T14013] netlink: 'syz.9.14312': attribute type 27 has an invalid length.
[  816.769271][T14013] sit0: left promiscuous mode
[  816.781959][T14013] bond3: left promiscuous mode
[  816.787745][T14013] ip6erspan0: left promiscuous mode
[  816.908303][T14020] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.935405][T14020] batman_adv: batadv0: Interface activated: dummy0
[  816.954249][T14020] net_ratelimit: 10 callbacks suppressed
[  816.954277][T14020] batadv0: mtu less than device minimum
[  816.988690][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  816.999609][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.010439][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.021582][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.032588][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.043680][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.054636][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.065556][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.076460][T14020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  817.190532][T14020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.248894][T14020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  817.297299][T14020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  817.366698][T14020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  817.388996][T14020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  817.402648][T14020] veth1_vlan: left promiscuous mode
[  817.414671][T14020] veth0_vlan: left promiscuous mode
[  817.434949][T14020] veth0_vlan: entered promiscuous mode
[  817.459632][T14020] veth1_vlan: entered promiscuous mode
[  817.466836][   T28] audit: type=1326 audit(1778713912.693:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.497536][T14020] veth1_macvtap: left promiscuous mode
[  817.521268][T14020] veth0_macvtap: left promiscuous mode
[  817.538790][   T28] audit: type=1326 audit(1778713912.693:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.545703][T14020] veth0_macvtap: entered promiscuous mode
[  817.622746][T14020] veth1_macvtap: entered promiscuous mode
[  817.646411][   T28] audit: type=1326 audit(1778713912.693:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.657201][T14020] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  817.699231][   T28] audit: type=1326 audit(1778713912.693:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.704469][T14023] kexec: Could not allocate control_code_buffer
[  817.725314][   T28] audit: type=1326 audit(1778713912.693:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.745703][T14020] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.776376][   T28] audit: type=1326 audit(1778713912.693:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.805637][T14020] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.816173][T14020] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  817.841887][T14020] 8021q: adding VLAN 0 to HW filter on device bond1
[  817.844439][   T28] audit: type=1326 audit(1778713912.693:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.863475][T14020] 8021q: adding VLAN 0 to HW filter on device batadv1
[  817.874706][   T28] audit: type=1326 audit(1778713912.693:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.890546][T14020] 8021q: adding VLAN 0 to HW filter on device bond2
[  817.907219][   T28] audit: type=1326 audit(1778713912.693:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.933712][T14020] 8021q: adding VLAN 0 to HW filter on device bond3
[  817.940119][   T28] audit: type=1326 audit(1778713912.693:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.5.14321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c6c62ce59 code=0x7ffc0000
[  817.980122][T25057] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  817.989399][T25057] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.011065][T25045] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.018226][T25045] bridge0: port 1(bridge_slave_0) entered forwarding state
[  818.031690][T25045] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.038898][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  818.134240][T25057] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.143682][T25057] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.170618][T19408] bond1: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  818.283349][T14037] __nla_validate_parse: 4 callbacks suppressed
[  818.283368][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14324'.
[  818.312041][T14043] netlink: 'syz.5.14334': attribute type 27 has an invalid length.
[  818.329657][T14043] bond4: left promiscuous mode
[  818.334973][T14043] vti1: left promiscuous mode
[  818.383291][T19408] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  818.439655][T14043] 8021q: adding VLAN 0 to HW filter on device bond0
[  818.452106][T14043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  818.503524][T14043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  818.512567][T14043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.523358][T14043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  818.534583][T14043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  818.555464][T14043] veth1_macvtap: left promiscuous mode
[  818.568861][T14043] veth0_macvtap: left promiscuous mode
[  818.583417][T14043] veth0_macvtap: entered promiscuous mode
[  818.601626][T14043] veth1_macvtap: entered promiscuous mode
[  818.621935][T14043] bridge0: port 3(vlan0) entered blocking state
[  818.628284][T14043] bridge0: port 3(vlan0) entered listening state
[  818.660604][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  818.683051][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  818.703850][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  818.722136][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  818.740988][T14043] 8021q: adding VLAN 0 to HW filter on device bond1
[  818.766180][T14043] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  818.792985][T14043] 8021q: adding VLAN 0 to HW filter on device bond2
[  818.834355][T14043] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  818.895436][T14043] 8021q: adding VLAN 0 to HW filter on device bond3
[  818.924177][T14043] 8021q: adding VLAN 0 to HW filter on device batadv1
[  818.935510][T14043] 8021q: adding VLAN 0 to HW filter on device bond4
[  818.959805][T19408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.011658][T14056] loop1: detected capacity change from 0 to 2048
[  819.014079][T19408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.061116][T14056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  819.083500][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.090637][ T3453] bridge0: port 2(bridge_slave_1) entered listening state
[  819.152620][T19408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.170219][T19408] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  819.179342][T19408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.188588][ T4570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.212843][T25045] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  819.403743][T14075] tipc: Failed to obtain node identity
[  819.410643][T14075] tipc: Enabling of bearer <ib:wg1> rejected, failed to enable media
[  819.456543][T14083] loop9: detected capacity change from 0 to 256
[  819.536765][T14087] tipc: Started in network mode
[  819.551079][T14087] tipc: Node identity ca9d9c06f6be, cluster identity 4711
[  819.565854][T14087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  819.585442][T14078] tipc: Resetting bearer <eth:syzkaller0>
[  819.595412][T14078] tipc: Disabling bearer <eth:syzkaller0>
[  820.280183][T14077] kexec: Could not allocate control_code_buffer
[  820.404526][T14112] tipc: Enabling of bearer <ib:wg1> rejected, failed to enable media
[  820.717372][T14129] tipc: Started in network mode
[  820.740311][T14129] tipc: Node identity 828a8d3427f3, cluster identity 4711
[  820.774610][T14129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  820.812024][T14126] tipc: Resetting bearer <eth:syzkaller0>
[  820.841168][T14126] tipc: Disabling bearer <eth:syzkaller0>
[  822.159312][T14147] kexec: Could not allocate control_code_buffer
[  822.353125][T19396] net_ratelimit: 90 callbacks suppressed
[  822.353160][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  822.373257][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  822.432196][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  822.446651][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  822.489031][    C0] ip6_tnl_xmit_ctl: 17 callbacks suppressed
[  822.489066][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  822.513460][   T28] kauditd_printk_skb: 305 callbacks suppressed
[  822.513487][   T28] audit: type=1326 audit(1778713917.743:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14154 comm="syz.2.14366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  822.520255][T14174] loop9: detected capacity change from 0 to 2048
[  822.589163][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  822.627821][   T28] audit: type=1326 audit(1778713917.813:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14154 comm="syz.2.14366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd68203ce59 code=0x7ffc0000
[  822.630095][T14176] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  822.702075][T14174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  822.832920][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  822.949145][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  822.963823][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  823.029832][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  823.044262][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  823.449130][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  823.509130][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  823.513841][   T28] audit: type=1326 audit(1778713918.743:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.523512][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  823.655796][   T28] audit: type=1326 audit(1778713918.783:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.752200][   T28] audit: type=1326 audit(1778713918.783:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.800289][   T28] audit: type=1326 audit(1778713918.783:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.859044][   T28] audit: type=1326 audit(1778713918.783:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.907643][   T28] audit: type=1326 audit(1778713918.783:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.961037][   T28] audit: type=1326 audit(1778713918.783:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  823.987428][   T28] audit: type=1326 audit(1778713918.803:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.9.14392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d565ace59 code=0x7ffc0000
[  824.028302][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14396'.
[  824.089052][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  825.195873][T14269] loop9: detected capacity change from 0 to 1024
[  825.232768][T14274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14412'.
[  825.241110][T14269] EXT4-fs: Ignoring removed nobh option
[  825.255336][T14269] EXT4-fs: Ignoring removed bh option
[  825.267037][T14269] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  825.305018][T14269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  825.349304][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14412'.
[  825.486531][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  825.532804][T14289] netlink: 'syz.5.14417': attribute type 39 has an invalid length.
[  825.660552][T14299] dummy0: Caught tx_queue_len zero misconfig
[  825.792122][T14305] loop1: detected capacity change from 0 to 128
[  826.005816][T14306] ==================================================================
[  826.013960][T14306] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  826.022595][T14306] 
[  826.024992][T14306] write to 0xffff88812bb498e0 of 8 bytes by task 14303 on cpu 1:
[  826.032728][T14306]  shmem_file_splice_read+0x40e/0x5a0
[  826.038134][T14306]  splice_direct_to_actor+0x26e/0x670
[  826.043548][T14306]  do_splice_direct+0x119/0x1a0
[  826.048443][T14306]  do_sendfile+0x382/0x650
[  826.052896][T14306]  __x64_sys_sendfile64+0x105/0x150
[  826.058136][T14306]  x64_sys_call+0x2dc4/0x3020
[  826.062858][T14306]  do_syscall_64+0x12c/0x3b0
[  826.067478][T14306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.073411][T14306] 
[  826.075845][T14306] write to 0xffff88812bb498e0 of 8 bytes by task 14306 on cpu 0:
[  826.083577][T14306]  shmem_file_splice_read+0x40e/0x5a0
[  826.088988][T14306]  splice_direct_to_actor+0x26e/0x670
[  826.094395][T14306]  do_splice_direct+0x119/0x1a0
[  826.099416][T14306]  do_sendfile+0x382/0x650
[  826.103902][T14306]  __x64_sys_sendfile64+0x105/0x150
[  826.109126][T14306]  x64_sys_call+0x2dc4/0x3020
[  826.113826][T14306]  do_syscall_64+0x12c/0x3b0
[  826.118531][T14306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.124525][T14306] 
[  826.126856][T14306] value changed: 0x000000000001447e -> 0x00000000000144c9
[  826.133994][T14306] 
[  826.136339][T14306] Reported by Kernel Concurrency Sanitizer on:
[  826.142503][T14306] CPU: 0 UID: 0 PID: 14306 Comm: syz.5.14421 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  826.153807][T14306] Tainted: [W]=WARN
[  826.157623][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  826.167694][T14306] ==================================================================
[  827.709108][ T3453] net_ratelimit: 30 callbacks suppressed
[  827.709126][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  827.729302][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  827.743657][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  827.757985][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  827.929134][    C1] ip6_tunnel: �������� xmit: Local address not yet configured!
[  827.929421][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  828.249104][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  828.263618][ T3453] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  828.279542][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  828.293996][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  828.779048][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  828.793382][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  831.129606][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  831.137270][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  831.769623][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  832.899435][T25045] net_ratelimit: 30 callbacks suppressed
[  832.899451][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  832.920065][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  832.934518][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  832.949195][T25045] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  833.439437][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  833.453850][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  833.479139][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  833.493563][T19408] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  833.979167][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  833.993598][T19396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01