last executing test programs:

1m31.298082606s ago: executing program 32 (id=472):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000900)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
getsockname$packet(r0, 0x0, &(0x7f0000000240))

1m21.069475553s ago: executing program 33 (id=633):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x2}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280))

1m14.198099457s ago: executing program 34 (id=740):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x40000, 0x10120, 0x0, 0x0)

1m3.694506648s ago: executing program 35 (id=906):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x800200, 0x10})
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

56.755320518s ago: executing program 36 (id=1017):
socket$inet(0xa, 0x801, 0x84)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4)

51.482458081s ago: executing program 37 (id=1089):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800)
r1 = syz_io_uring_setup(0x113, &(0x7f00000003c0)={0x0, 0xfad8, 0x800, 0xffffffff, 0x3}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x7141}})
io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0)

49.760900692s ago: executing program 4 (id=1114):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

49.55034928s ago: executing program 4 (id=1117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff0f"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

49.302165652s ago: executing program 4 (id=1120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @void}, 0x10)

48.855507151s ago: executing program 4 (id=1124):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=")
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)

48.475313435s ago: executing program 4 (id=1125):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

47.719663961s ago: executing program 4 (id=1127):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xc1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)

47.677248985s ago: executing program 38 (id=1127):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xc1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)

39.449677177s ago: executing program 7 (id=1256):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x3, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x80}, 0x0)

39.41198497s ago: executing program 7 (id=1257):
r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0)

39.128098195s ago: executing program 7 (id=1259):
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[], [{@dont_appraise}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

39.056669491s ago: executing program 7 (id=1260):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2)
pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0)

38.840601841s ago: executing program 7 (id=1262):
setresgid(0xee00, 0xee01, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
setuid(0xee00)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)

38.498085891s ago: executing program 7 (id=1265):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
unshare(0x40200)
r0 = semget(0x2, 0x2, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x1, 0xbbe1, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
unshare(0x40400)

38.495652821s ago: executing program 39 (id=1265):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
unshare(0x40200)
r0 = semget(0x2, 0x2, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x1, 0xbbe1, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
unshare(0x40400)

20.05325401s ago: executing program 9 (id=1632):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0)

19.879387025s ago: executing program 9 (id=1637):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)

19.807164611s ago: executing program 9 (id=1639):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f00000001c0)}, 0x10)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)

19.611391279s ago: executing program 9 (id=1645):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

19.438489464s ago: executing program 9 (id=1659):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0xb60}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.25811914s ago: executing program 9 (id=1649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

19.239572911s ago: executing program 40 (id=1649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

9.252849348s ago: executing program 8 (id=1780):
unshare(0x2040400)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)

9.209985822s ago: executing program 8 (id=1782):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
read(r0, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r0, &(0x7f0000000200)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

8.380120585s ago: executing program 8 (id=1802):
unshare(0x68040200)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = mq_open(&(0x7f0000000000)='!sefinu\x83H\xa3Minux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xb8\"Zm\x1c8\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\xe7\x8e\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x04', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

8.224119458s ago: executing program 8 (id=1804):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioperm(0x7, 0x4, 0x7)
r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)

7.279104481s ago: executing program 8 (id=1812):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_clone3(&(0x7f0000000400)={0xc020000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140))
finit_module(0xffffffffffffffff, 0x0, 0x3)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

6.098077225s ago: executing program 8 (id=1818):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x12)

6.081680397s ago: executing program 41 (id=1818):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x12)

5.600428018s ago: executing program 2 (id=1823):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00')
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x0)

5.57895884s ago: executing program 2 (id=1824):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x800)

5.24433914s ago: executing program 2 (id=1829):
syz_open_procfs(0x0, &(0x7f0000002180)='attr/prev\x00')
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x200040, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xfe, 0x4, 0x6, 0x9, 0xe6d1, 0x2, 0x40000065, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0xf, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xe, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x9, 0x4, 0xfffffff0, 0x2, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x80, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x2, 0xc5, 0x99, 0x4, 0x2ed, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000004, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x6910, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x800003, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x20000003, 0x4, 0xfc89, 0x8, 0x3ff, 0x3, 0xaeb3, 0x5, 0x5, 0x9, 0xfc, 0x7fff, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x0, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x9, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001f000103000000000000000001"], 0x114}], 0x1}, 0x0)

5.176395336s ago: executing program 2 (id=1830):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0)

4.889249051s ago: executing program 2 (id=1833):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)

3.886042469s ago: executing program 2 (id=1840):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)

3.885877659s ago: executing program 42 (id=1840):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)

2.530918958s ago: executing program 0 (id=1860):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8001, 0x10000006, 0x78000000, 0x8a7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.481331682s ago: executing program 0 (id=1861):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x80000004}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x404c0c4}, 0x4)

2.433203977s ago: executing program 0 (id=1863):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

2.359419923s ago: executing program 0 (id=1864):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x3}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x64715b09331be8e5}, 0x0)

2.218181376s ago: executing program 6 (id=1866):
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x3)

2.203553367s ago: executing program 0 (id=1867):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050805}, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r2, 0x0, 0x0)

2.185170258s ago: executing program 1 (id=1869):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x3, 0x1, 0x5}, &(0x7f00000000c0)=0x10)

2.106587035s ago: executing program 1 (id=1870):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000)

2.099135536s ago: executing program 0 (id=1871):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
dup(0xffffffffffffffff)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)

2.049316391s ago: executing program 1 (id=1872):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
sendmsg(0xffffffffffffffff, 0x0, 0x20000080)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.958571758s ago: executing program 1 (id=1873):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0)

1.956596499s ago: executing program 5 (id=1874):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.836930999s ago: executing program 1 (id=1875):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0)

1.82436721s ago: executing program 5 (id=1876):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x3f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008001be0ffff00fe4000631177fbac141432e000031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e00000000002f"], 0xffdd)

1.556596653s ago: executing program 6 (id=1877):
openat$null(0xffffffffffffff9c, 0x0, 0x2a801, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40002)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6)
fcntl$setpipe(r0, 0x407, 0x7000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mlockall(0x2)

914.33808ms ago: executing program 3 (id=1878):
socket$kcm(0xa, 0x3, 0x11)
r0 = syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x1, 0x40}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xcf})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

904.296611ms ago: executing program 1 (id=1879):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
fchdir(r1)
r2 = inotify_init1(0x80800)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000180)=""/46, 0x2e)

802.092649ms ago: executing program 3 (id=1880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000100000c000460000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

797.93092ms ago: executing program 3 (id=1881):
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x2000844, &(0x7f0000000380)={[{@fat=@tz_utc}, {@fat=@errors_remount}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@fat=@discard}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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")
openat$urandom(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)

757.866043ms ago: executing program 6 (id=1882):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

617.050746ms ago: executing program 3 (id=1883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

524.516624ms ago: executing program 3 (id=1884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0)

446.136021ms ago: executing program 5 (id=1885):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0)

422.504573ms ago: executing program 6 (id=1886):
request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, 0x0, 0xfffffffffffffffe)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

398.455585ms ago: executing program 3 (id=1887):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa)
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)

320.961052ms ago: executing program 5 (id=1888):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x4f19, 0x4e20, 0x9, 0x0, @opaque="88"}}}}}}}, 0x43)

298.635644ms ago: executing program 6 (id=1889):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xa}, 0x1)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

266.098417ms ago: executing program 6 (id=1890):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x4})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)

61.357625ms ago: executing program 5 (id=1891):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x2042, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

0s ago: executing program 5 (id=1892):
setresgid(0xee00, 0xee01, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FITHAW(r1, 0xc0045878)
setns(r1, 0x24020000)
r2 = syz_clone(0x100c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x4000000)

kernel console output (not intermixed with test programs):

tdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.492235][ T4513] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.501371][ T4513] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.510714][ T4513] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.684759][ T6506] loop4: detected capacity change from 0 to 1024
[   82.767875][ T6506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.797787][ T6517] netlink: 'syz.8.939': attribute type 10 has an invalid length.
[   82.831397][ T6517] team0: Failed to send options change via netlink (err -105)
[   82.849058][ T6517] team0: Port device dummy0 added
[   82.873265][ T6519] xt_limit: Overflow, try lower: 65536/2147483648
[   82.972280][ T6530] loop7: detected capacity change from 0 to 2048
[   82.991566][ T6535] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[   82.998092][ T6535] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   83.079725][ T6535] vhci_hcd vhci_hcd.0: Device attached
[   83.109948][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.8.943'.
[   83.171554][ T6536] vhci_hcd: connection closed
[   83.171802][  T180] vhci_hcd vhci_hcd.8: stop threads
[   83.196914][  T180] vhci_hcd vhci_hcd.8: release socket
[   83.216669][  T180] vhci_hcd vhci_hcd.8: disconnect device
[   83.230423][ T6530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.250538][ T6530] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.259657][ T5160] vhci_hcd vhci_hcd.8: vhci_device speed not set
[   83.659617][ T6560] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.942: bg 0: block 345: padding at end of block bitmap is not set
[   83.689849][ T6560] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[   83.725323][ T6560] EXT4-fs (loop7): This should not happen!! Data will be lost
[   83.725323][ T6560] 
[   83.879662][   T28] audit: type=1326 audit(1771480376.166:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6595 comm="syz.5.956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462339c629 code=0x0
[   83.948792][   T56] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28
[   83.964114][   T56] EXT4-fs (loop7): This should not happen!! Data will be lost
[   83.964114][   T56] 
[   83.984510][   T56] EXT4-fs (loop7): Total free blocks count 0
[   83.991151][   T56] EXT4-fs (loop7): Free/Dirty block details
[   83.996419][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.997106][   T56] EXT4-fs (loop7): free_blocks=0
[   84.013719][   T56] EXT4-fs (loop7): dirty_blocks=2048
[   84.019017][   T56] EXT4-fs (loop7): Block reservation details
[   84.510244][ T6629] ipip0: entered promiscuous mode
[   84.659791][ T6648] loop8: detected capacity change from 0 to 512
[   84.676167][ T6648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.711277][ T6648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.729679][ T6648] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.792009][   T28] audit: type=1400 audit(1771480377.086:496): avc:  denied  { append } for  pid=6647 comm="syz.8.966" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   85.037950][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.343198][   T28] audit: type=1400 audit(1771480377.636:497): avc:  denied  { bind } for  pid=6733 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   85.545475][   T28] audit: type=1400 audit(1771480377.836:498): avc:  denied  { wake_alarm } for  pid=6758 comm="syz.7.989" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   86.258664][ T6805] loop5: detected capacity change from 0 to 1024
[   86.284930][ T6802] loop3: detected capacity change from 0 to 1024
[   86.289517][ T6805] EXT4-fs: Ignoring removed bh option
[   86.303406][ T6809] loop7: detected capacity change from 0 to 512
[   86.317757][ T6809] EXT4-fs: Ignoring removed bh option
[   86.321180][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   86.335329][ T6809] EXT4-fs: Ignoring removed oldalloc option
[   86.342537][ T6802] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.359231][ T6805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   86.368148][ T6802] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.1006: lblock 3 mapped to illegal pblock 3 (length 3)
[   86.390288][ T6809] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   86.407564][ T6802] EXT4-fs (loop3): Remounting filesystem read-only
[   86.413753][ T6809] EXT4-fs (loop7): 1 truncate cleaned up
[   86.420526][   T28] audit: type=1400 audit(1771480378.716:499): avc:  denied  { map } for  pid=6799 comm="syz.3.1006" path="/197/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.430116][ T6809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.466391][ T6805] loop5: detected capacity change from 1024 to 64
[   86.482974][ T6805] bio_check_eod: 154 callbacks suppressed
[   86.482984][ T6805] syz.5.1007: attempt to access beyond end of device
[   86.482984][ T6805] loop5: rw=2049, sector=256, nr_sectors = 2 limit=64
[   86.504867][ T6805] EXT4-fs warning (device loop5): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 128)
[   86.537083][ T6805] buffer_io_error: 56 callbacks suppressed
[   86.537097][ T6805] Buffer I/O error on device loop5, logical block 128
[   86.550668][ T6805] syz.5.1007: attempt to access beyond end of device
[   86.550668][ T6805] loop5: rw=2049, sector=262, nr_sectors = 130 limit=64
[   86.564411][ T6805] EXT4-fs warning (device loop5): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 131)
[   86.576032][ T6805] Buffer I/O error on device loop5, logical block 131
[   86.583133][ T6805] Buffer I/O error on device loop5, logical block 132
[   86.583569][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   86.589893][ T6805] Buffer I/O error on device loop5, logical block 133
[   86.605580][ T6805] Buffer I/O error on device loop5, logical block 134
[   86.612371][ T6805] Buffer I/O error on device loop5, logical block 135
[   86.631089][ T6805] Buffer I/O error on device loop5, logical block 136
[   86.637866][ T6805] Buffer I/O error on device loop5, logical block 137
[   86.644638][ T6805] Buffer I/O error on device loop5, logical block 138
[   86.651385][ T6805] Buffer I/O error on device loop5, logical block 139
[   86.716042][ T5785] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.769072][ T6822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.782405][ T6822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.836770][ T6822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.850812][ T6822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.923395][ T6822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.935524][ T6822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.971935][ T4520] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.983292][ T4813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   86.992512][ T4520] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.002798][ T6812] kmmpd-loop5: attempt to access beyond end of device
[   87.002798][ T6812] loop5: rw=8402945, sector=128, nr_sectors = 2 limit=64
[   87.017170][ T6812] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[   87.032509][ T6822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.054554][ T6822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.093922][ T4520] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.107333][ T6836] loop4: detected capacity change from 0 to 512
[   87.119236][ T4520] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.153847][ T4509] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.163509][ T6836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.178165][ T6836] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.189194][ T4509] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.206759][ T4520] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.217733][ T4520] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.228491][ T6836] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.1016: corrupted inode contents
[   87.240476][   T28] audit: type=1400 audit(1771480379.516:500): avc:  denied  { create } for  pid=6835 comm="syz.4.1016" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   87.263629][ T6836] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.1016: mark_inode_dirty error
[   87.281359][ T4509] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.292073][ T4509] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.300671][ T6836] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.1016: corrupted inode contents
[   87.313472][ T6836] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1016: mark_inode_dirty error
[   87.314538][ T4520] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.337847][ T4520] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.342451][ T6845] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.1016: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[   87.342451][ T6845] 
[   87.367913][ T4509] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.369253][ T6836] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #18: comm syz.4.1016: directory missing '.'
[   87.376190][   T28] audit: type=1400 audit(1771480379.656:501): avc:  denied  { rename } for  pid=6835 comm="syz.4.1016" name="file1" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   87.413577][ T4509] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.423282][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.425578][   T28] audit: type=1400 audit(1771480379.656:502): avc:  denied  { rmdir } for  pid=6835 comm="syz.4.1016" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   87.432341][ T4505] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.479973][ T4505] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.537961][ T6857] loop3: detected capacity change from 0 to 512
[   87.544870][ T6857] EXT4-fs: Ignoring removed bh option
[   87.556550][ T6857] EXT4-fs: Ignoring removed oldalloc option
[   87.571694][ T6857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   87.571835][ T4520] bridge_slave_1: left allmulticast mode
[   87.589139][ T4520] bridge_slave_1: left promiscuous mode
[   87.595119][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.619779][ T6857] EXT4-fs (loop3): 1 truncate cleaned up
[   87.631039][ T4520] bridge_slave_0: left allmulticast mode
[   87.645601][ T6857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.662673][ T4520] bridge_slave_0: left promiscuous mode
[   87.668549][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.807017][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.819533][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.829775][ T4520] bond0 (unregistering): Released all slaves
[   87.905645][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.924881][ T4520] hsr_slave_0: left promiscuous mode
[   87.950620][ T4520] hsr_slave_1: left promiscuous mode
[   87.963966][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.972840][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.986513][ T4520] veth1_macvtap: left promiscuous mode
[   87.992862][ T4520] veth0_macvtap: left promiscuous mode
[   88.004869][ T4520] veth1_vlan: left promiscuous mode
[   88.012288][   T28] audit: type=1326 audit(1771480380.296:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ab901c629 code=0x0
[   88.039732][ T4520] veth0_vlan: left promiscuous mode
[   88.122830][ T4520] team0 (unregistering): Port device team_slave_1 removed
[   88.151206][ T4520] team0 (unregistering): Port device team_slave_0 removed
[   88.259054][ T6901] netlink: 'syz.8.1029': attribute type 2 has an invalid length.
[   88.273447][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1029'.
[   88.286030][ T6840] chnl_net:caif_netlink_parms(): no params data found
[   88.370205][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.377432][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.384770][ T6840] bridge_slave_0: entered allmulticast mode
[   88.391410][ T6840] bridge_slave_0: entered promiscuous mode
[   88.398202][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.405501][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.406930][ T6923] loop8: detected capacity change from 0 to 256
[   88.412923][ T6840] bridge_slave_1: entered allmulticast mode
[   88.427040][ T6840] bridge_slave_1: entered promiscuous mode
[   88.446438][ T6923] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   88.500498][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.511503][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.551405][ T6840] team0: Port device team_slave_0 added
[   88.569623][ T6840] team0: Port device team_slave_1 added
[   88.610132][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.621703][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.656914][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.669748][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.676734][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.724912][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.772958][ T6840] hsr_slave_0: entered promiscuous mode
[   88.785933][ T6840] hsr_slave_1: entered promiscuous mode
[   88.894184][ T6958] loop3: detected capacity change from 0 to 1024
[   88.929921][ T6958] EXT4-fs: Ignoring removed bh option
[   88.993735][ T6958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   89.017354][ T6840] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   89.073998][ T6840] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   89.080880][ T6958] loop3: detected capacity change from 1024 to 64
[   89.118710][ T6958] syz.3.1041: attempt to access beyond end of device
[   89.118710][ T6958] loop3: rw=2049, sector=256, nr_sectors = 2 limit=64
[   89.200214][ T6958] EXT4-fs warning (device loop3): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 128)
[   89.235826][ T6840] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   89.258353][ T6958] syz.3.1041: attempt to access beyond end of device
[   89.258353][ T6958] loop3: rw=2049, sector=262, nr_sectors = 130 limit=64
[   89.273953][ T6840] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   89.311901][ T6958] EXT4-fs warning (device loop3): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 131)
[   89.421669][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.482062][ T6840] 8021q: adding VLAN 0 to HW filter on device team0
[   89.497867][ T3737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   89.511007][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.518148][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.529488][ T6966] kmmpd-loop3: attempt to access beyond end of device
[   89.529488][ T6966] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64
[   89.529532][ T6966] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[   89.548296][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.577278][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.697321][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.701950][ T7002] loop8: detected capacity change from 0 to 512
[   89.714998][ T7003] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.729424][ T7002] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.740254][ T7003] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   89.772894][ T7002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.792105][ T7002] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.1048: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0
[   89.813979][ T7002] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 12: comm syz.8.1048: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[   89.838359][ T7003] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.845650][ T7002] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 13: comm syz.8.1048: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[   89.849350][ T7003] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   89.880246][ T7002] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   89.896494][ T7014] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 18: comm syz.8.1048: lblock 23 mapped to illegal pblock 18 (length 1)
[   89.940172][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.947338][ T6840] veth0_vlan: entered promiscuous mode
[   89.959507][ T7003] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.974697][ T7003] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   89.991958][ T6840] veth1_vlan: entered promiscuous mode
[   90.008262][ T6840] veth0_macvtap: entered promiscuous mode
[   90.017765][ T6840] veth1_macvtap: entered promiscuous mode
[   90.029851][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.043394][ T7003] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.054339][ T7003] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   90.074202][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.093228][ T4505] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.116300][ T4505] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.128301][ T4505] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.137470][ T4505] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.174074][ T4520] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   90.182852][ T4520] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   90.204399][   T28] audit: type=1400 audit(1771480382.496:504): avc:  denied  { create } for  pid=7028 comm="syz.8.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   90.204837][ T4520] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   90.229940][   T28] audit: type=1400 audit(1771480382.526:505): avc:  denied  { ioctl } for  pid=7028 comm="syz.8.1053" path="socket:[23387]" dev="sockfs" ino=23387 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   90.236165][ T4520] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   90.266777][ T4520] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   90.275143][ T4520] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   90.291284][ T4520] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   90.308173][ T4520] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   90.374659][ T7037] veth1_to_bond: entered allmulticast mode
[   90.386325][ T7037] veth1_to_bond: left allmulticast mode
[   90.426600][ T7043] loop8: detected capacity change from 0 to 2048
[   90.454719][ T7043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.593081][ T7058] loop9: detected capacity change from 0 to 1024
[   90.631412][ T7058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   90.643706][ T7058] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.659206][ T7058] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 3: comm syz.9.1063: lblock 3 mapped to illegal pblock 3 (length 3)
[   90.674833][ T7058] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   90.676351][ T4513] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, 
[   90.687147][ T7058] EXT4-fs (loop9): This should not happen!! Data will be lost
[   90.687147][ T7058] 
[   90.687150][ T4513] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   90.688151][ T4513] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1050 with error 28
[   90.704382][ T7058] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1063: bg 0: block 112: padding at end of block bitmap is not set
[   90.706829][ T4513] EXT4-fs (loop8): This should not happen!! Data will be lost
[   90.706829][ T4513] 
[   90.729939][ T7058] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117
[   90.741827][ T4513] EXT4-fs (loop8): Total free blocks count 0
[   90.751206][ T7058] EXT4-fs (loop9): This should not happen!! Data will be lost
[   90.751206][ T7058] 
[   90.779894][ T4513] EXT4-fs (loop8): Free/Dirty block details
[   90.785873][ T4513] EXT4-fs (loop8): free_blocks=2415919504
[   90.792439][ T4513] EXT4-fs (loop8): dirty_blocks=1056
[   90.797738][ T4513] EXT4-fs (loop8): Block reservation details
[   90.803906][ T4513] EXT4-fs (loop8): i_reserved_data_blocks=66
[   90.811245][ T7058] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 44 with error 117
[   90.819854][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.823873][ T7058] EXT4-fs (loop9): This should not happen!! Data will be lost
[   90.823873][ T7058] 
[   90.886391][ T4505] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8)
[   90.904365][ T4505] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   90.930952][ T4505] EXT4-fs (loop9): This should not happen!! Data will be lost
[   90.930952][ T4505] 
[   90.931351][ T7069] bond1: entered allmulticast mode
[   90.946255][ T4513] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117
[   90.946348][ T7069] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.101187][ T7074] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.178506][ T7074] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.225193][ T7074] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.290628][ T7074] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.378783][ T7094] loop7: detected capacity change from 0 to 1024
[   91.414459][ T7094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   91.415070][ T7096] bond1: entered allmulticast mode
[   91.432419][ T7096] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.440661][ T4513] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.457353][ T4513] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.466618][ T7094] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.483136][ T4513] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.494015][ T7094] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.1077: lblock 3 mapped to illegal pblock 3 (length 3)
[   91.506734][ T4513] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.517115][ T7094] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   91.529641][ T7094] EXT4-fs (loop7): This should not happen!! Data will be lost
[   91.529641][ T7094] 
[   91.545060][ T7094] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1077: bg 0: block 112: padding at end of block bitmap is not set
[   91.576422][ T7094] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117
[   91.589941][ T7094] EXT4-fs (loop7): This should not happen!! Data will be lost
[   91.589941][ T7094] 
[   91.601129][ T7094] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 44 with error 117
[   91.629605][ T7094] EXT4-fs (loop7): This should not happen!! Data will be lost
[   91.629605][ T7094] 
[   91.669757][ T4509] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8)
[   91.684448][ T4509] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   91.697595][ T4509] EXT4-fs (loop7): This should not happen!! Data will be lost
[   91.697595][ T4509] 
[   91.709247][ T4509] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117
[   91.737639][   T28] audit: type=1400 audit(1771480384.026:506): avc:  denied  { unmount } for  pid=6379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   92.294199][ T4505] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.325810][ T4505] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.330153][ T7124] loop8: detected capacity change from 0 to 1024
[   92.371590][ T7124] EXT4-fs: Ignoring removed orlov option
[   92.383637][ T4505] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.403302][ T4505] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.419585][   T28] audit: type=1400 audit(1771480384.716:507): avc:  denied  { execute } for  pid=7123 comm="syz.8.1088" path="/39/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   92.471001][ T4505] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.481392][ T4505] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.531514][ T4505] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.543671][ T4505] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.687660][ T4505] bridge_slave_1: left allmulticast mode
[   92.697927][ T4505] bridge_slave_1: left promiscuous mode
[   92.709815][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.738997][ T4505] bridge_slave_0: left allmulticast mode
[   92.748455][ T4505] bridge_slave_0: left promiscuous mode
[   92.759056][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.951738][ T4505] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[   92.979680][   T28] audit: type=1400 audit(1771480385.266:508): avc:  denied  { sqpoll } for  pid=7153 comm="syz.7.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   93.142359][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.161210][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.180966][ T4505] bond0 (unregistering): Released all slaves
[   93.200383][ T4505] bond1 (unregistering): Released all slaves
[   93.297528][ T4505] hsr_slave_0: left promiscuous mode
[   93.317703][ T4505] hsr_slave_1: left promiscuous mode
[   93.333028][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.343173][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.375927][ T4505] veth1_macvtap: left promiscuous mode
[   93.384871][ T4505] veth0_macvtap: left promiscuous mode
[   93.394832][ T4505] veth1_vlan: left promiscuous mode
[   93.414403][ T4505] veth0_vlan: left promiscuous mode
[   93.686330][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'.
[   93.768252][ T4505] team0 (unregistering): Port device team_slave_1 removed
[   93.787292][ T4505] team0 (unregistering): Port device team_slave_0 removed
[   93.861327][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'.
[   93.889281][ T7175] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.950860][ T7175] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.135719][ T7175] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.227507][ T7175] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.261975][ T7128] chnl_net:caif_netlink_parms(): no params data found
[   94.500027][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.540149][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.586213][ T7128] bridge_slave_0: entered allmulticast mode
[   94.609085][ T7128] bridge_slave_0: entered promiscuous mode
[   94.638498][   T28] audit: type=1400 audit(1771480386.926:509): avc:  denied  { accept } for  pid=7257 comm="syz.7.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   94.693089][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.700928][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.708275][ T7128] bridge_slave_1: entered allmulticast mode
[   94.910265][ T7128] bridge_slave_1: entered promiscuous mode
[   95.008260][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.048550][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.063334][ T7277] loop4: detected capacity change from 0 to 4096
[   95.111994][ T7128] team0: Port device team_slave_0 added
[   95.127392][ T7128] team0: Port device team_slave_1 added
[   95.143423][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.150439][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.177206][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.189304][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.196440][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.222576][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.240511][ T7277] loop4: detected capacity change from 4096 to 64
[   95.277801][ T7128] hsr_slave_0: entered promiscuous mode
[   95.283657][ T7283] syz.4.1124: attempt to access beyond end of device
[   95.283657][ T7283] loop4: rw=8402945, sector=64, nr_sectors = 8 limit=64
[   95.308174][ T7128] hsr_slave_1: entered promiscuous mode
[   95.315218][ T7283] Buffer I/O error on dev loop4, logical block 8, lost sync page write
[   95.324917][ T7128] debugfs: 'hsr0' already exists in 'hsr'
[   95.342607][ T7283] EXT4-fs error (device loop4): ext4_write_inode:5681: inode #18: block 8: comm syz.4.1124: IO error syncing inode
[   95.354948][ T7128] Cannot create hsr debugfs directory
[   95.389098][ T3314] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz-executor: Error while async write back metadata
[   95.710288][ T7128] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.734631][ T7128] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.750772][ T7128] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.792974][ T7128] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.929673][ T6806] EXT4-fs unmount: 3 callbacks suppressed
[   95.929725][ T6806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.954119][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.983122][ T7128] 8021q: adding VLAN 0 to HW filter on device team0
[   95.993546][  T424] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.000715][  T424] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.029762][ T7128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.050778][ T7128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.071924][  T424] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.078977][  T424] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.225184][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.390032][ T7128] veth0_vlan: entered promiscuous mode
[   96.403880][ T7128] veth1_vlan: entered promiscuous mode
[   96.478697][ T7128] veth0_macvtap: entered promiscuous mode
[   96.514556][ T7128] veth1_macvtap: entered promiscuous mode
[   96.569671][ T7335] chnl_net:caif_netlink_parms(): no params data found
[   96.588615][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.617138][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.646884][ T4520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.661693][ T4520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.680142][ T4520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.688967][ T4520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.719653][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.726720][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.753588][ T7335] bridge_slave_0: entered allmulticast mode
[   96.760535][ T7335] bridge_slave_0: entered promiscuous mode
[   96.769493][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.795676][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.803214][ T7335] bridge_slave_1: entered allmulticast mode
[   96.811657][ T7335] bridge_slave_1: entered promiscuous mode
[   96.833497][ T7389] syzkaller1: entered promiscuous mode
[   96.839144][ T7389] syzkaller1: entered allmulticast mode
[   96.874553][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.888706][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.950371][ T7335] team0: Port device team_slave_0 added
[   96.963140][ T7335] team0: Port device team_slave_1 added
[   97.050446][ T7402] netlink: 'syz.8.1140': attribute type 29 has an invalid length.
[   97.121213][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.132781][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.175124][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.222173][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.229246][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.257460][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.390730][ T7335] hsr_slave_0: entered promiscuous mode
[   97.419786][ T7335] hsr_slave_1: entered promiscuous mode
[   97.425694][ T7335] debugfs: 'hsr0' already exists in 'hsr'
[   97.436712][ T7335] Cannot create hsr debugfs directory
[   97.541984][   T28] audit: type=1400 audit(1771480389.836:510): avc:  denied  { read } for  pid=7445 comm="syz.7.1143" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   97.589840][   T28] audit: type=1400 audit(1771480389.836:511): avc:  denied  { open } for  pid=7445 comm="syz.7.1143" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   97.641560][   T28] audit: type=1400 audit(1771480389.936:512): avc:  denied  { ioctl } for  pid=7445 comm="syz.7.1143" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   97.966062][ T7483] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1149'.
[   98.080742][   T28] audit: type=1400 audit(1771480390.366:513): avc:  denied  { read } for  pid=7488 comm="syz.1.1150" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   98.149503][   T28] audit: type=1400 audit(1771480390.366:514): avc:  denied  { open } for  pid=7488 comm="syz.1.1150" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   98.250826][ T7335] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.270287][ T7335] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.288808][ T7335] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.309223][ T7335] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.376683][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1153'.
[   98.396892][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.424287][ T7335] 8021q: adding VLAN 0 to HW filter on device team0
[   98.446632][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.453796][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.470383][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.477466][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.531179][ T7335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.657280][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.849490][ T7335] veth0_vlan: entered promiscuous mode
[   98.868859][ T7335] veth1_vlan: entered promiscuous mode
[   98.911352][ T7335] veth0_macvtap: entered promiscuous mode
[   98.933616][ T7335] veth1_macvtap: entered promiscuous mode
[   98.952011][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.972601][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.992804][ T4513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.058914][ T4513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.354317][ T4513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.369787][ T4513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.557175][ T7608] Falling back ldisc for ttyS3.
[   99.718011][   T28] audit: type=1400 audit(1771480392.006:515): avc:  denied  { mount } for  pid=7630 comm="syz.9.1167" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   99.748434][ T7627] loop2: detected capacity change from 0 to 8192
[   99.794996][ T7627] FAT-fs (loop2): error, clusters badly computed (2 != 1)
[   99.795739][   T28] audit: type=1400 audit(1771480392.076:516): avc:  denied  { getopt } for  pid=7637 comm="syz.9.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   99.802330][ T7627] FAT-fs (loop2): Filesystem has been set read-only
[   99.864732][ T7643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7643 comm=syz.9.1170
[   99.910325][ T7643] netlink: 'syz.9.1170': attribute type 1 has an invalid length.
[   99.987818][ T7643] bond2: (slave bridge1): making interface the new active one
[  100.023265][ T7643] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  100.190722][ T7680] loop9: detected capacity change from 0 to 512
[  100.239491][ T7680] EXT4-fs: Ignoring removed oldalloc option
[  100.294644][ T7680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.308321][   T28] audit: type=1400 audit(1771480392.586:517): avc:  denied  { create } for  pid=7694 comm="syz.7.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  100.327922][   T28] audit: type=1400 audit(1771480392.586:518): avc:  denied  { write } for  pid=7694 comm="syz.7.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  100.328009][ T7680] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.368423][ T7699] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[  100.388961][ T7699] EXT4-fs (loop9): Remounting filesystem read-only
[  100.504968][   T28] audit: type=1400 audit(1771480392.796:519): avc:  denied  { setattr } for  pid=7679 comm="syz.9.1177" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  100.600467][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.693509][ T7729] loop7: detected capacity change from 0 to 8192
[  100.772514][ T7729] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.866814][ T7754] loop7: detected capacity change from 0 to 512
[  101.051865][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'.
[  101.109154][ T4505] Bluetooth: hci0: Frame reassembly failed (-84)
[  101.377084][ T7814] loop9: detected capacity change from 0 to 1024
[  101.385017][ T7814] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.402724][ T7814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.439462][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.466385][ T7829] xt_CT: You must specify a L4 protocol and not use inversions on it
[  101.475499][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1207'.
[  101.538206][ T7840] netlink: 5272 bytes leftover after parsing attributes in process `syz.9.1209'.
[  101.547671][ T7840] netlink: 680 bytes leftover after parsing attributes in process `syz.9.1209'.
[  101.608907][ T7850] loop8: detected capacity change from 0 to 512
[  101.623693][ T7850] EXT4-fs (loop8): 1 truncate cleaned up
[  101.638805][ T7850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.669067][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.739431][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1213'.
[  101.804587][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1217'.
[  101.901990][ T7891] loop7: detected capacity change from 0 to 128
[  102.656975][ T7971] loop9: detected capacity change from 0 to 128
[  102.677007][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.696439][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.702987][ T7971] syz.9.1233: attempt to access beyond end of device
[  102.702987][ T7971] loop9: rw=0, sector=97, nr_sectors = 944 limit=128
[  103.179591][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  103.179610][ T6036] Bluetooth: hci0: command 0x1003 tx timeout
[  103.694119][ T8014] loop7: detected capacity change from 0 to 128
[  103.773322][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.773322][ T8016] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128
[  103.809716][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.809716][ T8016] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  103.859604][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.859604][ T8016] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128
[  103.900062][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.900062][ T8016] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128
[  103.929673][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.929673][ T8016] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128
[  103.959621][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.959621][ T8016] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128
[  103.979692][ T8016] syz.7.1248: attempt to access beyond end of device
[  103.979692][ T8016] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128
[  104.010071][ T8016] syz.7.1248: attempt to access beyond end of device
[  104.010071][ T8016] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128
[  104.024067][ T8016] syz.7.1248: attempt to access beyond end of device
[  104.024067][ T8016] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128
[  104.254031][ T8027] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1253'.
[  104.264187][ T8027] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1253'.
[  104.397982][ T8031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  104.404642][ T8031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  104.468422][ T8031] vhci_hcd vhci_hcd.0: Device attached
[  104.599619][ T3413] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  104.662397][ T3413] usb 5-1: new full-speed USB device number 2 using vhci_hcd
[  104.745823][ T8046] loop7: detected capacity change from 0 to 512
[  104.753305][ T8046] ext4: Unknown parameter 'dont_appraise'
[  104.762438][ T8046] Set syz1 is full, maxelem 2 reached
[  104.818786][ T8049] loop7: detected capacity change from 0 to 512
[  104.827789][ T8049] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  104.845457][ T8049] EXT4-fs (loop7): 1 truncate cleaned up
[  104.857153][ T8049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.019646][ T5785] EXT4-fs error (device loop7): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  105.039915][ T5785] EXT4-fs (loop7): Remounting filesystem read-only
[  105.134222][ T8032] vhci_hcd: connection reset by peer
[  105.150267][ T4513] vhci_hcd vhci_hcd.2: stop threads
[  105.155597][ T4513] vhci_hcd vhci_hcd.2: release socket
[  105.161476][ T4513] vhci_hcd vhci_hcd.2: disconnect device
[  105.290268][ T8052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.452134][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  105.452158][   T28] audit: type=1400 audit(1771480397.746:526): avc:  denied  { sys_module } for  pid=8065 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  105.537546][ T8073] loop8: detected capacity change from 0 to 128
[  105.595148][   T28] audit: type=1400 audit(1771480397.886:527): avc:  denied  { setopt } for  pid=8076 comm="syz.1.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.658485][   T28] audit: type=1400 audit(1771480397.946:528): avc:  denied  { create } for  pid=8082 comm="syz.1.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  105.696271][   T28] audit: type=1400 audit(1771480397.976:529): avc:  denied  { write } for  pid=8082 comm="syz.1.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  105.839456][ T8065] chnl_net:caif_netlink_parms(): no params data found
[  106.012196][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.012278][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.012419][ T8065] bridge_slave_0: entered allmulticast mode
[  106.012975][ T8065] bridge_slave_0: entered promiscuous mode
[  106.024925][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.024965][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.025136][ T8065] bridge_slave_1: entered allmulticast mode
[  106.025673][ T8065] bridge_slave_1: entered promiscuous mode
[  106.044426][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.045881][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.057249][ T8065] team0: Port device team_slave_0 added
[  106.058316][ T8065] team0: Port device team_slave_1 added
[  106.075817][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.075832][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.075857][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.076580][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.076592][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.076645][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.101870][ T8065] hsr_slave_0: entered promiscuous mode
[  106.102405][ T8065] hsr_slave_1: entered promiscuous mode
[  106.102792][ T8065] debugfs: 'hsr0' already exists in 'hsr'
[  106.102806][ T8065] Cannot create hsr debugfs directory
[  106.583904][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'.
[  106.585586][ T8065] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  106.613531][ T8065] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  106.645083][ T8065] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  106.674160][ T8065] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  106.795459][ T8146] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1281'.
[  106.845922][ T8152] netlink: 'syz.8.1281': attribute type 4 has an invalid length.
[  106.846797][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.903113][ T8156] loop2: detected capacity change from 0 to 128
[  106.919811][ T8065] 8021q: adding VLAN 0 to HW filter on device team0
[  106.934153][ T8161] loop8: detected capacity change from 0 to 128
[  106.957033][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.964116][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.026979][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.034161][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.237993][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.313002][ T8193] loop8: detected capacity change from 0 to 128
[  107.341254][ T8193] EXT4-fs: Ignoring removed nobh option
[  107.365194][ T8193] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.397810][ T8193] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.483468][ T8204] sd 0:0:1:0: device reset
[  107.487968][   T28] audit: type=1400 audit(1771480399.776:530): avc:  denied  { ioctl } for  pid=8202 comm="syz.2.1288" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  107.565829][ T8065] veth0_vlan: entered promiscuous mode
[  107.590780][ T8065] veth1_vlan: entered promiscuous mode
[  107.614317][ T6379] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.645767][ T8065] veth0_macvtap: entered promiscuous mode
[  107.680711][ T8065] veth1_macvtap: entered promiscuous mode
[  107.710536][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.737878][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.764693][ T4520] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.790274][ T4520] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.815065][ T4520] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.840313][ T4520] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.969384][ T8262] syzkaller1: entered promiscuous mode
[  107.981729][ T8262] syzkaller1: entered allmulticast mode
[  109.731451][ T3413] usb 5-1: enqueue for inactive port 0
[  109.736961][ T3413] usb 5-1: enqueue for inactive port 0
[  109.829631][ T3413] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  109.979674][ T8458] gretap0: entered promiscuous mode
[  109.993371][ T8457] loop9: detected capacity change from 0 to 512
[  109.996026][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1326'.
[  110.022275][ T8457] EXT4-fs: test_dummy_encryption option not supported
[  110.029325][ T8458] gretap0: left promiscuous mode
[  110.467346][ T8487] netlink: 'syz.6.1338': attribute type 29 has an invalid length.
[  110.488157][ T8487] netlink: 'syz.6.1338': attribute type 29 has an invalid length.
[  110.508396][ T8487] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1338'.
[  111.067069][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1347'.
[  111.076387][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1346'.
[  111.099026][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1347'.
[  111.117545][ T4509] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.122458][ T8510] xt_hashlimit: size too large, truncated to 1048576
[  111.139891][ T4509] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.154865][ T4509] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.181475][ T4509] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.299466][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1354'.
[  111.317778][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1354'.
[  111.346621][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1354'.
[  111.405439][   T28] audit: type=1400 audit(1771480403.696:531): avc:  denied  { ioctl } for  pid=8525 comm="syz.2.1356" path="socket:[29969]" dev="sockfs" ino=29969 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  111.802309][ T8554] netlink: 'syz.2.1368': attribute type 29 has an invalid length.
[  111.812685][ T8554] netlink: 'syz.2.1368': attribute type 29 has an invalid length.
[  111.822519][ T8554] __nla_validate_parse: 2 callbacks suppressed
[  111.822533][ T8554] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1368'.
[  112.010699][ T8565] xt_hashlimit: size too large, truncated to 1048576
[  112.093678][ T8571] loop6: detected capacity change from 0 to 512
[  112.132684][ T8571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.161813][ T8571] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.198408][ T8065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.353656][   T28] audit: type=1400 audit(1771480404.646:532): avc:  denied  { mounton } for  pid=8582 comm="syz.6.1378" path="/20/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  112.402296][ T8583] loop8: detected capacity change from 0 to 4096
[  112.414804][ T8583] EXT4-fs: Ignoring removed bh option
[  112.426125][   T28] audit: type=1400 audit(1771480404.716:533): avc:  denied  { unmount } for  pid=8065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  112.446823][ T8583] EXT4-fs: Ignoring removed mblk_io_submit option
[  112.475962][ T8583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.499447][ T8594] pim6reg1: entered allmulticast mode
[  112.536423][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1383'.
[  112.549021][ T4513] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.549029][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1383'.
[  112.566835][ T4513] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.576949][ T4513] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.601239][ T4513] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.602153][ T8602] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[  112.620898][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.649275][ T8602] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.712764][ T8602] bond1: (slave syz_tun): making interface the new active one
[  112.742230][ T8602] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[  112.838068][ T8620] ipip0: entered promiscuous mode
[  112.994730][ T8637] loop2: detected capacity change from 0 to 1024
[  113.016035][ T8637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  113.025172][ T8637] System zones: 0-1, 3-36
[  113.042809][ T8637] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1400: bad orphan inode 134217728
[  113.059790][ T8637] loop2: lost filesystem error report for type 5 error -117
[  113.060312][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.198422][   T28] audit: type=1400 audit(1771480405.486:534): avc:  denied  { read } for  pid=8646 comm="syz.1.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  113.218729][ T3413] IPVS: starting estimator thread 0...
[  113.309784][ T8648] IPVS: using max 2112 ests per chain, 105600 per kthread
[  113.329915][ T8653] loop9: detected capacity change from 0 to 1024
[  113.370200][ T8653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  113.407243][ T8653] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.425932][ T8653] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 3: comm syz.9.1406: lblock 3 mapped to illegal pblock 3 (length 3)
[  113.441318][ T8653] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  113.461197][ T7335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.495198][   T28] audit: type=1326 audit(1771480405.786:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.2.1411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d00c7c629 code=0x0
[  113.495606][ T8653] EXT4-fs (loop9): This should not happen!! Data will be lost
[  113.495606][ T8653] 
[  114.106034][ T4513] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 3)
[  114.150921][ T4513] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  114.194739][ T4513] EXT4-fs (loop9): This should not happen!! Data will be lost
[  114.194739][ T4513] 
[  114.215640][ T4513] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:14: lblock 4 mapped to illegal pblock 4 (length 2)
[  114.240824][ T4513] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  114.263393][ T4513] EXT4-fs (loop9): This should not happen!! Data will be lost
[  114.263393][ T4513] 
[  114.298373][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  114.346651][   T28] audit: type=1400 audit(1771480406.636:536): avc:  denied  { mount } for  pid=8669 comm="syz.2.1414" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  114.552424][ T8686] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1421'.
[  114.590505][ T8686] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1421'.
[  114.794948][   T28] audit: type=1400 audit(1771480407.086:537): avc:  denied  { setopt } for  pid=8698 comm="syz.6.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  114.929796][ T6036] Bluetooth: hci0: command 0x1003 tx timeout
[  114.932672][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  114.997857][ T8713] loop8: detected capacity change from 0 to 1024
[  115.011933][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1433'.
[  115.029643][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1433'.
[  115.038792][   T28] audit: type=1400 audit(1771480407.306:538): avc:  denied  { setopt } for  pid=8714 comm="syz.9.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  115.070114][ T8713] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.082157][   T28] audit: type=1400 audit(1771480407.316:539): avc:  denied  { bind } for  pid=8715 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  115.102529][ T8713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  115.119000][ T8713] System zones: 0-1, 3-36
[  115.128238][ T8713] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.196211][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.245854][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1436'.
[  115.256124][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1436'.
[  115.427659][ T8733] loop9: detected capacity change from 0 to 512
[  115.467565][ T8733] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  115.521911][ T8736] SELinux: failed to load policy
[  115.741602][ T8733] EXT4-fs (loop9): 1 truncate cleaned up
[  115.751116][ T8733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.923568][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.053654][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1461'.
[  116.059972][ T8765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.072848][ T8765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.367683][   T28] audit: type=1400 audit(1771480408.656:540): avc:  denied  { accept } for  pid=8793 comm="syz.9.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  116.427913][   T28] audit: type=1400 audit(1771480408.656:541): avc:  denied  { read } for  pid=8793 comm="syz.9.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  117.111037][ T8826] __nla_validate_parse: 1 callbacks suppressed
[  117.111056][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1480'.
[  117.220513][ T4505] Bluetooth: hci0: Frame reassembly failed (-84)
[  117.442735][ T8846] netlink: 'syz.1.1489': attribute type 1 has an invalid length.
[  117.472571][ T8846] bond2: entered promiscuous mode
[  117.490126][ T8846] bond2: entered allmulticast mode
[  117.534590][ T8849] bond2: (slave ip6gretap1): making interface the new active one
[  117.543457][ T8849] ip6gretap1: entered promiscuous mode
[  117.549109][ T8849] ip6gretap1: entered allmulticast mode
[  117.555738][ T8849] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  117.785862][   T28] audit: type=1326 audit(1771480410.076:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.810465][   T28] audit: type=1326 audit(1771480410.106:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.834083][   T28] audit: type=1326 audit(1771480410.106:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.857422][   T28] audit: type=1326 audit(1771480410.106:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.881504][   T28] audit: type=1326 audit(1771480410.106:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.904984][   T28] audit: type=1326 audit(1771480410.106:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.928496][   T28] audit: type=1326 audit(1771480410.176:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.951973][   T28] audit: type=1326 audit(1771480410.176:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  117.975748][   T28] audit: type=1326 audit(1771480410.176:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.9.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39d5fc629 code=0x7ffc0000
[  118.183728][ T8885] loop8: detected capacity change from 0 to 512
[  118.201656][ T8885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.214713][ T8885] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.230765][ T8885] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1506: corrupted inode contents
[  118.242846][ T8885] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.1506: mark_inode_dirty error
[  118.254601][ T8885] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1506: corrupted inode contents
[  118.267129][ T8885] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1506: mark_inode_dirty error
[  118.280712][ T8885] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.1506: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  118.280712][ T8885] 
[  118.310160][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.590400][ T8918] ip6erspan0: entered promiscuous mode
[  118.799137][ T8940] loop6: detected capacity change from 0 to 512
[  118.806385][ T8940] EXT4-fs: Ignoring removed i_version option
[  118.820723][ T8940] EXT4-fs: Ignoring removed bh option
[  118.832751][ T8940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.851145][ T8940] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.933831][ T8065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.977791][ T8947] loop6: detected capacity change from 0 to 512
[  119.000395][ T8947] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  119.019783][ T8947] EXT4-fs (loop6): 1 truncate cleaned up
[  119.040163][ T8947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.075602][ T8951] ip6erspan0: entered promiscuous mode
[  119.161035][ T8065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.249802][ T6036] Bluetooth: hci0: command 0x1003 tx timeout
[  119.250544][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  119.423786][ T8980] gretap1: entered promiscuous mode
[  119.791295][ T8990] loop2: detected capacity change from 0 to 512
[  119.800650][ T8990] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.813435][ T8990] EXT4-fs (loop2): 1 truncate cleaned up
[  119.823753][ T8990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.937131][ T7335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.967589][ T8989] loop6: detected capacity change from 0 to 32768
[  120.001714][ T6855]  loop6: p1 p2 p3 < p5 >
[  120.006140][ T6855] loop6: p1 size 242222080 extends beyond EOD, truncated
[  120.014493][ T6855] loop6: p2 start 16777215 is beyond EOD, truncated
[  120.025988][ T8989]  loop6: p1 p2 p3 < p5 >
[  120.030962][ T8989] loop6: p1 size 242222080 extends beyond EOD, truncated
[  120.039106][ T8989] loop6: p2 start 16777215 is beyond EOD, truncated
[  120.191644][ T9015] netlink: 'syz.1.1561': attribute type 10 has an invalid length.
[  120.204282][ T4420] udevd[4420]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  120.204320][ T9015] team0: Failed to send options change via netlink (err -105)
[  120.214617][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  120.223180][ T9015] team0: Port device dummy0 added
[  120.232503][ T6855] udevd[6855]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  120.253885][ T4420] udevd[4420]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  120.265182][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  120.282116][ T6855] udevd[6855]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  120.293068][ T9015] netlink: 'syz.1.1561': attribute type 10 has an invalid length.
[  120.304220][ T9015] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.315522][ T9015] team0: Failed to send options change via netlink (err -105)
[  120.323239][ T9015] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.324030][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1562'.
[  120.332462][ T9015] team0: Port device dummy0 removed
[  120.342955][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1562'.
[  120.348287][ T9015] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  120.670879][ T9031] loop9: detected capacity change from 0 to 128
[  121.267920][   T35] IPVS: starting estimator thread 0...
[  121.353404][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  121.364770][   T35] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  121.444511][  T424] IPVS: stop unused estimator thread 0...
[  121.506198][ T9067] loop2: detected capacity change from 0 to 32768
[  121.549977][ T6855]  loop2: p1 p2 p3 < p5 >
[  121.554394][ T6855] loop2: p1 size 242222080 extends beyond EOD, truncated
[  121.571713][ T6855] loop2: p2 start 16777215 is beyond EOD, truncated
[  121.584635][ T9067]  loop2: p1 p2 p3 < p5 >
[  121.592395][ T9067] loop2: p1 size 242222080 extends beyond EOD, truncated
[  121.604131][ T9067] loop2: p2 start 16777215 is beyond EOD, truncated
[  121.642863][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1589'.
[  121.683721][ T9085] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.701662][ T9091] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  121.745320][ T9093] loop9: detected capacity change from 0 to 1024
[  121.759766][ T9093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  121.776911][ T9093] System zones: 0-1, 3-36
[  121.787315][ T9093] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1593: bad orphan inode 134217728
[  121.798234][ T4420] udevd[4420]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  121.801539][ T9093] loop9: lost filesystem error report for type 5 error -117
[  121.808590][ T6855] udevd[6855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  121.809135][ T9093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.816106][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  121.886880][ T6855] udevd[6855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  122.130505][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.211927][   T28] kauditd_printk_skb: 501 callbacks suppressed
[  122.211941][   T28] audit: type=1400 audit(1771480414.506:1052): avc:  denied  { read write } for  pid=9112 comm="syz.1.1601" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  122.250372][   T28] audit: type=1400 audit(1771480414.506:1053): avc:  denied  { open } for  pid=9112 comm="syz.1.1601" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  122.332845][ T9119] syzkaller0: refused to change device tx_queue_len
[  122.511605][   T28] audit: type=1400 audit(1771480414.806:1054): avc:  denied  { read } for  pid=9133 comm="syz.9.1610" path="socket:[32054]" dev="sockfs" ino=32054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  122.595160][ T9141] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1612'.
[  122.667276][ T9147] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1610'.
[  122.683496][   T28] audit: type=1326 audit(1771480414.976:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.2.1615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d00c7c629 code=0x0
[  122.823356][ T9159] loop6: detected capacity change from 0 to 128
[  122.830235][ T9159] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  122.846139][   T28] audit: type=1400 audit(1771480415.136:1056): avc:  denied  { watch watch_reads } for  pid=9158 comm="syz.6.1620" path="/72/file0" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  122.906716][ T9163] loop6: detected capacity change from 0 to 2048
[  122.943847][   T28] audit: type=1400 audit(1771480415.236:1057): avc:  denied  { mount } for  pid=9160 comm="syz.9.1622" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  122.989827][ T6855] Alternate GPT is invalid, using primary GPT.
[  122.998377][ T6855]  loop6: p2 p3 p7
[  123.002196][   T28] audit: type=1400 audit(1771480415.266:1058): avc:  denied  { unmount } for  pid=6840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  123.034400][ T9163] Alternate GPT is invalid, using primary GPT.
[  123.065543][ T9163]  loop6: p2 p3 p7
[  123.112565][ T9163] xt_hashlimit: size too large, truncated to 1048576
[  123.253032][ T9175] loop9: detected capacity change from 0 to 512
[  123.272299][ T9175] EXT4-fs: Ignoring removed nobh option
[  123.284484][ T9175] ------------[ cut here ]------------
[  123.290024][ T9175] EA inode 11 i_nlink=1026
[  123.290096][ T9175] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.9.1626/9175
[  123.305270][ T9175] Modules linked in:
[  123.309170][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.9.1626 Not tainted syzkaller #0 PREEMPT(full) 
[  123.318481][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  123.328598][ T9175] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  123.335333][ T9175] Code: 44 70 99 ff 4c 8d 2d 7d ff 5d 05 49 8d 7e 40 e8 f4 03 b6 ff 49 8b 6e 40 4c 89 e7 e8 28 ff b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf 3a dd 03 66 66 66 66 66 66 2e
[  123.354991][ T9175] RSP: 0018:ffffc900017db778 EFLAGS: 00010246
[  123.361132][ T9175] RAX: ffff888104044c78 RBX: ffff888125d28ec8 RCX: ffffffff81bfe4d8
[  123.369192][ T9175] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de440
[  123.377259][ T9175] RBP: 000000000000000b R08: 0001888125d28e7b R09: 0000000000000000
[  123.385371][ T9175] R10: ffffc900017db6a8 R11: 0001c900017db6a8 R12: ffff888125d28e78
[  123.393392][ T9175] R13: ffffffff871de440 R14: ffff888125d28e30 R15: 0000000000000001
[  123.401370][ T9175] FS:  00007fa39c0576c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000
[  123.410329][ T9175] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.416981][ T9175] CR2: 00007fa39d5e5800 CR3: 0000000124ef4000 CR4: 00000000003506f0
[  123.424976][ T9175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  123.432991][ T9175] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  123.441057][ T9175] Call Trace:
[  123.444329][ T9175]  <TASK>
[  123.447313][ T9175]  ext4_xattr_inode_dec_ref_all+0x57c/0x880
[  123.453304][ T9175]  ? errseq_check+0x2c/0x50
[  123.457824][ T9175]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  123.463439][ T9175]  ? ext4_truncate+0x92b/0xb00
[  123.468364][ T9175]  ext4_evict_inode+0xa1f/0xd60
[  123.473389][ T9175]  ? __pfx_ext4_evict_inode+0x10/0x10
[  123.478809][ T9175]  evict+0x2af/0x510
[  123.482860][ T9175]  ? iput+0x116/0x580
[  123.486883][ T9175]  iput+0x41a/0x580
[  123.490754][ T9175]  ext4_process_orphan+0x1a9/0x1c0
[  123.495883][ T9175]  ext4_orphan_cleanup+0x6a8/0xa00
[  123.501046][ T9175]  ext4_fill_super+0x3408/0x37c0
[  123.505991][ T9175]  ? set_blocksize+0x14c/0x270
[  123.510906][ T9175]  ? setup_bdev_super+0x30e/0x370
[  123.515970][ T9175]  ? __pfx_ext4_fill_super+0x10/0x10
[  123.521272][ T9175]  get_tree_bdev_flags+0x291/0x300
[  123.526522][ T9175]  ? __pfx_ext4_fill_super+0x10/0x10
[  123.531846][ T9175]  get_tree_bdev+0x1f/0x30
[  123.536336][ T9175]  ext4_get_tree+0x1c/0x30
[  123.540823][ T9175]  vfs_get_tree+0x57/0x1d0
[  123.545310][ T9175]  do_new_mount+0x288/0x8d0
[  123.549868][ T9175]  path_mount+0x4d0/0xbc0
[  123.554197][ T9175]  __se_sys_mount+0x28c/0x2e0
[  123.558960][ T9175]  __x64_sys_mount+0x67/0x80
[  123.563664][ T9175]  x64_sys_call+0x2d61/0x3020
[  123.568443][ T9175]  do_syscall_64+0x12c/0x370
[  123.573228][ T9175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.579161][ T9175] RIP: 0033:0x7fa39d5fd8ca
[  123.583638][ T9175] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.603291][ T9175] RSP: 002b:00007fa39c056e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  123.611828][ T9175] RAX: ffffffffffffffda RBX: 00007fa39c056ee0 RCX: 00007fa39d5fd8ca
[  123.620014][ T9175] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fa39c056ea0
[  123.628057][ T9175] RBP: 0000200000000180 R08: 00007fa39c056ee0 R09: 0000000000800718
[  123.636069][ T9175] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  123.644301][ T9175] R13: 00007fa39c056ea0 R14: 00000000000004a3 R15: 00002000000003c0
[  123.652389][ T9175]  </TASK>
[  123.655492][ T9175] ---[ end trace 0000000000000000 ]---
[  123.669861][ T9175] EXT4-fs (loop9): 1 orphan inode deleted
[  123.680158][ T9175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.713871][ T9180] SELinux: failed to load policy
[  123.718865][   T28] audit: type=1400 audit(1771480416.006:1059): avc:  denied  { load_policy } for  pid=9177 comm="syz.6.1627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  123.816571][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.845110][ T9191] loop8: detected capacity change from 0 to 1024
[  123.880004][ T9191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.940349][ T9191] EXT4-fs error (device loop8): ext4_check_all_de:660: inode #12: block 7: comm syz.8.1634: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=108 fake=0
[  124.030236][ T9206] EXT4-fs error (device loop8): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.8.1634: path /142/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=132 fake=0
[  124.058866][ T9208] loop9: detected capacity change from 0 to 1024
[  124.122214][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.168182][ T9208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.248548][ T6840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.275189][ T9222] loop6: detected capacity change from 0 to 256
[  124.293385][ T9222] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  124.324345][ T9213] loop2: detected capacity change from 0 to 512
[  124.348275][ T9228] loop8: detected capacity change from 0 to 1024
[  124.370033][ T9222] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.407744][ T9228] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  124.432327][ T9228] System zones: 0-1, 3-36
[  124.455356][ T9228] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1647: bad orphan inode 134217728
[  124.477520][ T9213] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  124.483802][ T9228] loop8: lost filesystem error report for type 5 error -117
[  124.487366][ T9213] EXT4-fs (loop2): orphan cleanup on readonly fs
[  124.487434][ T9228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.532464][ T9213] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1641: corrupted inode contents
[  124.569993][ T9213] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  124.579585][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  124.579903][ T9213] EXT4-fs (loop2): Remounting filesystem read-only
[  124.588729][    C0] EXT4-fs (loop2): initial error at time 1771480416: ext4_do_update_inode:5569: inode 16
[  124.588758][    C0] EXT4-fs (loop2): last error at time 1771480416: ext4_do_update_inode:5569: inode 16
[  124.625175][ T4509] bridge_slave_1: left allmulticast mode
[  124.637714][ T4509] bridge_slave_1: left promiscuous mode
[  124.643735][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.654725][ T4509] bridge_slave_0: left allmulticast mode
[  124.660760][ T4509] bridge_slave_0: left promiscuous mode
[  124.667381][ T9213] EXT4-fs (loop2): 1 truncate cleaned up
[  124.673893][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.681371][ T4520] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  124.692688][ T4520] Quota error (device loop2): write_blk: dquota write failed
[  124.700257][ T4520] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  124.712112][ T4520] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  124.737779][ T4520] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  124.757697][ T9213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.854601][ T5160] IPVS: starting estimator thread 0...
[  124.949610][ T9246] IPVS: using max 3792 ests per chain, 189600 per kthread
[  127.011664][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.733328][ T7335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.871813][ T4509] bond2 (unregistering): (slave bridge1): Releasing active interface
[  127.911771][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.922296][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.932633][ T4509] bond0 (unregistering): Released all slaves
[  127.940538][ T4509] bond1 (unregistering): Released all slaves
[  127.950381][ T4509] bond2 (unregistering): Released all slaves
[  127.958957][ T4509] bond3 (unregistering): Released all slaves
[  128.043521][ T4509] hsr_slave_0: left promiscuous mode
[  128.069144][ T4509] hsr_slave_1: left promiscuous mode
[  128.075808][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.097134][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.141768][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.159942][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.189842][ T4509] veth1_macvtap: left promiscuous mode
[  128.200148][ T4509] veth0_macvtap: left promiscuous mode
[  128.206651][ T4509] veth1_vlan: left promiscuous mode
[  128.212574][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  128.212587][   T28] audit: type=1326 audit(1771480420.516:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.236326][ T4509] veth0_vlan: left promiscuous mode
[  128.267801][   T28] audit: type=1326 audit(1771480420.516:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.292251][   T28] audit: type=1326 audit(1771480420.546:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.316044][   T28] audit: type=1326 audit(1771480420.546:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.339997][   T28] audit: type=1326 audit(1771480420.546:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.363523][   T28] audit: type=1326 audit(1771480420.546:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.408150][   T28] audit: type=1326 audit(1771480420.546:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.439411][ T4509] team0 (unregistering): Port device team_slave_1 removed
[  128.449374][   T28] audit: type=1326 audit(1771480420.546:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.475491][ T4509] team0 (unregistering): Port device team_slave_0 removed
[  128.509501][   T28] audit: type=1326 audit(1771480420.556:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.545017][   T28] audit: type=1326 audit(1771480420.556:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88f53c629 code=0x7ffc0000
[  128.698487][ T9307] loop2: detected capacity change from 0 to 1024
[  128.731293][ T9242] chnl_net:caif_netlink_parms(): no params data found
[  128.772552][ T9307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  128.831228][ T9307] System zones: 0-1, 3-36
[  128.832187][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.842766][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.850679][ T9242] bridge_slave_0: entered allmulticast mode
[  128.857316][ T9242] bridge_slave_0: entered promiscuous mode
[  128.863622][ T9307] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1674: bad orphan inode 134217728
[  128.864611][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.884567][ T9307] loop2: lost filesystem error report for type 5 error -117
[  128.885175][ T9307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.928605][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.936335][ T9242] bridge_slave_1: entered allmulticast mode
[  128.943075][ T9242] bridge_slave_1: entered promiscuous mode
[  128.966953][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.990225][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.020547][ T9328] netlink: 'syz.1.1676': attribute type 1 has an invalid length.
[  129.048310][ T9242] team0: Port device team_slave_0 added
[  129.065861][ T9242] team0: Port device team_slave_1 added
[  129.077601][ T9328] gretap1: entered allmulticast mode
[  129.094776][ T7335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.096820][ T9328] bond3: (slave gretap1): making interface the new active one
[  129.111811][ T9328] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  129.160496][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.170950][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  129.197074][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.208725][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.215958][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  129.242462][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.321806][ T9242] hsr_slave_0: entered promiscuous mode
[  129.328088][ T9242] hsr_slave_1: entered promiscuous mode
[  129.480888][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'.
[  129.523846][ T4509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.545374][ T4509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.582435][ T9372] all: renamed from veth1_to_bond (while UP)
[  129.638956][ T4509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.656235][ T4509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.680213][ T9387] loop6: detected capacity change from 0 to 128
[  129.707819][ T9387] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  129.725346][ T9387] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  129.754188][ T4509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.778003][ T4509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.809323][ T9402] loop6: detected capacity change from 0 to 1024
[  129.833371][ T9402] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  129.847129][ T9402] System zones: 0-1, 3-36
[  129.859177][ T9402] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1697: bad orphan inode 134217728
[  129.874404][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1701'.
[  129.880630][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'.
[  129.889844][ T9402] loop6: lost filesystem error report for type 5 error -117
[  129.892657][ T9402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.904172][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'.
[  129.925399][ T4509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.936160][ T4509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.241319][ T4509] bond0 (unregistering): Released all slaves
[  130.275395][ T4509] bond1 (unregistering): Released all slaves
[  130.342885][ T9440] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  130.342975][   T23] IPVS: starting estimator thread 0...
[  130.376886][ T4509] tipc: Disabling bearer <udp:syz2>
[  130.385485][ T4509] tipc: Left network mode
[  130.413270][ T4509] hsr_slave_0: left promiscuous mode
[  130.423727][ T4509] hsr_slave_1: left promiscuous mode
[  130.434574][ T4509] veth1_macvtap: left allmulticast mode
[  130.440249][ T9446] IPVS: using max 2256 ests per chain, 112800 per kthread
[  130.449291][ T4509] veth1_macvtap: left promiscuous mode
[  130.455669][ T4509] veth0_macvtap: left promiscuous mode
[  130.462209][ T4509] veth1_vlan: left promiscuous mode
[  130.467787][ T4509] veth0_vlan: left promiscuous mode
[  130.544808][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'.
[  130.556239][ T9459] netlink: 'syz.1.1714': attribute type 5 has an invalid length.
[  130.564282][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'.
[  130.629256][ T9459] geneve2: entered promiscuous mode
[  130.634782][ T9459] geneve2: entered allmulticast mode
[  130.676326][ T4505] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 38600 - 0
[  130.708749][ T4505] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 38600 - 0
[  130.771079][ T8065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.782886][ T4505] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 38600 - 0
[  130.818260][ T4513] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 38600 - 0
[  130.878410][ T9463] loop8: detected capacity change from 0 to 256
[  130.912497][ T9242] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  130.949821][ T9242] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  130.990055][ T9242] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  131.018199][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'.
[  131.047293][ T9242] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  131.061859][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1724'.
[  131.136220][ T9514] loop6: detected capacity change from 0 to 128
[  131.149097][ T4505] FAT-fs (loop8): error, invalid FAT chain (i_pos 196, last_block 1024)
[  131.158817][ T4505] FAT-fs (loop8): Filesystem has been set read-only
[  131.193130][ T9514] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.216090][ T9514] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.241789][ T4509] IPVS: stop unused estimator thread 0...
[  131.277826][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.306893][ T9242] 8021q: adding VLAN 0 to HW filter on device team0
[  131.316732][ T9523] loop8: detected capacity change from 0 to 128
[  131.326716][ T8065] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.343264][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.350350][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.384674][ T9523] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.400806][   T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1)
[  131.415341][ T9529] netlink: 'syz.6.1733': attribute type 13 has an invalid length.
[  131.430472][   T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1)
[  131.440402][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.447492][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.472707][ T9523] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.831001][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.838224][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.920675][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.941215][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.993696][ T9539] Process accounting resumed
[  132.088187][ T4505] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.107287][ T4505] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.129025][ T4505] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.170435][ T4505] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.194641][ T4505] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.220778][ T6379] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.236786][ T4505] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.299872][ T9562] loop2: detected capacity change from 0 to 2048
[  132.319612][ T4505] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.328573][ T4505] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.351181][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.361972][ T9562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.429119][ T9562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.487159][ T9242] veth0_vlan: entered promiscuous mode
[  132.506688][ T9242] veth1_vlan: entered promiscuous mode
[  132.587345][ T9242] veth0_macvtap: entered promiscuous mode
[  132.603623][ T9242] veth1_macvtap: entered promiscuous mode
[  132.656831][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.685576][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.726034][ T4505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.737552][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1747'.
[  132.749900][ T4505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.769193][  T424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.789685][  T424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.958873][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1751'.
[  133.470990][ T9643] loop0: detected capacity change from 0 to 256
[  133.625829][ T4505] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 1024)
[  133.644404][ T4505] FAT-fs (loop0): Filesystem has been set read-only
[  133.771587][ T9546] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  133.781319][ T9546] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  133.788888][ T9546] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  133.987310][ T9546] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  134.592028][ T9698] __nla_validate_parse: 3 callbacks suppressed
[  134.592045][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'.
[  134.971270][ T9724] netlink: 'syz.0.1790': attribute type 4 has an invalid length.
[  134.995972][ T9724] netlink: 'syz.0.1790': attribute type 4 has an invalid length.
[  135.121726][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  135.121740][   T28] audit: type=1400 audit(1771480427.416:1087): avc:  denied  { watch } for  pid=9732 comm="syz.2.1794" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  135.202129][ T9728] loop6: detected capacity change from 0 to 256
[  135.348592][  T424] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 1024)
[  135.357518][  T424] FAT-fs (loop6): Filesystem has been set read-only
[  135.563766][ T9756] netlink: 'syz.0.1803': attribute type 13 has an invalid length.
[  135.668232][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.675561][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.732194][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.744265][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.863788][ T4520] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.880709][ T4520] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.929668][ T4520] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.948722][ T4520] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.013195][ T7062] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  136.040127][ T7062] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  136.211526][ T9759] loop8: detected capacity change from 0 to 512
[  136.327282][ T9759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.350019][ T9759] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.393272][ T9781] uprobe: syz.1.1811:9781 failed to unregister, leaking uprobe
[  136.413863][   T28] audit: type=1400 audit(1771480684.684:1088): avc:  denied  { cpu } for  pid=9780 comm="syz.1.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  136.466523][ T9777] loop2: detected capacity change from 0 to 256
[  136.596412][   T28] audit: type=1400 audit(1771480684.884:1089): avc:  denied  { rmdir } for  pid=6379 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  136.646675][ T6379] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  136.681158][ T6379] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  137.262860][ T4505] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.273869][ T6379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.307810][ T4505] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.401440][ T4505] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.425294][ T4505] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.511411][ T4505] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.533519][ T4505] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.601466][ T4505] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.621242][ T4505] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.769885][ T4505] bridge_slave_1: left allmulticast mode
[  137.780936][ T4505] bridge_slave_1: left promiscuous mode
[  137.801631][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.829397][ T4505] bridge_slave_0: left allmulticast mode
[  137.835252][ T4505] bridge_slave_0: left promiscuous mode
[  137.851374][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.082424][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.092310][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.105762][ T4505] bond0 (unregistering): Released all slaves
[  138.119480][ T4505] bond1 (unregistering): Released all slaves
[  138.290550][ T4505] hsr_slave_0: left promiscuous mode
[  138.299093][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'.
[  138.320778][ T4505] hsr_slave_1: left promiscuous mode
[  138.344075][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.361029][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.368566][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'.
[  138.378288][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.385867][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.402659][ T4505] veth1_macvtap: left promiscuous mode
[  138.408201][ T4505] veth0_macvtap: left promiscuous mode
[  138.413911][ T4505] veth1_vlan: left promiscuous mode
[  138.419501][ T4505] veth0_vlan: left promiscuous mode
[  138.430907][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'.
[  138.504372][ T4505] team0 (unregistering): Port device team_slave_1 removed
[  138.514353][ T4505] team0 (unregistering): Port device team_slave_0 removed
[  138.546415][ T4505] team0 (unregistering): Port device dummy0 removed
[  138.625667][ T9872] netlink: 'syz.2.1829': attribute type 4 has an invalid length.
[  138.719375][   T28] audit: type=1400 audit(1771480687.004:1090): avc:  denied  { mount } for  pid=9877 comm="syz.2.1830" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  138.861983][ T9817] chnl_net:caif_netlink_parms(): no params data found
[  138.873381][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1831'.
[  138.917135][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.945081][   T28] audit: type=1400 audit(1771480687.234:1091): avc:  denied  { unmount } for  pid=7335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  138.968635][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.990585][ T9817] bridge_slave_0: entered allmulticast mode
[  139.008238][ T9817] bridge_slave_0: entered promiscuous mode
[  139.023444][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.038311][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.054999][ T9817] bridge_slave_1: entered allmulticast mode
[  139.069097][ T9817] bridge_slave_1: entered promiscuous mode
[  139.109902][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.133999][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.181423][ T9817] team0: Port device team_slave_0 added
[  139.197269][ T9817] team0: Port device team_slave_1 added
[  139.238453][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.253736][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.302192][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.322348][   T28] audit: type=1400 audit(1771480687.614:1092): avc:  denied  { unmount } for  pid=7335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  139.344553][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.359639][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.385932][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.414296][ T9817] hsr_slave_0: entered promiscuous mode
[  139.451945][ T9817] hsr_slave_1: entered promiscuous mode
[  139.457893][ T9817] debugfs: 'hsr0' already exists in 'hsr'
[  139.483998][ T9817] Cannot create hsr debugfs directory
[  139.521132][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1834'.
[  139.522917][   T28] audit: type=1400 audit(1771480687.814:1093): avc:  denied  { create } for  pid=9918 comm="syz.6.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  139.564670][   T28] audit: type=1400 audit(1771480687.844:1094): avc:  denied  { setopt } for  pid=9918 comm="syz.6.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  139.605262][   T28] audit: type=1400 audit(1771480687.844:1095): avc:  denied  { bind } for  pid=9918 comm="syz.6.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  139.634718][   T28] audit: type=1400 audit(1771480687.844:1096): avc:  denied  { bind } for  pid=9917 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  140.030869][ T9817] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.062393][ T9817] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  140.081834][ T9817] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  140.101643][ T9817] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  140.192185][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.248065][ T9817] 8021q: adding VLAN 0 to HW filter on device team0
[  140.262549][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.269625][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.287237][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.294343][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.372066][ T9968] chnl_net:caif_netlink_parms(): no params data found
[  140.422561][ T9968] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.429882][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.437301][ T9968] bridge_slave_0: entered allmulticast mode
[  140.452113][ T9968] bridge_slave_0: entered promiscuous mode
[  140.463646][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.471231][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.478588][ T9968] bridge_slave_1: entered allmulticast mode
[  140.485155][ T9968] bridge_slave_1: entered promiscuous mode
[  140.514479][ T9968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.534871][ T9968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.545591][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.580588][ T9968] team0: Port device team_slave_0 added
[  140.620282][ T9968] team0: Port device team_slave_1 added
[  140.660151][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.667212][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.712688][ T9968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.732492][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.749625][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.789071][ T9968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.789857][   T28] audit: type=1400 audit(1771480689.074:1097): avc:  denied  { bind } for  pid=10069 comm="syz.0.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  140.817274][ T9968] hsr_slave_0: entered promiscuous mode
[  140.827224][ T9968] hsr_slave_1: entered promiscuous mode
[  140.847985][T10072] loop0: detected capacity change from 0 to 128
[  140.849173][ T9968] debugfs: 'hsr0' already exists in 'hsr'
[  140.864798][T10072] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54)
[  140.872963][T10072] FAT-fs (loop0): Filesystem has been set read-only
[  140.879230][ T9968] Cannot create hsr debugfs directory
[  140.893566][T10072] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54)
[  140.934266][ T9817] veth0_vlan: entered promiscuous mode
[  140.962558][T10085] ref_ctr increment failed for inode: 0xbc offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881050aa1c0
[  140.992631][T10084] uprobe: syz.0.1855:10084 failed to unregister, leaking uprobe
[  141.018946][T10083] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.026340][T10083] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.087005][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.098340][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.146834][ T4513] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.158018][ T4513] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 38600 - 0
[  141.179339][ T4513] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.199882][ T4513] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 38600 - 0
[  141.209034][ T4513] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.241346][ T4513] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 38600 - 0
[  141.251045][ T9817] veth1_vlan: entered promiscuous mode
[  141.263169][ T4513] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.272244][ T4513] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 38600 - 0
[  141.312730][ T9817] veth0_macvtap: entered promiscuous mode
[  141.333711][ T9817] veth1_macvtap: entered promiscuous mode
[  141.378183][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.398247][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.434324][  T424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.443268][  T424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.471877][  T424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.480728][  T424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.512913][   T28] audit: type=1400 audit(1771480689.794:1098): avc:  denied  { mount } for  pid=9817 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  141.547254][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'.
[  141.557318][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'.
[  141.570591][ T6036] Bluetooth: hci0: command 0x1003 tx timeout
[  141.579753][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  141.602001][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.611281][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.619746][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.643073][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.654905][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.663786][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.673344][T10147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.698562][T10147] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(17)
[  141.705371][T10147] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  141.713111][T10147] vhci_hcd vhci_hcd.0: Device attached
[  141.718803][T10158] vhci_hcd: connection closed
[  141.719803][  T424] vhci_hcd vhci_hcd.6: stop threads
[  141.742843][ T9968] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  141.759845][  T424] vhci_hcd vhci_hcd.6: release socket
[  141.768816][ T9968] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  141.770119][  T424] vhci_hcd vhci_hcd.6: disconnect device
[  141.793055][ T9968] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  141.812401][ T9968] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  141.890066][ T9968] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.910740][T10188] ref_ctr increment failed for inode: 0x349 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a45a1c0
[  141.934294][ T9968] 8021q: adding VLAN 0 to HW filter on device team0
[  141.945062][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.952173][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.984801][T10187] uprobe: syz.1.1873:10187 failed to unregister, leaking uprobe
[  141.995146][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.002233][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.047969][   T28] audit: type=1400 audit(1771480690.334:1099): avc:  denied  { remount } for  pid=10195 comm="syz.1.1875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  142.136920][T10200] syzkaller0: entered promiscuous mode
[  142.148196][T10200] syzkaller0: entered allmulticast mode
[  142.179346][ T9968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.205340][ T9968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.378344][ T9968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.536133][ T9968] veth0_vlan: entered promiscuous mode
[  142.560599][ T9968] veth1_vlan: entered promiscuous mode
[  142.595449][ T9968] veth0_macvtap: entered promiscuous mode
[  142.621550][ T9968] veth1_macvtap: entered promiscuous mode
[  142.655773][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.682609][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.718941][ T4505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.730730][ T4505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.772996][ T4505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.789643][ T4505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.972530][   T28] audit: type=1400 audit(1771480691.254:1100): avc:  denied  { unmount } for  pid=7128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  143.018237][   T28] audit: type=1400 audit(1771480691.284:1101): avc:  denied  { cmd } for  pid=10258 comm="syz.3.1878" path="socket:[36251]" dev="sockfs" ino=36251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  143.088364][T10268] loop3: detected capacity change from 0 to 512
[  143.125438][T10272] syzkaller0: entered allmulticast mode
[  143.151083][T10268] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  143.155531][   T28] audit: type=1400 audit(1771480691.444:1102): avc:  denied  { unmount } for  pid=7128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  143.161304][T10272] syzkaller0: entered promiscuous mode
[  143.256921][   T28] audit: type=1400 audit(1771480691.544:1103): avc:  denied  { unmount } for  pid=7128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  143.279076][T10272] syzkaller0 (unregistering): left promiscuous mode
[  143.299693][T10272] syzkaller0 (unregistering): left allmulticast mode
[  143.312836][   T28] audit: type=1400 audit(1771480691.584:1104): avc:  denied  { unmount } for  pid=7128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  143.338488][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'.
[  143.385123][T10292] ref_ctr increment failed for inode: 0x26 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881050a8d80
[  143.467762][T10297] xt_l2tp: v2 tid > 0xffff: 37482740
[  143.474435][T10291] uprobe: syz.5.1885:10291 failed to unregister, leaking uprobe
[  143.483982][T10301] loop3: detected capacity change from 0 to 1024
[  143.500051][T10301] EXT4-fs: Ignoring removed oldalloc option
[  143.526165][T10301] EXT4-fs: Ignoring removed bh option
[  143.574131][T10301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.871651][T10301] ==================================================================
[  143.879767][T10301] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  143.887669][T10301] 
[  143.889974][T10301] write to 0xffff888125d28b4c of 4 bytes by task 10320 on cpu 1:
[  143.897669][T10301]  xas_set_mark+0x12b/0x140
[  143.902157][T10301]  __folio_start_writeback+0x17b/0x370
[  143.907610][T10301]  ext4_bio_write_folio+0x5ad/0x9f0
[  143.912819][T10301]  mpage_process_page_bufs+0x4a1/0x620
[  143.918373][T10301]  mpage_prepare_extent_to_map+0x7d4/0xc50
[  143.924187][T10301]  ext4_do_writepages+0xa07/0x2840
[  143.929284][T10301]  ext4_writepages+0x18f/0x320
[  143.934023][T10301]  do_writepages+0x1c6/0x310
[  143.938592][T10301]  file_write_and_wait_range+0x178/0x2f0
[  143.944208][T10301]  generic_buffers_fsync_noflush+0x45/0x130
[  143.950080][T10301]  ext4_sync_file+0x1aa/0x6b0
[  143.954742][T10301]  vfs_fsync_range+0xc5/0xe0
[  143.959309][T10301]  ext4_buffered_write_iter+0x34f/0x3c0
[  143.964837][T10301]  ext4_file_write_iter+0x380/0xfa0
[  143.970104][T10301]  iter_file_splice_write+0x6bc/0xa80
[  143.975548][T10301]  direct_splice_actor+0x156/0x2a0
[  143.980636][T10301]  splice_direct_to_actor+0x311/0x670
[  143.985991][T10301]  do_splice_direct+0x119/0x1a0
[  143.990819][T10301]  do_sendfile+0x382/0x650
[  143.995221][T10301]  __x64_sys_sendfile64+0x105/0x150
[  144.000396][T10301]  x64_sys_call+0x2dc4/0x3020
[  144.005064][T10301]  do_syscall_64+0x12c/0x370
[  144.009637][T10301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.015517][T10301] 
[  144.017815][T10301] read to 0xffff888125d28b4c of 4 bytes by task 10301 on cpu 0:
[  144.025417][T10301]  __writeback_single_inode+0x26b/0x860
[  144.030945][T10301]  writeback_single_inode+0x16d/0x3f0
[  144.036397][T10301]  sync_inode_metadata+0x6e/0xa0
[  144.041317][T10301]  generic_buffers_fsync_noflush+0xee/0x130
[  144.047186][T10301]  ext4_sync_file+0x1aa/0x6b0
[  144.051838][T10301]  vfs_fsync_range+0xc5/0xe0
[  144.056407][T10301]  ext4_buffered_write_iter+0x34f/0x3c0
[  144.061945][T10301]  ext4_file_write_iter+0x380/0xfa0
[  144.067298][T10301]  iter_file_splice_write+0x6bc/0xa80
[  144.072642][T10301]  direct_splice_actor+0x156/0x2a0
[  144.077766][T10301]  splice_direct_to_actor+0x311/0x670
[  144.083209][T10301]  do_splice_direct+0x119/0x1a0
[  144.088041][T10301]  do_sendfile+0x382/0x650
[  144.092448][T10301]  __x64_sys_sendfile64+0x105/0x150
[  144.097629][T10301]  x64_sys_call+0x2dc4/0x3020
[  144.102295][T10301]  do_syscall_64+0x12c/0x370
[  144.106869][T10301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.112742][T10301] 
[  144.115044][T10301] value changed: 0x0a000021 -> 0x04000021
[  144.120735][T10301] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  144.123039][T10301] Reported by Kernel Concurrency Sanitizer on:
[  144.129162][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.3.1887 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  144.140073][T10301] Tainted: [W]=WARN
[  144.143855][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  144.153881][T10301] ==================================================================
[  144.334570][ T7128] bond1: (slave syz_tun): Releasing active interface
[  144.738265][ T4505] bridge_slave_1: left allmulticast mode
[  144.744512][ T4505] bridge_slave_1: left promiscuous mode
[  144.755303][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.763949][ T4505] bridge_slave_0: left allmulticast mode
[  144.770092][ T4505] bridge_slave_0: left promiscuous mode
[  144.775931][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.805415][ T4505] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  144.817417][ T4505] ip6gretap1 (unregistering): left promiscuous mode
[  144.825402][ T4505] ip6gretap1 (unregistering): left allmulticast mode
[  144.857162][ T4505] bond3 (unregistering): (slave gretap1): Releasing active interface
[  145.071346][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.090871][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.110473][ T4505] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  145.118889][ T4505] bond0 (unregistering): Released all slaves
[  145.126500][ T4505] bond1 (unregistering): Released all slaves
[  145.135021][ T4505] bond2 (unregistering): Released all slaves
[  145.143158][ T4505] bond3 (unregistering): Released all slaves
[  145.200958][ T4505] hsr_slave_0: left promiscuous mode
[  145.210079][ T4505] hsr_slave_1: left promiscuous mode
[  145.216972][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.227469][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.292865][ T4505] team0 (unregistering): Port device team_slave_1 removed
[  145.305739][ T4505] team0 (unregistering): Port device team_slave_0 removed
[  145.583125][ T4505] IPVS: stop unused estimator thread 0...
[  145.663469][ T4505] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.703045][ T4505] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.742955][ T4505] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.823064][ T4505] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.900455][T10320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.917406][ T4505] bridge_slave_1: left allmulticast mode
[  145.923179][ T4505] bridge_slave_1: left promiscuous mode
[  145.928859][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.936689][ T4505] bridge_slave_0: left allmulticast mode
[  145.942509][ T4505] bridge_slave_0: left promiscuous mode
[  145.948227][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.001425][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.011196][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.020724][ T4505] bond0 (unregistering): Released all slaves
[  146.046563][ T4505] hsr_slave_0: left promiscuous mode
[  146.052278][ T4505] hsr_slave_1: left promiscuous mode
[  146.058063][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.069731][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.077335][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.084926][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.098176][ T4505] veth1_macvtap: left promiscuous mode
[  146.103818][ T4505] veth0_macvtap: left promiscuous mode
[  146.109316][ T4505] veth1_vlan: left promiscuous mode
[  146.114602][ T4505] veth0_vlan: left promiscuous mode
[  146.181461][ T4505] team0 (unregistering): Port device team_slave_1 removed
[  146.190714][ T4505] team0 (unregistering): Port device team_slave_0 removed
[  146.434298][ T4505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.483462][ T4505] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.512743][ T4505] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.572666][ T4505] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.656708][ T4505] bridge_slave_1: left allmulticast mode
[  146.662497][ T4505] bridge_slave_1: left promiscuous mode
[  146.668122][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.677025][ T4505] bridge_slave_0: left allmulticast mode
[  146.682842][ T4505] bridge_slave_0: left promiscuous mode
[  146.688468][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.791549][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.801696][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.811120][ T4505] bond0 (unregistering): Released all slaves
[  146.879213][ T4505] hsr_slave_0: left promiscuous mode
[  146.884983][ T4505] hsr_slave_1: left promiscuous mode
[  146.891311][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.899394][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.906897][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.915073][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.925962][ T4505] veth1_macvtap: left promiscuous mode
[  146.931707][ T4505] veth0_macvtap: left promiscuous mode
[  146.937235][ T4505] veth1_vlan: left promiscuous mode
[  146.942601][ T4505] veth0_vlan: left promiscuous mode
[  146.997775][ T4505] team0 (unregistering): Port device team_slave_1 removed
[  147.006986][ T4505] team0 (unregistering): Port device team_slave_0 removed
[  149.612920][ T4503] bridge_slave_1: left allmulticast mode
[  149.618734][ T4503] bridge_slave_1: left promiscuous mode
[  149.624779][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.632498][ T4503] bridge_slave_0: left allmulticast mode
[  149.638126][ T4503] bridge_slave_0: left promiscuous mode
[  149.643897][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.741595][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.751038][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.760381][ T4503] bond0 (unregistering): Released all slaves
[  149.795922][ T4503] hsr_slave_0: left promiscuous mode
[  149.802166][ T4503] hsr_slave_1: left promiscuous mode
[  149.807974][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.816485][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.854034][ T4503] team0 (unregistering): Port device team_slave_1 removed
[  149.864329][ T4503] team0 (unregistering): Port device team_slave_0 removed
[  151.973428][ T4503] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.983297][ T4503] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  151.993247][ T4503] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  152.021205][ T4503] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.031032][ T4503] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  152.040966][ T4503] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  152.091208][ T4503] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.101140][ T4503] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  152.111240][ T4503] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  152.181061][ T4503] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.190876][ T4503] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  152.200711][ T4503] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  152.300356][ T4503] bridge_slave_1: left allmulticast mode
[  152.306102][ T4503] bridge_slave_1: left promiscuous mode
[  152.311914][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.319872][ T4503] bridge_slave_0: left allmulticast mode
[  152.325496][ T4503] bridge_slave_0: left promiscuous mode
[  152.331385][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.471425][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.481222][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.490722][ T4503] bond0 (unregistering): Released all slaves
[  152.512735][ T4503] tipc: Disabling bearer <udp:syz2>
[  152.518106][ T4503] tipc: Left network mode
[  152.529096][ T4503] hsr_slave_0: left promiscuous mode
[  152.538155][ T4503] hsr_slave_1: left promiscuous mode
[  152.544131][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.551668][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.559267][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.567298][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.577335][ T4503] veth1_macvtap: left promiscuous mode
[  152.583033][ T4503] veth0_macvtap: left promiscuous mode
[  152.631081][ T4503] team0 (unregistering): Port device team_slave_1 removed
[  152.640501][ T4503] team0 (unregistering): Port device team_slave_0 removed