last executing test programs:

1m24.454132497s ago: executing program 32 (id=47):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m24.100921657s ago: executing program 33 (id=301):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000000000000000000700000014000000000000000000000007000000070303"], 0x28}}], 0x2, 0x4000800)

1m9.016496955s ago: executing program 34 (id=299):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r1 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1m1.544780661s ago: executing program 6 (id=536):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x61a, 0x4)

1m1.242699041s ago: executing program 6 (id=538):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ppoll(&(0x7f0000000240)=[{r1, 0x201}, {r1, 0x960e}], 0x2, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x20000)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1m1.041719967s ago: executing program 6 (id=542):
socket$nl_route(0x10, 0x3, 0x0)
keyctl$link(0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff)

1m1.000774049s ago: executing program 6 (id=544):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000340)={[{@resgid}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1m0.782349386s ago: executing program 6 (id=546):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x80)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
write$9p(r0, 0x0, 0x0)

1m0.439108257s ago: executing program 6 (id=556):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r1}, 0x90)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x8}, @enum={0x6}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x2}, {0x8, 0x4}, {0x7}, {0xb}, {0x5, 0x4}, {0x8, 0x5}]}, @union={0x6, 0x0, 0x0, 0x5, 0x1, 0x6}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/15, 0xa7, 0xf, 0x0, 0x23, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x90, '\x00', r1, r2, 0x5, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x50)
socket$inet6(0xa, 0x802, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0xfd02)
ioprio_set$uid(0x3, r4, 0x2004)
r5 = getgid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x3, 0x0, 0x0, r4, r5, 0x4, 0x7f}, 0x0, 0x0, 0x5, 0x5, 0x6, 0x5, 0x100000001, 0x10, 0x4, 0x6, 0x0, 0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x46d, &(0x7f0000000600)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1m0.418613557s ago: executing program 35 (id=556):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r1}, 0x90)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x8}, @enum={0x6}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x2}, {0x8, 0x4}, {0x7}, {0xb}, {0x5, 0x4}, {0x8, 0x5}]}, @union={0x6, 0x0, 0x0, 0x5, 0x1, 0x6}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/15, 0xa7, 0xf, 0x0, 0x23, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x90, '\x00', r1, r2, 0x5, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x50)
socket$inet6(0xa, 0x802, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0xfd02)
ioprio_set$uid(0x3, r4, 0x2004)
r5 = getgid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x3, 0x0, 0x0, r4, r5, 0x4, 0x7f}, 0x0, 0x0, 0x5, 0x5, 0x6, 0x5, 0x100000001, 0x10, 0x4, 0x6, 0x0, 0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x46d, &(0x7f0000000600)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

57.645441514s ago: executing program 0 (id=582):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

57.559665606s ago: executing program 0 (id=575):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13)

57.344362344s ago: executing program 0 (id=578):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$9p(r0, &(0x7f0000000100)="d5c0", 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)

57.209482308s ago: executing program 0 (id=581):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x2ab, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x1)

56.978843015s ago: executing program 0 (id=586):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000002c0)={[{@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@discard}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

56.619492146s ago: executing program 0 (id=587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x3)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd)

56.619015986s ago: executing program 36 (id=587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x3)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd)

43.958366217s ago: executing program 9 (id=707):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0xa0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8202, &(0x7f0000000080)={[{@lazytime}, {@nodioread_nolock}, {@grpjquota}, {@errors_remount}, {}, {@nogrpid}, {@minixdf}, {@data_err_ignore}]}, 0x0, 0x628, &(0x7f0000000600)="$eJzs3U1oXFsdAPD/vZOkSRtNK1JsUQy4aEGaj1qsumq7sULBgl2IuGhokho6aUOTgq0FU3ChoCDiVqQb9+Jeilt3Iqg710J979HHW7yPzuPeubcZJjPJvEkmk/T+fjCTc869c8/5z5kz99yZubkBVNZ0dpdGnImI20nEVMuyyWgunC7We/Xe0zvZLYlG4wfvJJEUZeX6r4u/J7K7JGI8Iv5xLeILte31rj9+cm+h3mj6ecTsxura7PrjJxdWVhfuLt1duj9/8VuXLs99e/7S/L7EWcZ1/cb3v/ybX/zkm8v/rF9I4krcGv3ZYrTFsV+mYzpeFyG2lo9ExOUs0eF5OWrKEJIht4P+1IrX42hEnI6pqOW5pqlY+fVQGwcMVKMW0QAqKjH+oaLKeUB5bD+I4+DD7OXV5gHQ9vhHmp+NxHh+bHT8VdJyZNQ83j25D/VndXz89Owfslt0+RxiZB/q6WbzWUR8qVP8Sd62k/mnOFn8aaQtj8vScxExVjwXaZ/1T7flD/r191nib+2HLN4rxd+s/Fqf9e8W/7uNPjcMADt4cbXYkW9mua39XzYzLOc/0WH+M9lh39WPYe//u8//yv39eP4Zedo2D8vmPDc7b3K0veC/v7r+u271t87/sltWfzkXPAgvn0WcbYv/l/lkLnnT/0mH/s9Wub2V3fHrn+/+6//Xuy3rPf4/9xPerhrPI851PP7ZCilLzW6srpVlbd9Pzi6v1JfmmvfRaSr817//+E8dqs5fJ/32//f2EnSLrP+jS/xt/b/Z+risbK3HOv5y8/lqt2WTu8af/m8suZWnxoqSny5sbDycjxhLbhSrtJRf3Lkt5TrlNrL4z3+t8/jf4fWfd/Rmj/Gv/fDeq27Leu7/be8qudd7PTzI4l/srf+3vf/9tsc6PvjRo6+0FU2UiZ3in9hjbAAAAAAAAFA1af4dbJLOvEmn6cxM8xzeL8bxtP5gfePryw8e3V+MOJ//HnI0Lb/pnmrmkyw/X/wetsxfbMt/IyJORcTvaxN5fubOg/risIMHAAAAAAAAAAAAAAAAAACAQ+JEcf5/eZ3q92vN8/97snF6wK0DBm6QF5gDDjfjH6prJOJY31dwBY40+3+oLuMfqsv4h+oy/qG6jH+oLuMfqsv4h+oqxv8nLUUTw2oLAAAAALBvTn31xX+SiNj8zkR+y4wVy0aH2jJg0IxxqK7asBsADM2bn/44/R8qp6f5/4fFPwccfHOAIUg6FeaTg8bOg/9Fx0cCAAAAAAAAAAAAAANw7ozz/6Gq0vjbsJsADMkezv/3rwPgiHPpD6iuvo7xvWnAW2W3s/jHuy1w/j8AAAAAAAAAAAAAHJjJ/JakM8UlQCcjTWdmIj4XESdjNFleqS/NRcTnI+LftdFjWX5+2I0GAAAAAAAAAAAAAAAAAACAt8z64yf3Fur1pYetiY+2lbzdifKChoelPa2JSA6+0omIOAyxDyYx0lKSRGxmPb8/W0732sI4DM/PwzRvxpDfmAAAAAAAAAAAAAAAAAAAoIJazj3u7OwfD7hFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDwtq7/338i2WU7w44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiaPg0AAP//jtg8kQ==")
setuid(0xee01)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)

43.53969734s ago: executing program 9 (id=714):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x606}, "30b83855e74c5ef9", "20fd923b32d3338f79eed80498e6bf86", "bdecc894", "8c3d6742999fd6d7"}, 0x28)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14}}, 0x74}}, 0x0)

42.479552043s ago: executing program 9 (id=721):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000380)=0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

41.749557987s ago: executing program 8 (id=725):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
syz_clone(0x4800a000, 0x0, 0x0, 0x0, 0x0, 0x0)

41.593624282s ago: executing program 9 (id=726):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000300)={[{@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0xff, 0x49c, &(0x7f0000005fc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})

40.107011999s ago: executing program 8 (id=729):
socket(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

39.927228565s ago: executing program 8 (id=734):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r2, r1, 0x0, 0x8010002b)

39.503008878s ago: executing program 9 (id=742):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1006c, 0x0)
socket$kcm(0xa, 0x2, 0x73)

39.199650628s ago: executing program 8 (id=745):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800801, &(0x7f0000000080), 0x3, 0x533, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x2000000, &(0x7f0000000280)={[{@numtail}, {@fat=@showexec}, {@shortname_win95}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x1, 0x368, &(0x7f0000000600)="$eJzs3U9om2UYAPAn+9KmHWztQRgKwqc3Qcv+4EFPHaODYS4qYepBDK5TaeqgwWB3WFYv4lHwqCcv4kEPHnYWQRFvHrw6QabiQXcbOHwlyZcmadKuE7JZ/P0O4cn7Ps/3vm/2rfn6tXn7ynKsXZiJizdv3oi5uVKUl88sx61SLEYWfVdj3OyENgDgYLiVUvyZevZZUprylACAKeu+/792ZPv5XLzz9V75ybs/ABx4xff/83vlzO3WcWkqUwIApmzs/v+jI92zoz/qLw/9VgAAcFA9/+JLz5yuRjyX53MR6++2aq1aPD3oP30x3ohGrMbxWIjbEb0Lhc5Dqft49lx15Xie5+34ZTFqnYpWLWK93ar1rhROZ936SpyIhVgs6ourjZRSdvaL6sqJvCsirra748d6qVWbicPF+D8ejtU4GXk8MFYfca66cjIvDlBb79e3I7YG9y0681+Khfj+1bgUjbgwfz5S6l/WVFeunMjzM6k6Ut+qVeLC9quw6x0QAAAAAAAAAAAAAAAAAAAAAAD4V5a2iiDPF7f3v0mD/XuWlvK+xdH9cXplxf5AW739gVIlRUp/vP1E7b0sRvYH2rk/T6tWjkP3b9kAAAAAAAAAAAAAAAAAAADwn9LcnI16o7G60dy8vDYctDeam4ciotPy5reffTUf4zl3CMrFGENdedF0ea2esn5yykZyiiDrDN5v+fTa9oyHcyrbq5g4jcruXY3GkUd+/nDQ8nDWP/Lfg5wsJi8w2zGN4WD9aG9Kd/NCXT5VBCfvkHw9pbTbca68PF4VpYjy3f/D7R2kTvDNjdcfPNU89mS35cvU89jjC+evf/Dxb2v1RmfkjsYnsxvN22mtXjyffLLtHmRD508pekFp+Ewo71W+NdpSz374/YWH3v9uf6On4Za3JuRkveV8vtHcLBX/U7pds72g07ajar5xLovYcZyZCSf/FIJjHy3Xr1356dd9JZcirg6+SNioAwAAAAAAAAAAAAAAAAAA7omhz4oXig/7zuxV9dSz058ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw7g7//PxRsjbXsJ/irHeNdldWNZsTR+71MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+5/4JAAD//5bCao8=")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")

38.931481786s ago: executing program 9 (id=749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000002480)={@void, @void, @eth={@broadcast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x18, 0x58, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0xad}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x2, 0x2, 0x0, 0x0, 0x2, 0x5}, 0x2, {0x8, 0x8, 0x0, 0x18, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x6e)

38.886973827s ago: executing program 37 (id=749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000002480)={@void, @void, @eth={@broadcast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x18, 0x58, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0xad}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x2, 0x2, 0x0, 0x0, 0x2, 0x5}, 0x2, {0x8, 0x8, 0x0, 0x18, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x6e)

38.747414011s ago: executing program 8 (id=754):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x28}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

38.336174175s ago: executing program 8 (id=757):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3)

38.317483665s ago: executing program 38 (id=757):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3)

23.859937723s ago: executing program 5 (id=861):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
pipe(&(0x7f0000000440))
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0x1015, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

23.682010589s ago: executing program 5 (id=863):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = getpid()
process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010105}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

23.34559449s ago: executing program 5 (id=867):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0xfdef)

22.873438675s ago: executing program 5 (id=875):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

22.804811527s ago: executing program 5 (id=878):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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")
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24002040)
set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x178)

22.575732404s ago: executing program 5 (id=883):
socket(0x10, 0x803, 0x0)
timerfd_settime(0xffffffffffffffff, 0xca9a3b, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
poll(0x0, 0x0, 0x9)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1)

22.534057226s ago: executing program 39 (id=883):
socket(0x10, 0x803, 0x0)
timerfd_settime(0xffffffffffffffff, 0xca9a3b, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
poll(0x0, 0x0, 0x9)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1)

2.143586362s ago: executing program 1 (id=1102):
r0 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd)
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)

1.946810008s ago: executing program 1 (id=1104):
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.843755361s ago: executing program 1 (id=1105):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000001c0))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.686588126s ago: executing program 4 (id=1109):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @IFLA_VTI_REMOTE={0xffffffffffffffb9, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x885}, 0x0)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x11, 0x1, @thr={&(0x7f0000000200)="164b606e67a7b7f373de8eb6580cae301f0035254d881bdd7298b9a5f2c85f03cd11fe", &(0x7f0000000780)="05358c445d22c18edd55f424fcbb3b61fd3f9218fe1282ad1603697818277508f7a613ba0d44cc604d172bbb289e98fd6794f33cb2cc61ff6ffccca2154167b19c7e8b08a9cf0ea3af6e445a03a0cfdaa80cf0622e654792d49afc7bebab0c18fe06f89aa3ff9dc12955186359ff33fa9aec09adb31100760b2750073a2384c335ac8663a175b8189dd6489c8052b6001cad865a5222fbc20243e96a58b40c5dc3593065e7900b507ef6e22c2bc092c9108c14ce4da26d3ae97b4c6f88596978f6011859201b09e20c1d990127d38a6185559c5dfb536f4ffe53e4ffb93978904a755041daa08652ac856c2bbc387a6bea93"}}, &(0x7f0000000300)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f00000001c0))
timer_gettime(r4, &(0x7f0000000240))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x19)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$tun(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x44}, 0x20008041)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0x8}}, './file0\x00'})
getsockopt$WPAN_WANTLQI(r11, 0x0, 0x3, 0x0, &(0x7f0000000140))
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002dbd7000fbdbdf2502001000000000040f0000000500130001000000080002007f0000010c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="94444e540246f05b266539b62cca2025914132881c4d6d20a3d40ef5f9c68957455df9f6dfceb8d6fbe376b8d727f4c8b9e6bc5e961c5dc5f1b5619851b27bf100e73b85323f8ff41e17ddf5beec98b0"], 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280))
write$UHID_INPUT(r7, &(0x7f0000001840)={0x8, {"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", 0x1000}}, 0x1006)

1.513086122s ago: executing program 1 (id=1110):
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1320000, 0x1000}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = syz_open_dev$loop(0x0, 0x30000000000000, 0x241)
ioctl$BLKRESETZONE(r2, 0x40101283, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)

1.059178557s ago: executing program 3 (id=1114):
close(0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000080)=[{r0, 0x10000}], 0x1, 0x0, 0x0, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}])
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x1900, &(0x7f0000000000)={0x0, 0x8e, 0x0, {r2}}, 0x20)

1.032986547s ago: executing program 1 (id=1115):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x30000, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x7, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r3=>r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40)

981.193419ms ago: executing program 4 (id=1117):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001054104000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

980.568479ms ago: executing program 1 (id=1118):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0x7], 0x4}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0x7], 0x4}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)

895.876762ms ago: executing program 3 (id=1121):
syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @loopback, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35d}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8)

818.141224ms ago: executing program 4 (id=1122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@get={0x1, 0x0, 0x3})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3abb87518784cda676", 0x9}], 0x1}}], 0x400015b, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

816.452444ms ago: executing program 3 (id=1123):
mount(0x0, 0x0, &(0x7f0000000040)='zonefs\x00', 0x204001, 0x0)
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x2000000, &(0x7f0000000300), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

639.66521ms ago: executing program 7 (id=1124):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000080)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$TCSETSW2(r2, 0x5437, 0x0)

620.15754ms ago: executing program 4 (id=1125):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC=r0, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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")
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x6b, 0x78, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r2, 0x0, 0xe3aa6ea)

599.371021ms ago: executing program 3 (id=1126):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x2400000001, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg(r1, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000000b00)="af1a92e51f8306adb6eeed5b74", 0xd}], 0x1}}], 0x1, 0x0)

526.388803ms ago: executing program 3 (id=1127):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @IFLA_VTI_REMOTE={0xffffffffffffffb9, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x885}, 0x0)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x11, 0x1, @thr={&(0x7f0000000200)="164b606e67a7b7f373de8eb6580cae301f0035254d881bdd7298b9a5f2c85f03cd11fe", &(0x7f0000000780)="05358c445d22c18edd55f424fcbb3b61fd3f9218fe1282ad1603697818277508f7a613ba0d44cc604d172bbb289e98fd6794f33cb2cc61ff6ffccca2154167b19c7e8b08a9cf0ea3af6e445a03a0cfdaa80cf0622e654792d49afc7bebab0c18fe06f89aa3ff9dc12955186359ff33fa9aec09adb31100760b2750073a2384c335ac8663a175b8189dd6489c8052b6001cad865a5222fbc20243e96a58b40c5dc3593065e7900b507ef6e22c2bc092c9108c14ce4da26d3ae97b4c6f88596978f6011859201b09e20c1d990127d38a6185559c5dfb536f4ffe53e4ffb93978904a755041daa08652ac856c2bbc387a6bea93"}}, &(0x7f0000000300)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f00000001c0))
timer_gettime(r4, &(0x7f0000000240))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x19)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$tun(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x44}, 0x20008041)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0x8}}, './file0\x00'})
getsockopt$WPAN_WANTLQI(r11, 0x0, 0x3, 0x0, &(0x7f0000000140))
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002dbd7000fbdbdf2502001000000000040f0000000500130001000000080002007f0000010c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="94444e540246f05b266539b62cca2025914132881c4d6d20a3d40ef5f9c68957455df9f6dfceb8d6fbe376b8d727f4c8b9e6bc5e961c5dc5f1b5619851b27bf100e73b85323f8ff41e17ddf5beec98b0"], 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280))
write$UHID_INPUT(r7, &(0x7f0000001840)={0x8, {"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", 0x1000}}, 0x1006)

522.899483ms ago: executing program 7 (id=1128):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x802)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

488.812075ms ago: executing program 4 (id=1129):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002700), 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x9}}, 0x20)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

419.004407ms ago: executing program 4 (id=1130):
unshare(0x2040400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
socket(0x40000000015, 0x5, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x28, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)

418.624667ms ago: executing program 3 (id=1131):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

410.705937ms ago: executing program 7 (id=1132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffe0, 0xb}, {0xfff3, 0xfff1}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x8000)

353.883879ms ago: executing program 7 (id=1133):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x3)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
mknod(0x0, 0x604e55e962254ecf, 0x10001)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x1fffc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0)

287.897401ms ago: executing program 2 (id=1134):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4055)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x3, 0x1f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x24000807)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

287.591321ms ago: executing program 7 (id=1135):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bind(0x0, 0x0, 0x0, 0x2151090, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

266.556541ms ago: executing program 2 (id=1136):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x1000, 0x2, 0xdffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0x3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
mount$bpf(0x20000000f0ff, 0x0, 0x0, 0x40, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

184.239284ms ago: executing program 2 (id=1137):
r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
fchdir(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[], 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)

183.747864ms ago: executing program 2 (id=1138):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@nodioread_nolock}, {@noquota}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@data_err_ignore}, {@nodiscard}, {@mb_optimize_scan}, {@data_err_ignore}]}, 0x1, 0x5ba, &(0x7f0000002480)="$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")
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x9)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="cb00", 0x2}], 0x1}, 0x49cf75490397e68f)
ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}})

149.158225ms ago: executing program 7 (id=1139):
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000018c0)={0x0, 0x1010}, 0x1, 0x0, 0x0, 0x61e8fd42fce39ba}, 0x840)
unshare(0x400)
syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_vif\x00')
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180))

47.491428ms ago: executing program 2 (id=1140):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @IFLA_VTI_REMOTE={0xffffffffffffffb9, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x885}, 0x0)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x11, 0x1, @thr={&(0x7f0000000200)="164b606e67a7b7f373de8eb6580cae301f0035254d881bdd7298b9a5f2c85f03cd11fe", &(0x7f0000000780)="05358c445d22c18edd55f424fcbb3b61fd3f9218fe1282ad1603697818277508f7a613ba0d44cc604d172bbb289e98fd6794f33cb2cc61ff6ffccca2154167b19c7e8b08a9cf0ea3af6e445a03a0cfdaa80cf0622e654792d49afc7bebab0c18fe06f89aa3ff9dc12955186359ff33fa9aec09adb31100760b"}}, &(0x7f0000000300)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f00000001c0))
timer_gettime(r4, &(0x7f0000000240))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x19)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$tun(r7, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, 0x0, 0x20008041)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xb8}}, 0x0)

0s ago: executing program 2 (id=1141):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118)

kernel console output (not intermixed with test programs):


[   95.098079][ T6087] syz.7.717: attempt to access beyond end of device
[   95.098079][ T6087] loop7: rw=2049, sector=153, nr_sectors = 1 limit=128
[   95.111817][ T6087] Buffer I/O error on dev loop7, logical block 153, lost async page write
[   95.122414][ T6116] can0 (unregistered): slcan off ttyS3.
[   95.155080][   T36] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   95.370980][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   95.370998][   T28] audit: type=1400 audit(1782071763.561:668): avc:  denied  { write } for  pid=6102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.428119][   T28] audit: type=1400 audit(1782071763.601:669): avc:  denied  { write } for  pid=6130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.512854][ T6141] loop9: detected capacity change from 0 to 512
[   95.541572][ T6141] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.726: inode has both inline data and extents flags
[   95.578478][ T6141] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   95.578696][ T6141] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.726: couldn't read orphan inode 15 (err -117)
[   95.587908][    C0] EXT4-fs (loop9): error count since last fsck: 1
[   95.587946][    C0] EXT4-fs (loop9): initial error at time 1782071763: ext4_orphan_get:1399: inode 15
[   95.587985][    C0] EXT4-fs (loop9): last error at time 1782071763: ext4_orphan_get:1399: inode 15
[   95.626985][ T6141] loop9: lost filesystem error report for type 5 error -117
[   95.627646][ T6141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.650999][   T28] audit: type=1400 audit(1782071763.841:670): avc:  denied  { write } for  pid=6139 comm="syz.9.726" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.726112][   T28] audit: type=1400 audit(1782071763.901:671): avc:  denied  { write } for  pid=6138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.750097][   T28] audit: type=1400 audit(1782071763.921:672): avc:  denied  { write } for  pid=6139 comm="syz.9.726" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.783568][   T28] audit: type=1400 audit(1782071763.921:673): avc:  denied  { mounton } for  pid=6139 comm="syz.9.726" path="/10/file0/bus" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   95.821536][   T28] audit: type=1400 audit(1782071763.971:674): avc:  denied  { write } for  pid=6156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   96.906049][ T6155] loop9: detected capacity change from 512 to 0
[   96.915553][ T6141] EXT4-fs (loop9): discard request in group:0 block:168 count:4 failed with -5
[   96.933772][ T6141] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: IO failure
[   96.942412][ T6141] EXT4-fs (loop9): I/O error while writing superblock
[   96.949442][ T6141] EXT4-fs error (device loop9): ext4_free_data:978: inode #18: block 37: comm syz.9.726: IO error syncing itable block
[   96.962425][ T6141] EXT4-fs (loop9): I/O error while writing superblock
[   97.013555][ T6141] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.726: Error while async write back metadata
[   97.027986][ T6141] EXT4-fs (loop9): I/O error while writing superblock
[   97.044606][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41)
[   97.057840][   T28] audit: type=1400 audit(1782071765.261:675): avc:  denied  { read } for  pid=6165 comm="syz.5.731" path="socket:[13776]" dev="sockfs" ino=13776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.073224][ T6141] Buffer I/O error on device loop9, logical block 41
[   97.087656][ T6141] Buffer I/O error on device loop9, logical block 42
[   97.094364][ T6141] Buffer I/O error on device loop9, logical block 43
[   97.101121][ T6141] Buffer I/O error on device loop9, logical block 44
[   97.139965][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49)
[   97.148386][   T28] audit: type=1400 audit(1782071765.261:676): avc:  denied  { shutdown } for  pid=6165 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.172516][ T6141] Buffer I/O error on device loop9, logical block 49
[   97.179245][ T6141] Buffer I/O error on device loop9, logical block 50
[   97.186014][ T6141] Buffer I/O error on device loop9, logical block 51
[   97.192725][ T6141] Buffer I/O error on device loop9, logical block 52
[   97.230970][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57)
[   97.243973][ T6141] Buffer I/O error on device loop9, logical block 57
[   97.250693][ T6141] Buffer I/O error on device loop9, logical block 58
[   97.274140][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65)
[   97.323873][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45)
[   97.342140][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53)
[   97.387974][ T5121] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   97.389747][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61)
[   97.405965][ T5121] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   97.448576][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125)
[   97.467825][ T6187] loop7: detected capacity change from 0 to 4096
[   97.490857][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161)
[   97.506557][ T6187] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   97.539072][ T6141] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201)
[   97.595796][ T5559] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz-executor: Error while async write back metadata
[   97.612289][   T28] audit: type=1400 audit(1782071765.791:677): avc:  denied  { write } for  pid=5559 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.615553][ T5559] EXT4-fs (loop9): I/O error while writing superblock
[   97.656352][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.663689][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.692217][ T5559] EXT4-fs error (device loop9): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block
[   97.726576][ T5559] EXT4-fs (loop9): I/O error while writing superblock
[   97.741033][ T5559] EXT4-fs error (device loop9) in ext4_delete_entry:2744: IO failure
[   97.757612][ T5559] EXT4-fs (loop9): I/O error while writing superblock
[   97.780131][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.805114][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.934573][   T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.945102][   T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.959423][ T6206] batadv_slave_1: entered promiscuous mode
[   97.971255][   T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.989387][   T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.024414][ T6206] batadv_slave_1: left promiscuous mode
[   98.049870][ T6208] SELinux: ebitmap: truncated map
[   98.061262][ T6208] SELinux:  invalid class
[   98.070340][ T6210] loop8: detected capacity change from 0 to 512
[   98.079025][ T6208] SELinux: failed to load policy
[   98.084539][   T36] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:5009: inode #2: block 5: comm kworker/u8:2: unable to read itable block
[   98.099417][   T36] EXT4-fs (loop9): I/O error while writing superblock
[   98.109459][ T5559] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.132655][ T6210] EXT4-fs (loop8): orphan cleanup on readonly fs
[   98.144522][ T6210] EXT4-fs (loop8): 1 orphan inode deleted
[   98.191472][ T6210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   98.211626][ T6210] EXT4-fs (loop8): shut down requested (2)
[   98.222941][ T6210] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.235048][ T6216] loop7: detected capacity change from 0 to 128
[   98.242132][ T6210] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.285438][ T6220] netlink: 'syz.5.752': attribute type 1 has an invalid length.
[   98.307331][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=11
[   98.321528][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=11
[   98.330669][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=11
[   98.348656][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=11
[   98.357738][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=11
[   98.358196][ T6220] bond1: entered promiscuous mode
[   98.368267][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=11
[   98.381398][ T6220] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.388253][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.403972][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.416312][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.425914][ T6220] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.441147][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.444257][ T6220] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   98.460400][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.460665][ T6220] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   98.473596][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.489445][ T5405] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[   98.508761][ T6220] bond1: (slave vti0): making interface the new active one
[   98.525357][ T6220] vti0: entered promiscuous mode
[   98.532949][ T5940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.542004][ T6220] bond1: (slave vti0): Enslaving as an active interface with an up link
[   98.743845][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.883985][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.074085][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.104006][ T6271] nftables ruleset with unbound chain
[   99.315761][ T6277] loop5: detected capacity change from 0 to 512
[   99.322782][ T6277] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.516262][ T6277] EXT4-fs (loop5): orphan cleanup on readonly fs
[   99.522739][ T6277] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   99.535357][ T6277] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.761: attempt to clear invalid blocks 2 len 1
[   99.548241][ T6277] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.550473][ T6277] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, 
[   99.559637][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   99.559656][    C0] EXT4-fs (loop5): initial error at time 1782071767: ext4_clear_blocks:876: inode 13
[   99.559689][    C0] EXT4-fs (loop5): last error at time 1782071767: ext4_clear_blocks:876: inode 13
[   99.593128][ T6277] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   99.601537][ T6277] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.761: invalid indirect mapped block 1819239214 (level 0)
[   99.615422][ T6277] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.620687][ T6277] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.761: invalid indirect mapped block 1819239214 (level 1)
[   99.644462][ T6277] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.653380][ T6277] EXT4-fs (loop5): 1 truncate cleaned up
[   99.669173][ T6277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.682648][ T6277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.704792][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.158829][ T6287] loop1: detected capacity change from 0 to 4096
[  100.231335][ T6287] EXT4-fs: Ignoring removed orlov option
[  100.296979][ T6287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.325545][ T6287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.390893][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  100.390912][   T28] audit: type=1400 audit(1782071768.581:683): avc:  denied  { write } for  pid=6286 comm="syz.1.764" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  100.485266][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.505677][   T28] audit: type=1400 audit(1782071768.631:684): avc:  denied  { write } for  pid=6282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.596405][   T28] audit: type=1400 audit(1782071768.731:685): avc:  denied  { write } for  pid=6310 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.645862][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.655978][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.663472][ T6260] bridge_slave_0: entered allmulticast mode
[  100.670168][ T6260] bridge_slave_0: entered promiscuous mode
[  100.677347][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.687990][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.695723][ T6260] bridge_slave_1: entered allmulticast mode
[  100.702592][ T6260] bridge_slave_1: entered promiscuous mode
[  100.721027][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.732272][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.753482][ T6260] team0: Port device team_slave_0 added
[  100.760230][ T6260] team0: Port device team_slave_1 added
[  100.781281][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.788472][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.814879][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.826428][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.833753][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.860049][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.891522][ T6260] hsr_slave_0: entered promiscuous mode
[  100.897851][ T6260] hsr_slave_1: entered promiscuous mode
[  100.903980][ T6260] debugfs: 'hsr0' already exists in 'hsr'
[  100.909875][ T6260] Cannot create hsr debugfs directory
[  101.015572][   T12] bridge_slave_1: left allmulticast mode
[  101.024257][   T12] bridge_slave_1: left promiscuous mode
[  101.038921][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.089462][   T12] bridge_slave_0: left allmulticast mode
[  101.112334][   T12] bridge_slave_0: left promiscuous mode
[  101.128081][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.197257][ T6340] loop5: detected capacity change from 0 to 128
[  101.206324][   T28] audit: type=1400 audit(1782071769.381:686): avc:  denied  { write } for  pid=6323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  101.246296][ T6340] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  101.253282][   T28] audit: type=1400 audit(1782071769.421:687): avc:  denied  { write } for  pid=6341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  101.290489][ T6340] bio_check_eod: 28 callbacks suppressed
[  101.290527][ T6340] syz.5.770: attempt to access beyond end of device
[  101.290527][ T6340] loop5: rw=2049, sector=135, nr_sectors = 1 limit=128
[  101.309969][ T6340] buffer_io_error: 38 callbacks suppressed
[  101.309983][ T6340] Buffer I/O error on dev loop5, logical block 135, lost async page write
[  101.324663][ T6340] syz.5.770: attempt to access beyond end of device
[  101.324663][ T6340] loop5: rw=2049, sector=136, nr_sectors = 1 limit=128
[  101.338848][ T6340] Buffer I/O error on dev loop5, logical block 136, lost async page write
[  101.349402][ T6340] syz.5.770: attempt to access beyond end of device
[  101.349402][ T6340] loop5: rw=2049, sector=137, nr_sectors = 1 limit=128
[  101.363691][ T6340] Buffer I/O error on dev loop5, logical block 137, lost async page write
[  101.372463][ T6340] syz.5.770: attempt to access beyond end of device
[  101.372463][ T6340] loop5: rw=2049, sector=138, nr_sectors = 1 limit=128
[  101.386098][ T6340] Buffer I/O error on dev loop5, logical block 138, lost async page write
[  101.395367][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'.
[  101.396305][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.404374][ T6340] syz.5.770: attempt to access beyond end of device
[  101.404374][ T6340] loop5: rw=2049, sector=139, nr_sectors = 1 limit=128
[  101.426867][ T6340] Buffer I/O error on dev loop5, logical block 139, lost async page write
[  101.435877][ T6340] syz.5.770: attempt to access beyond end of device
[  101.435877][ T6340] loop5: rw=2049, sector=140, nr_sectors = 1 limit=128
[  101.437734][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.460660][ T6340] Buffer I/O error on dev loop5, logical block 140, lost async page write
[  101.469455][ T6340] syz.5.770: attempt to access beyond end of device
[  101.469455][ T6340] loop5: rw=2049, sector=141, nr_sectors = 1 limit=128
[  101.483155][ T6340] Buffer I/O error on dev loop5, logical block 141, lost async page write
[  101.491798][ T6340] syz.5.770: attempt to access beyond end of device
[  101.491798][ T6340] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128
[  101.505623][ T6340] Buffer I/O error on dev loop5, logical block 143, lost async page write
[  101.509156][   T12] bond0 (unregistering): Released all slaves
[  101.519345][ T6340] syz.5.770: attempt to access beyond end of device
[  101.519345][ T6340] loop5: rw=2049, sector=152, nr_sectors = 1 limit=128
[  101.534530][ T6340] Buffer I/O error on dev loop5, logical block 152, lost async page write
[  101.543282][ T6340] syz.5.770: attempt to access beyond end of device
[  101.543282][ T6340] loop5: rw=2049, sector=153, nr_sectors = 1 limit=128
[  101.557508][ T6340] Buffer I/O error on dev loop5, logical block 153, lost async page write
[  101.565197][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.576168][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.585149][ T6221] bridge_slave_0: entered allmulticast mode
[  101.591801][ T6221] bridge_slave_0: entered promiscuous mode
[  101.599815][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.607409][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.614820][ T6221] bridge_slave_1: entered allmulticast mode
[  101.621670][ T6221] bridge_slave_1: entered promiscuous mode
[  101.658688][   T12] hsr_slave_0: left promiscuous mode
[  101.677588][   T12] hsr_slave_1: left promiscuous mode
[  101.684440][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.691873][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.703573][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.705771][   T30] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  101.716525][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.743798][   T12] veth1_macvtap: left promiscuous mode
[  101.750890][ T6352] netlink: 'syz.1.772': attribute type 1 has an invalid length.
[  101.750948][   T12] veth0_macvtap: left promiscuous mode
[  101.751051][   T12] veth1_vlan: left promiscuous mode
[  101.751150][   T12] veth0_vlan: left promiscuous mode
[  101.801494][ T6357] 9p: Bad value for 'rfdno'
[  101.814784][ T6356] netlink: 64 bytes leftover after parsing attributes in process `syz.7.774'.
[  101.827860][ T6356] loop7: detected capacity change from 0 to 512
[  101.845612][ T6356] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  101.857330][ T6356] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.774: invalid indirect mapped block 9 (level 0)
[  101.877444][ T6356] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  101.878128][ T6356] EXT4-fs (loop7): 1 truncate cleaned up
[  101.887454][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  101.887474][    C0] EXT4-fs (loop7): initial error at time 1782071770: ext4_free_branches:1023: inode 11
[  101.887506][    C0] EXT4-fs (loop7): last error at time 1782071770: ext4_free_branches:1023: inode 11
[  101.920025][ T6356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.947259][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.956683][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.964868][   T12] team0 (unregistering): Port device team_slave_1 removed
[  101.975667][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.988478][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.157219][ T6352] bond2: entered promiscuous mode
[  102.171485][ T6352] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.195632][ T6360] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.211289][   T28] audit: type=1400 audit(1782071770.401:688): avc:  denied  { write } for  pid=6367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.238185][ T6360] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  102.251905][ T6360] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  102.263643][ T6360] bond2: (slave vti0): making interface the new active one
[  102.271041][ T6360] vti0: entered promiscuous mode
[  102.278163][ T6360] bond2: (slave vti0): Enslaving as an active interface with an up link
[  102.288531][   T28] audit: type=1400 audit(1782071770.491:689): avc:  denied  { write } for  pid=6379 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.324770][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.346718][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.377746][ T6221] team0: Port device team_slave_0 added
[  102.384884][ T6221] team0: Port device team_slave_1 added
[  102.429913][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.442602][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.485751][ T6392] loop7: detected capacity change from 0 to 512
[  102.496941][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.513397][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.521286][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.548011][ T6392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  102.563421][ T6398] loop5: detected capacity change from 0 to 128
[  102.578160][ T6392] EXT4-fs (loop7): 1 truncate cleaned up
[  102.599819][ T6398] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  102.609787][   T28] audit: type=1400 audit(1782071770.791:690): avc:  denied  { write } for  pid=6386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.639224][ T6392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.657937][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.670277][   T28] audit: type=1400 audit(1782071770.831:691): avc:  denied  { write } for  pid=6403 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.703112][   T28] audit: type=1400 audit(1782071770.891:692): avc:  denied  { write } for  pid=6391 comm="syz.7.780" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  102.751297][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'.
[  102.762275][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.776122][ T6221] hsr_slave_0: entered promiscuous mode
[  102.782976][ T6221] hsr_slave_1: entered promiscuous mode
[  102.789386][ T6221] debugfs: 'hsr0' already exists in 'hsr'
[  102.795635][ T6221] Cannot create hsr debugfs directory
[  102.850023][ T5584] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  102.873390][ T6260] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.907051][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.922453][ T6260] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.931977][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.963345][ T6260] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.984447][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.000093][ T6260] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.011132][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.073021][ T6432] loop7: detected capacity change from 0 to 128
[  103.128964][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.167735][ T6260] 8021q: adding VLAN 0 to HW filter on device team0
[  103.194968][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.202107][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.228067][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.235200][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.290664][ T6260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.365759][ T6221] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.397240][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.416619][ T6221] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.461036][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.482859][ T6221] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.507137][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.535478][ T6221] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.621570][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.739982][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.764381][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.783801][ T6221] 8021q: adding VLAN 0 to HW filter on device team0
[  103.798392][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.805539][ T5584] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.849118][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.856244][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.974736][ T6260] veth0_vlan: entered promiscuous mode
[  103.984463][ T6260] veth1_vlan: entered promiscuous mode
[  104.015925][ T6260] veth0_macvtap: entered promiscuous mode
[  104.030177][ T6260] veth1_macvtap: entered promiscuous mode
[  104.075574][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.100888][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.122154][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.133457][ T5584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.149267][ T5584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.182474][ T5584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.221439][ T5584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.265816][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.328678][ T6526] loop1: detected capacity change from 0 to 512
[  104.367239][ T6526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.388405][ T6525] can0: slcan on ttyS3.
[  104.481657][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.517772][ T6221] veth0_vlan: entered promiscuous mode
[  104.566200][ T6221] veth1_vlan: entered promiscuous mode
[  104.582906][ T6552] loop1: detected capacity change from 0 to 512
[  104.609231][ T6551] netlink: 100 bytes leftover after parsing attributes in process `syz.2.799'.
[  104.624365][ T6552] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.656710][ T6525] loop7: detected capacity change from 0 to 4096
[  104.665256][ T6221] veth0_macvtap: entered promiscuous mode
[  104.674476][ T6552] EXT4-fs (loop1): 1 truncate cleaned up
[  104.685438][ T6525] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.694227][ T6552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.709849][ T6221] veth1_macvtap: entered promiscuous mode
[  104.714801][ T6525] EXT4-fs: Ignoring removed i_version option
[  104.723671][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21
[  104.734357][ T6525] EXT4-fs (loop7): cluster size (1024) smaller than block size (4096)
[  104.775232][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.831106][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.832797][ T6525] can0 (unregistered): slcan off ttyS3.
[  104.887823][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.916724][  T354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.937172][  T354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.973519][  T354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.987326][  T354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.312316][ T6595] loop7: detected capacity change from 0 to 512
[  105.318886][ T6595] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.327764][ T6595] EXT4-fs (loop7): orphan cleanup on readonly fs
[  105.334214][ T6595] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  105.343248][ T6595] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.803: attempt to clear invalid blocks 2 len 1
[  105.356097][ T6595] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  105.356607][ T6595] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, 
[  105.365892][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  105.365922][    C1] EXT4-fs (loop7): initial error at time 1782071773: ext4_clear_blocks:876: inode 13
[  105.365953][    C1] EXT4-fs (loop7): last error at time 1782071773: ext4_clear_blocks:876: inode 13
[  105.399477][ T6595] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  105.408201][ T6595] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.803: invalid indirect mapped block 1819239214 (level 0)
[  105.422081][ T6595] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  105.425824][ T6595] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.803: invalid indirect mapped block 1819239214 (level 1)
[  105.448873][ T6595] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  105.449717][ T6595] EXT4-fs (loop7): 1 truncate cleaned up
[  105.465040][ T6595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.478051][ T6595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.509785][   T28] kauditd_printk_skb: 21 callbacks suppressed
[  105.509804][   T28] audit: type=1400 audit(1782071773.701:714): avc:  denied  { write } for  pid=6597 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  105.749682][   T28] audit: type=1400 audit(1782071773.941:715): avc:  denied  { write } for  pid=6600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  105.845438][   T28] audit: type=1400 audit(1782071774.021:716): avc:  denied  { write } for  pid=6614 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.259080][   T28] audit: type=1400 audit(1782071774.451:717): avc:  denied  { write } for  pid=6620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.353667][   T28] audit: type=1400 audit(1782071774.551:718): avc:  denied  { write } for  pid=6642 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.405330][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.811'.
[  106.433448][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  106.760049][   T28] audit: type=1400 audit(1782071774.951:719): avc:  denied  { write } for  pid=6649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.873300][ T6681] loop3: detected capacity change from 0 to 512
[  106.879889][ T6681] EXT4-fs: Ignoring removed mblk_io_submit option
[  106.887796][ T6681] EXT4-fs (loop3): orphan cleanup on readonly fs
[  106.894401][ T6681] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  106.903089][ T6681] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.816: attempt to clear invalid blocks 2 len 1
[  106.915854][ T6681] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  106.916460][ T6681] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, 
[  106.925653][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  106.925669][    C0] EXT4-fs (loop3): initial error at time 1782071775: ext4_clear_blocks:876: inode 13
[  106.925708][    C0] EXT4-fs (loop3): last error at time 1782071775: ext4_clear_blocks:876: inode 13
[  106.959218][ T6681] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  106.967652][ T6681] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.816: invalid indirect mapped block 1819239214 (level 0)
[  106.981656][ T6681] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  106.985692][ T6681] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.816: invalid indirect mapped block 1819239214 (level 1)
[  107.008777][ T6681] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  107.009622][ T6681] EXT4-fs (loop3): 1 truncate cleaned up
[  107.028540][   T28] audit: type=1400 audit(1782071775.221:720): avc:  denied  { create } for  pid=6684 comm="syz.7.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  107.049627][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.093650][ T6681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.131638][   T28] audit: type=1400 audit(1782071775.321:721): avc:  denied  { write } for  pid=6685 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.188617][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22
[  107.439696][ T6687] loop1: detected capacity change from 0 to 512
[  107.469108][   T28] audit: type=1400 audit(1782071775.661:722): avc:  denied  { write } for  pid=6692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.583310][   T28] audit: type=1400 audit(1782071775.741:723): avc:  denied  { write } for  pid=6703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.631155][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23
[  107.806139][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.851179][ T6709] loop3: detected capacity change from 0 to 512
[  107.867382][ T6687] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.885097][ T6709] EXT4-fs: Ignoring removed bh option
[  107.914877][ T6709] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.825: corrupted in-inode xattr: e_value size too large
[  107.932380][ T6709] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  107.934519][ T6709] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.825: couldn't read orphan inode 15 (err -117)
[  107.943810][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  107.943857][    C0] EXT4-fs (loop3): initial error at time 1782071776: ext4_iget_extra_inode:5180: inode 15
[  107.943990][    C0] EXT4-fs (loop3): last error at time 1782071776: ext4_iget_extra_inode:5180: inode 15
[  108.079703][ T6687] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.821: corrupted inode contents
[  108.116685][ T6709] loop3: lost filesystem error report for type 5 error -117
[  108.120277][ T6709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.148674][ T6687] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz.1.821: mark_inode_dirty error
[  108.189630][ T6687] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.821: corrupted inode contents
[  108.283495][ T6709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.295175][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.426241][ T6737] loop3: detected capacity change from 0 to 4096
[  108.436971][ T6745] loop7: detected capacity change from 0 to 512
[  108.443959][ T6745] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.471217][ T6745] EXT4-fs (loop7): orphan cleanup on readonly fs
[  108.477790][ T6745] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  108.489422][ T6745] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.826: attempt to clear invalid blocks 2 len 1
[  108.502322][ T6745] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.504864][ T6745] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, 
[  108.510706][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.514061][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  108.514083][    C1] EXT4-fs (loop7): initial error at time 1782071776: ext4_clear_blocks:876: inode 13
[  108.514109][    C1] EXT4-fs (loop7): last error at time 1782071776: ext4_clear_blocks:876: inode 13
[  108.560137][ T6745] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  108.568632][ T6745] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.826: invalid indirect mapped block 1819239214 (level 0)
[  108.582581][ T6745] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.583054][ T6745] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.826: invalid indirect mapped block 1819239214 (level 1)
[  108.606690][ T6745] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.608174][ T6745] EXT4-fs (loop7): 1 truncate cleaned up
[  108.623706][ T6745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  108.636742][ T6745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.711215][ T6755] loop2: detected capacity change from 0 to 1024
[  108.742519][ T6755] EXT4-fs: Ignoring removed bh option
[  108.749112][ T6221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.777412][ T6755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.071349][ T6260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.126986][ T6795] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  109.199560][ T6795] bio_check_eod: 110 callbacks suppressed
[  109.199583][ T6795] syz.2.837: attempt to access beyond end of device
[  109.199583][ T6795] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128
[  109.233363][ T6795] buffer_io_error: 110 callbacks suppressed
[  109.233383][ T6795] Buffer I/O error on dev loop2, logical block 135, lost async page write
[  109.272831][ T6795] syz.2.837: attempt to access beyond end of device
[  109.272831][ T6795] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128
[  109.297702][ T6795] Buffer I/O error on dev loop2, logical block 136, lost async page write
[  109.316176][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[  109.335181][ T6795] syz.2.837: attempt to access beyond end of device
[  109.335181][ T6795] loop2: rw=2049, sector=137, nr_sectors = 1 limit=128
[  109.367839][ T6795] Buffer I/O error on dev loop2, logical block 137, lost async page write
[  109.381093][ T6795] syz.2.837: attempt to access beyond end of device
[  109.381093][ T6795] loop2: rw=2049, sector=138, nr_sectors = 1 limit=128
[  109.430097][ T6795] Buffer I/O error on dev loop2, logical block 138, lost async page write
[  109.453608][ T6795] syz.2.837: attempt to access beyond end of device
[  109.453608][ T6795] loop2: rw=2049, sector=139, nr_sectors = 1 limit=128
[  109.490724][ T6796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.521522][ T6795] Buffer I/O error on dev loop2, logical block 139, lost async page write
[  109.546290][ T6795] syz.2.837: attempt to access beyond end of device
[  109.546290][ T6795] loop2: rw=2049, sector=140, nr_sectors = 1 limit=128
[  109.562086][ T6796] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.589300][ T6795] Buffer I/O error on dev loop2, logical block 140, lost async page write
[  109.598108][ T6795] syz.2.837: attempt to access beyond end of device
[  109.598108][ T6795] loop2: rw=2049, sector=141, nr_sectors = 1 limit=128
[  109.641700][ T6795] Buffer I/O error on dev loop2, logical block 141, lost async page write
[  109.658165][ T6796] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.838: corrupted inode contents
[  109.682267][ T6795] syz.2.837: attempt to access beyond end of device
[  109.682267][ T6795] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128
[  109.682315][ T6795] Buffer I/O error on dev loop2, logical block 143, lost async page write
[  109.682367][ T6795] syz.2.837: attempt to access beyond end of device
[  109.682367][ T6795] loop2: rw=2049, sector=152, nr_sectors = 1 limit=128
[  109.682398][ T6795] Buffer I/O error on dev loop2, logical block 152, lost async page write
[  109.682421][ T6795] syz.2.837: attempt to access beyond end of device
[  109.682421][ T6795] loop2: rw=2049, sector=153, nr_sectors = 1 limit=128
[  109.682459][ T6795] Buffer I/O error on dev loop2, logical block 153, lost async page write
[  109.772364][ T6796] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #2: comm syz.7.838: mark_inode_dirty error
[  109.804190][  T354] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  109.907333][ T6796] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.838: corrupted inode contents
[  109.920294][ T6844] set_capacity_and_notify: 2 callbacks suppressed
[  109.920315][ T6844] loop1: detected capacity change from 0 to 512
[  110.056595][ T6844] ------------[ cut here ]------------
[  110.062177][ T6844] EA inode 11 i_nlink=2
[  110.062246][ T6844] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.1.845/6844
[  110.077125][ T6844] Modules linked in:
[  110.081144][ T6844] CPU: 1 UID: 0 PID: 6844 Comm: syz.1.845 Not tainted syzkaller #0 PREEMPT(lazy) 
[  110.090435][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  110.100565][ T6844] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330
[  110.107246][ T6844] Code: 96 dc 96 ff 49 8d 7e 40 4c 8d 2d 5b a0 5a 05 e8 46 b6 b5 ff 49 8b 6e 40 4c 89 e7 e8 7a b1 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 e1 8f d8 03 90 90 90 90 90 90 90
[  110.127000][ T6844] RSP: 0018:ffffc9000220b7f8 EFLAGS: 00010246
[  110.133135][ T6844] RAX: ffff888104720b30 RBX: ffff888106f209d0 RCX: ffffffff81c28e86
[  110.141153][ T6844] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d2ed0
[  110.149192][ T6844] RBP: 000000000000000b R08: 0001888106f20983 R09: 0000000000000000
[  110.157241][ T6844] R10: ffffc9000220b728 R11: 0001c9000220b728 R12: ffff888106f20980
[  110.165281][ T6844] R13: ffffffff871d2ed0 R14: ffff888106f20938 R15: 0000000000000001
[  110.173369][ T6844] FS:  00007f7e63a8e6c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000
[  110.182372][ T6844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.189000][ T6844] CR2: 000000110c25bc55 CR3: 000000011b6e2000 CR4: 00000000003506f0
[  110.197105][ T6844] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  110.205183][ T6844] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  110.213218][ T6844] Call Trace:
[  110.216548][ T6844]  <TASK>
[  110.219518][ T6844]  ext4_xattr_inode_dec_ref_all+0x579/0x8d0
[  110.225573][ T6844]  ext4_xattr_delete_inode+0x6b5/0x790
[  110.231215][ T6844]  ext4_evict_inode+0xb18/0xdf0
[  110.236177][ T6844]  ? __pfx_ext4_evict_inode+0x10/0x10
[  110.241588][ T6844]  evict+0x2a5/0x510
[  110.245641][ T6844]  ? iput+0x1c3/0x5a0
[  110.249919][ T6844]  iput+0x430/0x5a0
[  110.253817][ T6844]  ext4_process_orphan+0x1a4/0x1c0
[  110.258981][ T6844]  ext4_orphan_cleanup+0x6a6/0xa10
[  110.264193][ T6844]  ? ext4_register_li_request+0x14c/0x440
[  110.269973][ T6844]  ext4_fill_super+0x33d2/0x3780
[  110.275016][ T6844]  ? set_blocksize+0x14c/0x270
[  110.279825][ T6844]  ? __pfx_ext4_fill_super+0x10/0x10
[  110.285410][ T6844]  get_tree_bdev_flags+0x291/0x300
[  110.290686][ T6844]  ? __pfx_ext4_fill_super+0x10/0x10
[  110.296110][ T6844]  get_tree_bdev+0x1f/0x30
[  110.300570][ T6844]  ext4_get_tree+0x1c/0x30
[  110.305070][ T6844]  vfs_get_tree+0x57/0x1d0
[  110.309602][ T6844]  do_new_mount+0x288/0x8d0
[  110.314208][ T6844]  path_mount+0x4ad/0xb90
[  110.318637][ T6844]  __se_sys_mount+0x28c/0x2e0
[  110.323391][ T6844]  __x64_sys_mount+0x67/0x80
[  110.328029][ T6844]  x64_sys_call+0x2d61/0x3020
[  110.332814][ T6844]  do_syscall_64+0x136/0x3c0
[  110.337461][ T6844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.343460][ T6844] RIP: 0033:0x7f7e6505e0ca
[  110.347907][ T6844] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.367691][ T6844] RSP: 002b:00007f7e63a8de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  110.376234][ T6844] RAX: ffffffffffffffda RBX: 00007f7e63a8dee0 RCX: 00007f7e6505e0ca
[  110.384318][ T6844] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f7e63a8dea0
[  110.392513][ T6844] RBP: 00002000000009c0 R08: 00007f7e63a8dee0 R09: 0000000000800718
[  110.400526][ T6844] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  110.408562][ T6844] R13: 00007f7e63a8dea0 R14: 000000000000048d R15: 0000200000000200
[  110.416638][ T6844]  </TASK>
[  110.419683][ T6844] ---[ end trace 0000000000000000 ]---
[  110.443696][ T6844] EXT4-fs (loop1): 1 orphan inode deleted
[  110.449873][ T6844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.606793][ T6859] loop3: detected capacity change from 0 to 512
[  110.613407][ T6859] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.622489][ T6859] EXT4-fs (loop3): orphan cleanup on readonly fs
[  110.628884][ T6859] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  110.639176][ T6859] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.846: attempt to clear invalid blocks 2 len 1
[  110.651949][ T6859] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  110.652049][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  110.667621][    C1] EXT4-fs (loop3): initial error at time 1782071778: ext4_clear_blocks:876: inode 13
[  110.677144][    C1] EXT4-fs (loop3): last error at time 1782071778: ext4_clear_blocks:876: inode 13
[  110.689868][ T6859] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  110.704275][ T6859] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.846: invalid indirect mapped block 1819239214 (level 0)
[  110.718299][ T6859] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  110.719353][ T6859] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.846: invalid indirect mapped block 1819239214 (level 1)
[  110.742380][ T6859] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  110.743027][ T6859] EXT4-fs (loop3): 1 truncate cleaned up
[  110.758421][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.771471][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.387679][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  111.387698][   T28] audit: type=1400 audit(1782071779.581:739): avc:  denied  { write } for  pid=6855 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.450052][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.625056][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.681569][   T28] audit: type=1400 audit(1782071779.871:740): avc:  denied  { write } for  pid=6862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.751379][   T28] audit: type=1400 audit(1782071779.941:741): avc:  denied  { write } for  pid=6877 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.928977][   T28] audit: type=1400 audit(1782071780.121:742): avc:  denied  { write } for  pid=6879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.986786][   T28] audit: type=1400 audit(1782071780.181:743): avc:  denied  { write } for  pid=6890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  112.276627][ T6905] loop1: detected capacity change from 0 to 512
[  112.283305][ T6905] EXT4-fs: Ignoring removed mblk_io_submit option
[  112.297414][ T6905] EXT4-fs (loop1): orphan cleanup on readonly fs
[  112.303902][ T6905] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  112.314251][ T6905] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.848: attempt to clear invalid blocks 2 len 1
[  112.327029][ T6905] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  112.332121][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  112.348658][    C1] EXT4-fs (loop1): initial error at time 1782071780: ext4_clear_blocks:876: inode 13
[  112.359356][    C1] EXT4-fs (loop1): last error at time 1782071780: ext4_clear_blocks:876: inode 13
[  112.376911][ T6905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  112.391401][ T6905] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.848: invalid indirect mapped block 1819239214 (level 0)
[  112.405300][ T6905] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  112.405725][ T6905] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.848: invalid indirect mapped block 1819239214 (level 1)
[  112.428790][ T6905] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  112.430176][ T6905] EXT4-fs (loop1): 1 truncate cleaned up
[  112.445615][ T6905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  112.458579][ T6905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.592801][   T28] audit: type=1400 audit(1782071780.781:744): avc:  denied  { write } for  pid=6902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  112.676096][   T28] audit: type=1400 audit(1782071780.871:745): avc:  denied  { write } for  pid=6925 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  112.705190][ T6919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.852'.
[  112.807857][ T6904] loop3: detected capacity change from 0 to 512
[  112.880248][ T6904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  112.919703][ T6944] xt_hashlimit: size too large, truncated to 1048576
[  112.992763][   T28] audit: type=1400 audit(1782071781.191:746): avc:  denied  { write } for  pid=6929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.049624][ T6904] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.852: invalid indirect mapped block 9 (level 0)
[  113.072439][ T6904] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  113.082054][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  113.097779][    C1] EXT4-fs (loop3): initial error at time 1782071781: ext4_free_branches:1023: inode 11
[  113.107491][    C1] EXT4-fs (loop3): last error at time 1782071781: ext4_free_branches:1023: inode 11
[  113.118842][ T6904] EXT4-fs (loop3): 1 truncate cleaned up
[  113.132396][   T28] audit: type=1400 audit(1782071781.331:747): avc:  denied  { write } for  pid=6952 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.137909][ T6904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.249229][ T6960] loop5: detected capacity change from 0 to 512
[  113.300323][   T28] audit: type=1400 audit(1782071781.491:748): avc:  denied  { write } for  pid=6955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.335849][ T6960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.352463][ T6960] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.486580][ T4216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.522437][ T6221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.578025][ T6987] syzkaller1: entered promiscuous mode
[  113.585805][ T6987] syzkaller1: entered allmulticast mode
[  113.615617][ T6989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.689281][ T6989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.846285][ T6993] batadv1: entered promiscuous mode
[  113.853052][ T6993] batadv1: entered allmulticast mode
[  114.007956][ T7021] syzkaller0: entered promiscuous mode
[  114.038576][ T7021] syzkaller0: entered allmulticast mode
[  114.067484][ T6989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.157347][ T6989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.228427][ T7060] loop2: detected capacity change from 0 to 128
[  114.258311][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.270732][ T7060] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  114.295402][ T7060] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.305875][   T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.314194][   T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.337915][ T7066] loop7: detected capacity change from 0 to 2048
[  114.344913][ T7066] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.351555][ T7066] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.354305][   T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.384594][ T7066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.467782][ T6260] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.490024][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.678136][ T7096] loop3: detected capacity change from 0 to 1024
[  114.705246][ T7096] EXT4-fs: inline encryption not supported
[  114.734103][ T7096] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  114.766795][ T7096] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.887: lblock 2 mapped to illegal pblock 2 (length 1)
[  114.794767][ T7096] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  114.795025][ T7096] EXT4-fs (loop3): Remounting filesystem read-only
[  114.804200][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  114.804237][    C1] EXT4-fs (loop3): initial error at time 1782071782: ext4_map_blocks:791: inode 3: block 2
[  114.804285][    C1] EXT4-fs (loop3): last error at time 1782071782: ext4_map_blocks:791: inode 3: block 2
[  114.849399][ T7084] loop2: detected capacity change from 0 to 1024
[  114.857073][ T7096] EXT4-fs (loop3): 1 orphan inode deleted
[  114.872248][ T7096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.026410][ T6221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.028776][ T7084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  115.057403][ T7084] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.088071][ T6260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  115.167554][ T7138] loop7: detected capacity change from 0 to 512
[  115.178601][ T7144] loop2: detected capacity change from 0 to 256
[  115.185364][ T7144] vfat: Unknown parameter 'nnonumtail'
[  115.202676][ T7138] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  115.212939][ T7144] loop2: detected capacity change from 0 to 1024
[  115.243921][ T7144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.290454][ T7138] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.891: bad orphan inode 13
[  115.301200][ T7138] loop7: lost filesystem error report for type 5 error -117
[  115.301419][ T7138] ext4_test_bit(bit=12, block=18) = 1
[  115.302094][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  115.317479][ T6260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.320608][    C1] EXT4-fs (loop7): last error at time 1782071783: ext4_orphan_get:1425
[  115.356904][ T7138] is_bad_inode(inode)=0
[  115.363606][ T7138] NEXT_ORPHAN(inode)=0
[  115.367831][ T7138] max_ino=32
[  115.371224][ T7138] i_nlink=1
[  115.375051][ T7138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  115.432498][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  115.452197][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.452318][ T7165] loop1: detected capacity change from 0 to 1024
[  115.459482][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.473059][ T7098] bridge_slave_0: entered allmulticast mode
[  115.480021][ T7098] bridge_slave_0: entered promiscuous mode
[  115.487328][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.494502][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.501743][ T7098] bridge_slave_1: entered allmulticast mode
[  115.508273][ T7165] EXT4-fs: Ignoring removed bh option
[  115.518199][ T7098] bridge_slave_1: entered promiscuous mode
[  115.566244][ T7165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.597714][ T7173] netlink: 48 bytes leftover after parsing attributes in process `syz.7.898'.
[  115.628417][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.656121][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.678739][ T7098] team0: Port device team_slave_0 added
[  115.685489][ T7098] team0: Port device team_slave_1 added
[  115.708092][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.719794][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.746533][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.765641][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.780455][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.822632][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.884320][ T7098] hsr_slave_0: entered promiscuous mode
[  115.890484][ T7098] hsr_slave_1: entered promiscuous mode
[  115.896757][ T7098] debugfs: 'hsr0' already exists in 'hsr'
[  115.902823][ T7098] Cannot create hsr debugfs directory
[  115.948337][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.186033][ T7221] syzkaller0: entered promiscuous mode
[  116.197086][ T7221] syzkaller0: entered allmulticast mode
[  116.261178][ T7244] loop7: detected capacity change from 0 to 512
[  116.459103][ T7249] loop2: detected capacity change from 0 to 512
[  116.472261][ T7249] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.496709][ T7247] loop7: detected capacity change from 0 to 1024
[  116.516776][ T7249] EXT4-fs (loop2): orphan cleanup on readonly fs
[  116.524296][ T7249] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  116.538357][ T7249] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.903: attempt to clear invalid blocks 2 len 1
[  116.552507][ T7249] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  116.555601][ T7249] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, 
[  116.565735][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  116.565797][    C1] EXT4-fs (loop2): initial error at time 1782071784: ext4_clear_blocks:876: inode 13
[  116.566017][    C1] EXT4-fs (loop2): last error at time 1782071784: ext4_clear_blocks:876: inode 13
[  116.601478][ T7249] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  116.611867][ T7249] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.903: invalid indirect mapped block 1819239214 (level 0)
[  116.626238][ T7249] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  116.630248][ T7249] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.903: invalid indirect mapped block 1819239214 (level 1)
[  116.655217][ T7249] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  116.660785][ T7249] EXT4-fs (loop2): 1 truncate cleaned up
[  116.686066][ T7249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  116.705387][ T7249] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.735267][ T7247] EXT4-fs: Ignoring removed bh option
[  116.754202][ T7247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.775258][   T28] kauditd_printk_skb: 40 callbacks suppressed
[  116.775276][   T28] audit: type=1400 audit(1782071784.971:787): avc:  denied  { write } for  pid=7246 comm="syz.7.912" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  117.016582][   T28] audit: type=1400 audit(1782071785.211:788): avc:  denied  { write } for  pid=7259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.096878][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.119032][   T28] audit: type=1400 audit(1782071785.311:789): avc:  denied  { write } for  pid=7271 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.411359][ T7281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7281 comm=syz.7.913
[  117.439580][ T7281] netlink: 2639 bytes leftover after parsing attributes in process `syz.7.913'.
[  117.532781][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.540043][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.631133][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.650362][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.708197][ T5584] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.717335][ T5584] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  117.728334][ T5584] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.754955][ T5584] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  117.786419][ T5584] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.815077][ T5584] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  117.844588][ T5584] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.875340][ T5584] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  117.885910][ T7290] loop7: detected capacity change from 0 to 1024
[  117.902490][ T7290] EXT4-fs: Ignoring removed bh option
[  117.923592][ T7290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.951550][   T28] audit: type=1400 audit(1782071786.141:790): avc:  denied  { write } for  pid=7289 comm="syz.7.917" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  118.123054][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.126871][   T28] audit: type=1400 audit(1782071786.321:791): avc:  denied  { write } for  pid=7273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.164339][ T7098] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.195064][   T28] audit: type=1400 audit(1782071786.391:792): avc:  denied  { write } for  pid=7299 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.219781][ T7098] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  118.262514][ T7098] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.310429][ T7098] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  118.334366][ T7098] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.361697][ T7098] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  118.380302][ T7098] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.381979][   T28] audit: type=1400 audit(1782071786.571:793): avc:  denied  { write } for  pid=7303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.412452][ T7098] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  118.451105][   T28] audit: type=1400 audit(1782071786.641:794): avc:  denied  { write } for  pid=7318 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.619906][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.637225][   T28] audit: type=1400 audit(1782071786.831:795): avc:  denied  { write } for  pid=7326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.656484][ T7098] 8021q: adding VLAN 0 to HW filter on device team0
[  118.681146][  T354] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.688347][  T354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.701377][   T28] audit: type=1400 audit(1782071786.891:796): avc:  denied  { write } for  pid=7337 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.739586][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.746754][ T5584] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.808995][ T7279] syz.1.914 (7279) used greatest stack depth: 9408 bytes left
[  119.020394][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.174197][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'.
[  119.386237][ T7408] loop7: detected capacity change from 0 to 512
[  119.392988][ T7408] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.437505][ T7408] EXT4-fs (loop7): orphan cleanup on readonly fs
[  119.444008][ T7408] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  119.457101][ T7408] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.926: attempt to clear invalid blocks 2 len 1
[  119.460528][ T7414] loop2: detected capacity change from 0 to 128
[  119.470420][ T7408] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.476880][ T7408] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, 
[  119.486428][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  119.486446][    C0] EXT4-fs (loop7): initial error at time 1782071787: ext4_clear_blocks:876: inode 13
[  119.486485][    C0] EXT4-fs (loop7): last error at time 1782071787: ext4_clear_blocks:876: inode 13
[  119.520200][ T7408] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  119.528641][ T7408] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.926: invalid indirect mapped block 1819239214 (level 0)
[  119.542530][ T7408] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.544366][ T7408] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.926: invalid indirect mapped block 1819239214 (level 1)
[  119.567533][ T7408] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.568854][ T7408] EXT4-fs (loop7): 1 truncate cleaned up
[  119.569157][ T7414] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.578994][ T7408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.609316][ T7408] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.638442][ T7414] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.725001][ T7414] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Out of memory
[  119.743699][ T7414] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Out of memory
[  119.756095][ T7098] veth0_vlan: entered promiscuous mode
[  119.773734][ T7414] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #13: comm syz.2.933: mark_inode_dirty error
[  119.777399][ T7098] veth1_vlan: entered promiscuous mode
[  119.795364][ T7414] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -12
[  119.795557][ T7414] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -12)
[  119.830275][ T7098] veth0_macvtap: entered promiscuous mode
[  119.845749][ T7098] veth1_macvtap: entered promiscuous mode
[  119.868697][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.881098][ T6260] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.892700][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.924817][   T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.941256][   T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.964599][   T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.976811][   T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.287402][   T49] Bluetooth: hci0: Frame reassembly failed (-84)
[  120.322560][ T7476] set_capacity_and_notify: 1 callbacks suppressed
[  120.322576][ T7476] loop3: detected capacity change from 0 to 512
[  120.404410][ T7476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.411007][ T7456] batadv1: entered promiscuous mode
[  120.420913][ T7476] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.424689][ T7456] batadv1: entered allmulticast mode
[  120.469861][ T7490] loop1: detected capacity change from 0 to 512
[  120.485336][ T7490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.498048][ T7490] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.944: Invalid block bitmap block 0 in block_group 0
[  120.512555][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.512985][ T7490] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  120.529131][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  120.529148][    C0] EXT4-fs (loop1): initial error at time 1782071788: ext4_read_block_bitmap_nowait:483
[  120.529175][    C0] EXT4-fs (loop1): last error at time 1782071788: ext4_read_block_bitmap_nowait:483
[  120.558082][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.558605][ T7490] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.944: attempt to clear invalid blocks 983261 len 1
[  120.585616][ T7490] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  120.595567][ T7490] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.944: Invalid inode table block 0 in block_group 0
[  120.601826][ T6221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.605761][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.637612][ T7490] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  120.658980][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.660489][ T7490] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  120.678186][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.678400][ T7490] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.944: Invalid inode table block 0 in block_group 0
[  120.699945][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.711535][ T7490] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  120.755316][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.755558][ T7490] EXT4-fs error (device loop1): ext4_truncate:4691: inode #11: comm syz.1.944: mark_inode_dirty error
[  120.784167][ T7490] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  120.784652][ T7490] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  120.799721][ T7509] loop3: detected capacity change from 0 to 128
[  120.818239][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.818416][ T7490] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.944: Invalid inode table block 0 in block_group 0
[  120.852083][ T7490] loop1: lost filesystem error report for type 5 error -117
[  120.855834][ T7490] EXT4-fs (loop1): 1 truncate cleaned up
[  120.870314][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.886676][ T7509] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  120.921165][ T7490] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.944: Invalid inode table block 0 in block_group 0
[  120.955182][ T7509] bio_check_eod: 50 callbacks suppressed
[  120.955198][ T7509] syz.3.948: attempt to access beyond end of device
[  120.955198][ T7509] loop3: rw=2049, sector=135, nr_sectors = 1 limit=128
[  120.981248][ T7509] buffer_io_error: 50 callbacks suppressed
[  120.981263][ T7509] Buffer I/O error on dev loop3, logical block 135, lost async page write
[  120.996614][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.007424][ T7509] syz.3.948: attempt to access beyond end of device
[  121.007424][ T7509] loop3: rw=2049, sector=136, nr_sectors = 1 limit=128
[  121.021257][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'.
[  121.026734][ T7509] Buffer I/O error on dev loop3, logical block 136, lost async page write
[  121.040284][ T7509] syz.3.948: attempt to access beyond end of device
[  121.040284][ T7509] loop3: rw=2049, sector=137, nr_sectors = 1 limit=128
[  121.071850][ T7509] Buffer I/O error on dev loop3, logical block 137, lost async page write
[  121.080766][ T7509] syz.3.948: attempt to access beyond end of device
[  121.080766][ T7509] loop3: rw=2049, sector=138, nr_sectors = 1 limit=128
[  121.102228][ T7509] Buffer I/O error on dev loop3, logical block 138, lost async page write
[  121.141414][ T7509] syz.3.948: attempt to access beyond end of device
[  121.141414][ T7509] loop3: rw=2049, sector=139, nr_sectors = 1 limit=128
[  121.158641][ T7533] loop1: detected capacity change from 0 to 2048
[  121.169033][ T7509] Buffer I/O error on dev loop3, logical block 139, lost async page write
[  121.188659][ T7509] syz.3.948: attempt to access beyond end of device
[  121.188659][ T7509] loop3: rw=2049, sector=140, nr_sectors = 1 limit=128
[  121.213700][ T7509] Buffer I/O error on dev loop3, logical block 140, lost async page write
[  121.236535][ T7509] syz.3.948: attempt to access beyond end of device
[  121.236535][ T7509] loop3: rw=2049, sector=141, nr_sectors = 1 limit=128
[  121.250583][ T7531] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  121.267861][ T7531] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  121.282399][ T7509] Buffer I/O error on dev loop3, logical block 141, lost async page write
[  121.293901][ T7509] syz.3.948: attempt to access beyond end of device
[  121.293901][ T7509] loop3: rw=2049, sector=143, nr_sectors = 1 limit=128
[  121.321261][ T7509] Buffer I/O error on dev loop3, logical block 143, lost async page write
[  121.366356][ T7509] syz.3.948: attempt to access beyond end of device
[  121.366356][ T7509] loop3: rw=2049, sector=152, nr_sectors = 1 limit=128
[  121.395794][ T7531] EXT4-fs (loop1): This should not happen!! Data will be lost
[  121.395794][ T7531] 
[  121.410709][ T7509] Buffer I/O error on dev loop3, logical block 152, lost async page write
[  121.427546][ T7509] syz.3.948: attempt to access beyond end of device
[  121.427546][ T7509] loop3: rw=2049, sector=153, nr_sectors = 1 limit=128
[  121.453468][ T7531] EXT4-fs (loop1): Total free blocks count 0
[  121.460710][ T7509] Buffer I/O error on dev loop3, logical block 153, lost async page write
[  121.471650][ T7531] EXT4-fs (loop1): Free/Dirty block details
[  121.479807][ T7553] loop4: detected capacity change from 0 to 512
[  121.488380][ T7531] EXT4-fs (loop1): free_blocks=4096
[  121.505479][ T7553] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.956: bit already cleared for inode 11
[  121.518859][ T7553] loop4: lost filesystem error report for type 5 error -117
[  121.518928][ T7531] EXT4-fs (loop1): dirty_blocks=32
[  121.526292][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  121.526314][    C1] EXT4-fs (loop4): initial error at time 1782071789: ext4_free_inode:356
[  121.526342][    C1] EXT4-fs (loop4): last error at time 1782071789: ext4_free_inode:356
[  121.534622][ T7553] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem
[  121.538182][ T7531] EXT4-fs (loop1): Block reservation details
[  121.569381][ T7531] EXT4-fs (loop1): i_reserved_data_blocks=2
[  121.586502][ T7553] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem
[  121.612277][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  121.626214][ T7553] EXT4-fs (loop4): 1 orphan inode deleted
[  121.675109][ T7564] bond0: entered promiscuous mode
[  121.680214][ T7564] bond_slave_0: entered promiscuous mode
[  121.686114][ T7564] bond_slave_1: entered promiscuous mode
[  121.711693][ T7564] batadv0: entered promiscuous mode
[  121.724681][   T53] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 4 with error 28
[  121.737373][ T7565] netlink: 'syz.3.957': attribute type 10 has an invalid length.
[  121.745301][   T53] EXT4-fs (loop1): This should not happen!! Data will be lost
[  121.745301][   T53] 
[  121.757157][ T7565] syz_tun: entered promiscuous mode
[  121.766614][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  121.779432][ T7565] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  121.870421][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'.
[  121.911134][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'.
[  121.928719][ T7569] loop4: detected capacity change from 0 to 512
[  121.946092][   T53] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.954592][   T53] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.967303][   T53] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.004642][   T53] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.045305][ T7582] loop3: detected capacity change from 0 to 512
[  122.090463][ T7582] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  122.111362][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  122.111413][   T28] audit: type=1400 audit(1782071790.301:856): avc:  denied  { listen } for  pid=7586 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  122.118887][ T7569] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.138462][ T7582] EXT4-fs: error: could not find journal device path
[  122.165353][ T7569] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.958: corrupted inode contents
[  122.181258][   T28] audit: type=1400 audit(1782071790.341:857): avc:  denied  { accept } for  pid=7586 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  122.209947][ T7569] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.958: mark_inode_dirty error
[  122.280615][ T7569] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.958: corrupted inode contents
[  122.334727][ T7593] netlink: 'syz.3.965': attribute type 27 has an invalid length.
[  122.353616][ T7593] bond0: (slave bond_slave_1): Releasing backup interface
[  122.361642][ T7593] bond_slave_1 (unregistering): left promiscuous mode
[  122.368551][ T5709] Bluetooth: hci0: command 0x1003 tx timeout
[  122.374715][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  122.484453][   T28] audit: type=1400 audit(1782071790.681:858): avc:  denied  { connect } for  pid=7597 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  122.664717][   T28] audit: type=1400 audit(1782071790.861:859): avc:  denied  { listen } for  pid=7604 comm="syz.4.971" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  122.784883][   T28] audit: type=1400 audit(1782071790.981:860): avc:  denied  { accept } for  pid=7604 comm="syz.4.971" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  122.873696][ T7613] loop3: detected capacity change from 0 to 4096
[  122.902180][   T28] audit: type=1400 audit(1782071791.091:861): avc:  denied  { write } for  pid=7609 comm="syz.3.973" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  123.009621][ T7616] loop4: detected capacity change from 0 to 2048
[  123.205095][ T7622] loop1: detected capacity change from 0 to 512
[  123.213592][ T7622] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.275398][ T7622] EXT4-fs (loop1): orphan cleanup on readonly fs
[  123.281966][ T7622] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  123.295885][ T7622] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.977: attempt to clear invalid blocks 2 len 1
[  123.317788][ T7622] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  123.322059][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  123.337690][    C1] EXT4-fs (loop1): initial error at time 1782071791: ext4_clear_blocks:876: inode 13
[  123.347254][    C1] EXT4-fs (loop1): last error at time 1782071791: ext4_clear_blocks:876: inode 13
[  123.380609][ T7622] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  123.395996][ T7622] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.977: invalid indirect mapped block 1819239214 (level 0)
[  123.410158][ T7622] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  123.412565][ T7622] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.977: invalid indirect mapped block 1819239214 (level 1)
[  123.437375][ T7622] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  123.453567][ T7622] EXT4-fs (loop1): 1 truncate cleaned up
[  123.506963][   T28] audit: type=1400 audit(1782071791.691:862): avc:  denied  { write } for  pid=7615 comm="syz.4.975" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  123.551083][ T7629] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  123.595299][ T7629] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  123.640983][ T7629] EXT4-fs (loop4): This should not happen!! Data will be lost
[  123.640983][ T7629] 
[  123.677549][   T28] audit: type=1400 audit(1782071791.871:863): avc:  denied  { map } for  pid=7633 comm="syz.7.980" path="socket:[18027]" dev="sockfs" ino=18027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  123.707097][ T7629] EXT4-fs (loop4): Total free blocks count 0
[  123.724292][ T7629] EXT4-fs (loop4): Free/Dirty block details
[  123.750848][ T7629] EXT4-fs (loop4): free_blocks=4096
[  123.768836][ T7629] EXT4-fs (loop4): dirty_blocks=80
[  123.784505][ T7629] EXT4-fs (loop4): Block reservation details
[  123.810382][ T7629] EXT4-fs (loop4): i_reserved_data_blocks=5
[  123.831886][ T7629] EXT4-fs error (device loop4) in ext4_setattr:6172: error 28
[  123.879637][   T53] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  123.913547][   T53] EXT4-fs (loop4): This should not happen!! Data will be lost
[  123.913547][   T53] 
[  123.973021][ T7098] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  124.385626][   T28] audit: type=1400 audit(1782071792.581:864): avc:  denied  { create } for  pid=7651 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  124.454136][   T28] audit: type=1400 audit(1782071792.601:865): avc:  denied  { bind } for  pid=7651 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  124.779041][ T7638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  124.840371][ T7657] rock: directory entry would overflow storage
[  124.891501][ T7657] rock: sig=0x5252, size=5, remaining=3
[  125.122843][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'.
[  125.148971][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'.
[  125.175639][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'.
[  125.319357][ T7677] syzkaller0: entered promiscuous mode
[  125.355377][ T7677] syzkaller0: entered allmulticast mode
[  125.477938][ T7687] set_capacity_and_notify: 1 callbacks suppressed
[  125.477954][ T7687] loop3: detected capacity change from 0 to 512
[  125.515989][ T7687] FAT-fs (loop3): Directory bread(block 199916) failed
[  125.536253][ T7687] FAT-fs (loop3): Directory bread(block 199917) failed
[  125.546496][ T7687] FAT-fs (loop3): Directory bread(block 199918) failed
[  125.554371][ T7687] FAT-fs (loop3): Directory bread(block 199919) failed
[  125.561751][ T7687] FAT-fs (loop3): Directory bread(block 199920) failed
[  125.596336][ T7687] FAT-fs (loop3): Directory bread(block 199921) failed
[  125.603539][ T7687] FAT-fs (loop3): Directory bread(block 199922) failed
[  125.610473][ T7687] FAT-fs (loop3): Directory bread(block 199923) failed
[  125.686461][ T7675] FAT-fs (loop3): Directory bread(block 199916) failed
[  125.695642][ T7675] FAT-fs (loop3): Directory bread(block 199917) failed
[  126.003369][ T7697] loop4: detected capacity change from 0 to 512
[  126.016201][ T7697] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.057533][ T7697] EXT4-fs (loop4): orphan cleanup on readonly fs
[  126.065172][ T7697] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  126.080565][ T7697] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1001: attempt to clear invalid blocks 2 len 1
[  126.094980][ T7697] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  126.098739][ T7697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, 
[  126.108583][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  126.108640][    C0] EXT4-fs (loop4): initial error at time 1782071794: ext4_clear_blocks:876: inode 13
[  126.109022][    C0] EXT4-fs (loop4): last error at time 1782071794: ext4_clear_blocks:876: inode 13
[  126.147792][ T7697] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  126.158101][ T7697] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1001: invalid indirect mapped block 1819239214 (level 0)
[  126.173202][ T7697] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  126.177761][ T7697] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1001: invalid indirect mapped block 1819239214 (level 1)
[  126.202472][ T7697] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  126.205782][ T7697] EXT4-fs (loop4): 1 truncate cleaned up
[  126.665320][ T7718] loop7: detected capacity change from 0 to 1024
[  126.673277][ T7718] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.838152][ T7727] loop3: detected capacity change from 0 to 512
[  127.023716][ T7727] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.075201][ T7741] loop7: detected capacity change from 0 to 1024
[  127.122779][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  127.122836][   T28] audit: type=1400 audit(1782071795.301:870): avc:  denied  { write } for  pid=7740 comm="syz.7.1021" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  127.330272][ T7747] loop4: detected capacity change from 0 to 1024
[  127.368462][ T7747] EXT4-fs: Ignoring removed oldalloc option
[  127.394905][ T7747] EXT4-fs: Ignoring removed oldalloc option
[  127.433225][ T7752] loop1: detected capacity change from 0 to 512
[  127.439907][ T7752] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.446930][ T7747] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  127.467369][ T7752] EXT4-fs (loop1): orphan cleanup on readonly fs
[  127.473780][ T7752] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  127.490217][ T7752] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1023: attempt to clear invalid blocks 2 len 1
[  127.503193][ T7752] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  127.505178][ T7752] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, 
[  127.514421][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  127.514446][    C0] EXT4-fs (loop1): initial error at time 1782071795: ext4_clear_blocks:876: inode 13
[  127.514485][    C0] EXT4-fs (loop1): last error at time 1782071795: ext4_clear_blocks:876: inode 13
[  127.547986][ T7752] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  127.556578][ T7752] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1023: invalid indirect mapped block 1819239214 (level 0)
[  127.570661][ T7752] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  127.573445][ T7752] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1023: invalid indirect mapped block 1819239214 (level 1)
[  127.596743][ T7752] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  127.597835][ T7752] EXT4-fs (loop1): 1 truncate cleaned up
[  127.600028][   T28] audit: type=1400 audit(1782071795.791:871): avc:  denied  { write } for  pid=7746 comm="syz.4.1024" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  127.677144][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.694012][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.717583][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.729617][   T28] audit: type=1400 audit(1782071795.921:872): avc:  denied  { ioctl } for  pid=7757 comm="syz.3.1025" path="socket:[19047]" dev="sockfs" ino=19047 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  127.812792][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.821059][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.829174][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.838296][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.845876][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.853449][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.861018][ T4432] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0
[  127.869089][ T4432] hid-generic 0006:0008:0001.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  127.964244][ T7765] syzkaller0: entered promiscuous mode
[  127.969905][ T7765] syzkaller0: entered allmulticast mode
[  128.182304][ T7774] loop3: detected capacity change from 0 to 512
[  128.196308][ T7774] EXT4-fs: Ignoring removed mblk_io_submit option
[  128.273485][ T7774] EXT4-fs (loop3): orphan cleanup on readonly fs
[  128.280152][ T7774] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  128.295870][ T7774] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1030: attempt to clear invalid blocks 2 len 1
[  128.314010][ T7774] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  128.316471][ T7774] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, 
[  128.326349][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  128.326441][    C0] EXT4-fs (loop3): initial error at time 1782071796: ext4_clear_blocks:876: inode 13
[  128.326781][    C0] EXT4-fs (loop3): last error at time 1782071796: ext4_clear_blocks:876: inode 13
[  128.363449][ T7774] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  128.374430][ T7774] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1030: invalid indirect mapped block 1819239214 (level 0)
[  128.390147][ T7774] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  128.397020][ T7774] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1030: invalid indirect mapped block 1819239214 (level 1)
[  128.422741][ T7774] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  128.429367][ T7774] EXT4-fs (loop3): 1 truncate cleaned up
[  128.549207][ T7788] loop2: detected capacity change from 0 to 128
[  128.563943][ T7788] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  128.631050][ T7788] bio_check_eod: 50 callbacks suppressed
[  128.631071][ T7788] syz.2.1035: attempt to access beyond end of device
[  128.631071][ T7788] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128
[  128.673252][ T7788] buffer_io_error: 50 callbacks suppressed
[  128.673271][ T7788] Buffer I/O error on dev loop2, logical block 135, lost async page write
[  128.703180][ T7788] syz.2.1035: attempt to access beyond end of device
[  128.703180][ T7788] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128
[  128.734025][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'.
[  128.751909][ T7788] Buffer I/O error on dev loop2, logical block 136, lost async page write
[  128.768965][ T7788] syz.2.1035: attempt to access beyond end of device
[  128.768965][ T7788] loop2: rw=2049, sector=137, nr_sectors = 1 limit=128
[  128.806918][ T7788] Buffer I/O error on dev loop2, logical block 137, lost async page write
[  128.824783][ T7788] syz.2.1035: attempt to access beyond end of device
[  128.824783][ T7788] loop2: rw=2049, sector=138, nr_sectors = 1 limit=128
[  128.856123][ T7788] Buffer I/O error on dev loop2, logical block 138, lost async page write
[  128.904071][ T7788] syz.2.1035: attempt to access beyond end of device
[  128.904071][ T7788] loop2: rw=2049, sector=139, nr_sectors = 1 limit=128
[  129.152221][ T7788] Buffer I/O error on dev loop2, logical block 139, lost async page write
[  129.164609][ T7796] xt_hashlimit: size too large, truncated to 1048576
[  129.171405][ T7788] syz.2.1035: attempt to access beyond end of device
[  129.171405][ T7788] loop2: rw=2049, sector=140, nr_sectors = 1 limit=128
[  129.724554][ T7796] xt_hashlimit: max too large, truncated to 1048576
[  129.731330][ T7788] Buffer I/O error on dev loop2, logical block 140, lost async page write
[  129.740325][ T7788] syz.2.1035: attempt to access beyond end of device
[  129.740325][ T7788] loop2: rw=2049, sector=141, nr_sectors = 1 limit=128
[  129.794350][ T7788] Buffer I/O error on dev loop2, logical block 141, lost async page write
[  129.817316][ T7788] syz.2.1035: attempt to access beyond end of device
[  129.817316][ T7788] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128
[  129.932957][ T7797] loop7: detected capacity change from 0 to 512
[  129.947408][ T7797] EXT4-fs: Ignoring removed mblk_io_submit option
[  129.998851][ T7797] EXT4-fs (loop7): orphan cleanup on readonly fs
[  130.006420][ T7797] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  130.021580][ T7797] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1036: attempt to clear invalid blocks 2 len 1
[  130.035491][ T7797] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  130.040745][ T7797] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, 
[  130.050804][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  130.050944][    C1] EXT4-fs (loop7): initial error at time 1782071798: ext4_clear_blocks:876: inode 13
[  130.051242][    C1] EXT4-fs (loop7): last error at time 1782071798: ext4_clear_blocks:876: inode 13
[  130.088075][ T7797] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  130.098735][ T7797] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1036: invalid indirect mapped block 1819239214 (level 0)
[  130.115493][ T7797] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1036: invalid indirect mapped block 1819239214 (level 1)
[  130.133591][ T7788] Buffer I/O error on dev loop2, logical block 143, lost async page write
[  130.148227][ T7797] EXT4-fs (loop7): 1 truncate cleaned up
[  130.155093][ T7788] syz.2.1035: attempt to access beyond end of device
[  130.155093][ T7788] loop2: rw=2049, sector=152, nr_sectors = 1 limit=128
[  130.168940][ T7788] Buffer I/O error on dev loop2, logical block 152, lost async page write
[  130.177630][ T7788] syz.2.1035: attempt to access beyond end of device
[  130.177630][ T7788] loop2: rw=2049, sector=153, nr_sectors = 1 limit=128
[  130.191178][ T7788] Buffer I/O error on dev loop2, logical block 153, lost async page write
[  130.225699][ T7803] tipc: Started in network mode
[  130.249240][ T7803] tipc: Node identity ac1414aa, cluster identity 4711
[  130.269701][ T7803] tipc: Enabled bearer <udp:s>, priority 10
[  130.502279][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'.
[  130.563785][ T7818] loop4: detected capacity change from 0 to 512
[  130.571946][ T7818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  130.591440][ T7818] EXT4-fs (loop4): 1 truncate cleaned up
[  130.597923][ T7818] EXT4-fs mount: 28 callbacks suppressed
[  130.597940][ T7818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.619146][   T28] audit: type=1400 audit(1782071798.821:873): avc:  denied  { remount } for  pid=7816 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  130.710533][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  130.723579][ T7818] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  130.763451][   T28] audit: type=1400 audit(1782071798.951:874): avc:  denied  { append } for  pid=7816 comm="syz.4.1044" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.789652][ T7818] EXT4-fs (loop4): shut down requested (0)
[  130.824899][ T7098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.837001][ T7825] IPv6: sit1: Disabled Multicast RS
[  130.881876][ T7831] loop4: detected capacity change from 0 to 256
[  130.914688][   T28] audit: type=1400 audit(1782071799.111:875): avc:  denied  { accept } for  pid=7827 comm="syz.7.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  131.049218][ T7840] loop2: detected capacity change from 0 to 512
[  131.078351][ T7840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.091250][ T7840] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.128287][   T28] audit: type=1400 audit(1782071799.321:876): avc:  denied  { write } for  pid=7839 comm="syz.2.1052" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.239821][ T6260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.383220][ T5125] tipc: Node number set to 2886997162
[  131.479957][ T7860] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1058'.
[  131.495237][ T7860] syzkaller1: entered promiscuous mode
[  131.500971][ T7860] syzkaller1: entered allmulticast mode
[  131.608675][ T7863] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1060'.
[  131.618313][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.625478][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.637373][ T7863] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1060'.
[  131.675135][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.682319][ T7863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.689751][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.696840][ T7863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.749118][ T7863] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1060'.
[  131.752015][   T28] audit: type=1400 audit(1782071799.941:877): avc:  denied  { listen } for  pid=7865 comm="syz.7.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  131.759964][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.784991][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.869706][   T28] audit: type=1400 audit(1782071799.941:878): avc:  denied  { ioctl } for  pid=7865 comm="syz.7.1061" path="socket:[18374]" dev="sockfs" ino=18374 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  131.952754][ T7870] loop7: detected capacity change from 0 to 512
[  131.972067][ T7870] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.989719][ T7870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  132.019315][ T7870] EXT4-fs (loop7): orphan cleanup on readonly fs
[  132.030661][ T7876] syzkaller0: entered promiscuous mode
[  132.033268][ T7870] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1063: Allocating blocks 41-42 which overlap fs metadata
[  132.050256][ T7876] syzkaller0: entered allmulticast mode
[  132.080779][ T7870] fserror_report: 2 callbacks suppressed
[  132.080861][ T7870] loop7: lost filesystem error report for type 5 error -117
[  132.088289][ T7870] EXT4-fs (loop7): Remounting filesystem read-only
[  132.095662][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  132.095689][    C1] EXT4-fs (loop7): initial error at time 1782071800: ext4_mb_mark_diskspace_used:4222
[  132.095740][    C1] EXT4-fs (loop7): last error at time 1782071800: ext4_mb_mark_diskspace_used:4222
[  132.130732][ T7870] Quota error (device loop7): write_blk: dquota write failed
[  132.138320][ T7870] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  132.148516][ T7870] EXT4-fs (loop7): 1 truncate cleaned up
[  132.154830][ T7870] EXT4-fs (loop7): pa ffff888105b98e70: logic 1, phys. 41, len 23
[  132.168824][ T7870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.263202][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.420589][ T7864] loop3: detected capacity change from 0 to 512
[  132.457655][ T7864] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.468050][ T7896] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  132.493951][ T7896] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.506949][ T7864] EXT4-fs (loop3): orphan cleanup on readonly fs
[  132.518996][ T7896] vlan2: entered allmulticast mode
[  132.524369][ T7896] bond0: entered allmulticast mode
[  132.529567][ T7896] bond_slave_0: entered allmulticast mode
[  132.531906][ T7864] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  132.535698][ T7896] bond_slave_1: entered allmulticast mode
[  132.545051][ T7896] bond1: (slave vlan2): making interface the new active one
[  132.551704][ T7896] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  132.581644][ T7864] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1059: attempt to clear invalid blocks 2 len 1
[  132.625699][ T7864] fserror_report: 2 callbacks suppressed
[  132.625782][ T7864] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  132.641166][ T7864] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, 
[  132.651226][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  132.651539][    C1] EXT4-fs (loop3): initial error at time 1782071800: ext4_clear_blocks:876: inode 13
[  132.651897][    C1] EXT4-fs (loop3): last error at time 1782071800: ext4_clear_blocks:876: inode 13
[  132.687749][ T7864] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  132.700599][   T28] audit: type=1326 audit(1782071800.831:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x0
[  132.728086][ T7864] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1059: invalid indirect mapped block 1819239214 (level 0)
[  132.746448][ T7864] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  132.754973][   T28] audit: type=1326 audit(1782071800.951:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  132.791539][ T7864] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1059: invalid indirect mapped block 1819239214 (level 1)
[  132.807574][ T7864] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  132.808874][   T28] audit: type=1326 audit(1782071800.951:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  132.847574][   T28] audit: type=1326 audit(1782071800.951:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  132.874218][   T28] audit: type=1326 audit(1782071800.951:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  132.903104][ T7864] EXT4-fs (loop3): 1 truncate cleaned up
[  132.917406][ T7864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.949707][ T7864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.959658][   T28] audit: type=1326 audit(1782071800.951:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  132.985898][   T28] audit: type=1326 audit(1782071800.951:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  133.015328][   T28] audit: type=1326 audit(1782071801.011:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e6501d68e code=0x7ffc0000
[  133.041674][   T28] audit: type=1326 audit(1782071801.011:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.1.1083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6505ce59 code=0x7ffc0000
[  133.469167][ T7928] loop4: detected capacity change from 0 to 128
[  133.988353][ T7952] loop1: detected capacity change from 0 to 512
[  133.995000][ T7952] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.004682][ T7952] EXT4-fs (loop1): orphan cleanup on readonly fs
[  134.011074][ T7952] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  134.019566][ T7952] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1093: attempt to clear invalid blocks 2 len 1
[  134.032504][ T7952] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  134.033006][ T7952] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, 
[  134.042298][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  134.042322][    C1] EXT4-fs (loop1): initial error at time 1782071802: ext4_clear_blocks:876: inode 13
[  134.042357][    C1] EXT4-fs (loop1): last error at time 1782071802: ext4_clear_blocks:876: inode 13
[  134.075879][ T7952] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  134.084386][ T7952] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1093: invalid indirect mapped block 1819239214 (level 0)
[  134.098350][ T7952] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  134.099911][ T7952] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1093: invalid indirect mapped block 1819239214 (level 1)
[  134.123230][ T7952] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  134.128312][ T7952] EXT4-fs (loop1): 1 truncate cleaned up
[  134.143874][ T7952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.156760][ T7952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.285615][ T7964] netlink: 'syz.2.1094': attribute type 39 has an invalid length.
[  134.373779][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'.
[  134.390760][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'.
[  134.520582][ T7990] loop2: detected capacity change from 0 to 128
[  135.013316][ T8023] tipc: Started in network mode
[  135.025604][ T8023] tipc: Node identity e6b62eb8de6b, cluster identity 4711
[  135.059801][ T8023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.139994][ T8029] syzkaller0: entered promiscuous mode
[  135.176521][ T8029] syzkaller0: entered allmulticast mode
[  135.189024][ T8029] tipc: Resetting bearer <eth:syzkaller0>
[  135.222149][ T8022] tipc: Resetting bearer <eth:syzkaller0>
[  135.260627][ T8022] tipc: Disabling bearer <eth:syzkaller0>
[  135.431417][ T8046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.439984][ T8048] loop4: detected capacity change from 0 to 128
[  135.470813][ T8048] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  135.541561][ T8046] syzkaller0: entered promiscuous mode
[  135.542045][ T8042] loop7: detected capacity change from 0 to 512
[  135.548237][ T8046] tipc: Resetting bearer <eth:syzkaller0>
[  135.559402][ T8048] bio_check_eod: 28 callbacks suppressed
[  135.559444][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.559444][ T8048] loop4: rw=2049, sector=135, nr_sectors = 1 limit=128
[  135.611633][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'.
[  135.615805][ T8048] buffer_io_error: 28 callbacks suppressed
[  135.615855][ T8048] Buffer I/O error on dev loop4, logical block 135, lost async page write
[  135.650225][ T8045] tipc: Resetting bearer <eth:syzkaller0>
[  135.657825][ T8042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.674085][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.674085][ T8048] loop4: rw=2049, sector=136, nr_sectors = 1 limit=128
[  135.704644][ T8045] tipc: Disabling bearer <eth:syzkaller0>
[  135.711570][ T8042] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.729407][ T8048] Buffer I/O error on dev loop4, logical block 136, lost async page write
[  135.744134][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.744134][ T8048] loop4: rw=2049, sector=137, nr_sectors = 1 limit=128
[  135.760241][ T8042] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.1106: corrupted inode contents
[  135.773992][ T8048] Buffer I/O error on dev loop4, logical block 137, lost async page write
[  135.782894][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.782894][ T8048] loop4: rw=2049, sector=138, nr_sectors = 1 limit=128
[  135.796465][ T8048] Buffer I/O error on dev loop4, logical block 138, lost async page write
[  135.805155][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.805155][ T8048] loop4: rw=2049, sector=139, nr_sectors = 1 limit=128
[  135.818728][ T8048] Buffer I/O error on dev loop4, logical block 139, lost async page write
[  135.827747][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.827747][ T8048] loop4: rw=2049, sector=140, nr_sectors = 1 limit=128
[  135.841455][ T8048] Buffer I/O error on dev loop4, logical block 140, lost async page write
[  135.854875][ T8042] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #2: comm syz.7.1106: mark_inode_dirty error
[  135.870792][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.870792][ T8048] loop4: rw=2049, sector=141, nr_sectors = 1 limit=128
[  135.899124][ T8048] Buffer I/O error on dev loop4, logical block 141, lost async page write
[  135.914570][ T8048] syz.4.1109: attempt to access beyond end of device
[  135.914570][ T8048] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128
[  135.917695][ T8042] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.1106: corrupted inode contents
[  135.998154][ T8048] Buffer I/O error on dev loop4, logical block 143, lost async page write
[  136.012809][ T8048] syz.4.1109: attempt to access beyond end of device
[  136.012809][ T8048] loop4: rw=2049, sector=152, nr_sectors = 1 limit=128
[  136.027668][ T8048] Buffer I/O error on dev loop4, logical block 152, lost async page write
[  136.036552][ T8048] syz.4.1109: attempt to access beyond end of device
[  136.036552][ T8048] loop4: rw=2049, sector=153, nr_sectors = 1 limit=128
[  136.051467][ T8048] Buffer I/O error on dev loop4, logical block 153, lost async page write
[  136.093363][   T30] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  136.122533][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  136.137931][ T8075] netlink: 'syz.4.1117': attribute type 1 has an invalid length.
[  136.154766][ T8075] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.168420][   T49] Bluetooth: hci0: Frame reassembly failed (-84)
[  136.181218][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.189982][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'.
[  136.210424][ T8075] bond1: (slave geneve2): making interface the new active one
[  136.219304][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.227910][ T8075] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  136.236987][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.300130][ T8088] loop3: detected capacity change from 0 to 512
[  136.313575][ T8088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.327267][ T8084] loop7: detected capacity change from 0 to 512
[  136.334360][ T8088] xt_hashlimit: size too large, truncated to 1048576
[  136.345819][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'.
[  136.488692][ T8096] loop4: detected capacity change from 0 to 128
[  136.496970][ T6221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.507558][ T8096] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.520895][ T8096] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  136.550303][ T8100] ieee802154 phy0 wpan0: encryption failed: -22
[  136.585606][ T8102] loop3: detected capacity change from 0 to 128
[  136.595946][   T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  136.600298][ T8102] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  136.648046][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  136.675285][   T30] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  136.806059][ T8120] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  136.816678][ T8120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  136.921852][ T8128] loop2: detected capacity change from 0 to 1024
[  136.929031][ T8128] EXT4-fs: Ignoring removed bh option
[  136.954461][ T8128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.008247][ T6260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.031214][ T8134] loop2: detected capacity change from 0 to 128
[  137.038771][ T8134] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  137.071701][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  137.096856][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  137.106710][ T6260] ==================================================================
[  137.114836][ T6260] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked
[  137.122252][ T6260] 
[  137.124572][ T6260] read-write to 0xffff88811aa66b50 of 8 bytes by interrupt on cpu 0:
[  137.132640][ T6260]  __xa_clear_mark+0xf5/0x1e0
[  137.137345][ T6260]  __folio_end_writeback+0xf4/0x360
[  137.142566][ T6260]  folio_end_writeback_no_dropbehind+0x6d/0x1d0
[  137.148822][ T6260]  folio_end_writeback+0x1c/0x70
[  137.153780][ T6260]  bh_end_async_write+0x1a6/0x250
[  137.158842][ T6260]  bio_endio+0x35b/0x3f0
[  137.163086][ T6260]  blk_update_request+0x338/0x710
[  137.168147][ T6260]  blk_mq_end_request+0x26/0x50
[  137.173013][ T6260]  lo_complete_rq+0x98/0x130
[  137.177609][ T6260]  blk_done_softirq+0x77/0xb0
[  137.182304][ T6260]  handle_softirqs+0xb9/0x280
[  137.187006][ T6260]  run_ksoftirqd+0x1c/0x30
[  137.191430][ T6260]  smpboot_thread_fn+0x32a/0x510
[  137.196391][ T6260]  kthread+0x221/0x270
[  137.200498][ T6260]  ret_from_fork+0x146/0x330
[  137.205099][ T6260]  ret_from_fork_asm+0x1a/0x30
[  137.209883][ T6260] 
[  137.212209][ T6260] read to 0xffff88811aa66b50 of 8 bytes by task 6260 on cpu 1:
[  137.219751][ T6260]  xas_find_marked+0x211/0x650
[  137.224525][ T6260]  filemap_get_folios_tag+0xf7/0x400
[  137.230084][ T6260]  filemap_fdatawait_keep_errors+0x6c/0x190
[  137.236034][ T6260]  sync_inodes_sb+0x41e/0x4d0
[  137.240777][ T6260]  sync_filesystem+0x102/0x190
[  137.245554][ T6260]  generic_shutdown_super+0x4c/0x220
[  137.250854][ T6260]  kill_block_super+0x2a/0x70
[  137.255587][ T6260]  deactivate_locked_super+0x75/0x1c0
[  137.260976][ T6260]  deactivate_super+0x97/0xa0
[  137.265775][ T6260]  cleanup_mnt+0x2c3/0x340
[  137.270223][ T6260]  __cleanup_mnt+0x19/0x20
[  137.274666][ T6260]  task_work_run+0x130/0x1a0
[  137.279275][ T6260]  exit_to_user_mode_loop+0x1e4/0x8c0
[  137.284681][ T6260]  do_syscall_64+0x23c/0x3c0
[  137.289314][ T6260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.295235][ T6260] 
[  137.297557][ T6260] value changed: 0x0000000000000f9f -> 0x0000000000000f90
[  137.304662][ T6260] 
[  137.306997][ T6260] Reported by Kernel Concurrency Sanitizer on:
[  137.313161][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  137.324193][ T6260] Tainted: [W]=WARN
[  137.327997][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  137.338062][ T6260] ==================================================================
[  138.202156][ T5709] Bluetooth: hci0: command 0x1003 tx timeout
[  138.202168][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110