last executing test programs:

24.656412549s ago: executing program 3 (id=3408):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x168, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

24.305393339s ago: executing program 3 (id=3410):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008", @ANYRES32, @ANYBLOB="0000001a0000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000c00)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0xe3, 0x1, 0x0, 0x7, 0x11000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10008, 0x40, 0x2, 0x5, 0x80000000, 0x0, 0x2100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
close(0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))

20.495232255s ago: executing program 3 (id=3424):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

17.271055724s ago: executing program 3 (id=3433):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4d3, &(0x7f0000000f80)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x13)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000100))
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x1, 0x4, 0x7, 0x0, r5, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000080), 0x0}, 0x20)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=ANY=[], 0xc7, 0x1)

15.244455736s ago: executing program 3 (id=3442):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008", @ANYRES32, @ANYBLOB="0000001a0000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000c00)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0xe3, 0x1, 0x0, 0x7, 0x11000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10008, 0x40, 0x2, 0x5, 0x80000000, 0x0, 0x2100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0)
close(0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))

12.887748547s ago: executing program 3 (id=3455):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4d3, &(0x7f0000000f80)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x13)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000100))
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x1, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000080), 0x0}, 0x20)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=ANY=[], 0xc7, 0x1)

8.000240166s ago: executing program 0 (id=3480):
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x3, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7)

7.913623239s ago: executing program 0 (id=3483):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008", @ANYRES32, @ANYBLOB="0000001a0000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000c00)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0xe3, 0x1, 0x0, 0x7, 0x11000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10008, 0x40, 0x2, 0x5, 0x80000000, 0x0, 0x2100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0)
close(0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))

7.283343508s ago: executing program 0 (id=3491):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}})
poll(0x0, 0x0, 0x9)

7.267195439s ago: executing program 1 (id=3492):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008", @ANYRES32, @ANYBLOB="0000001a0000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000c00)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x3, 0xe3, 0x1, 0x0, 0x7, 0x11000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10008, 0x40, 0x2, 0x5, 0x80000000, 0x0, 0x2100, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0)
close(0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))

6.732216705s ago: executing program 1 (id=3496):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, <r6=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4)

6.710676315s ago: executing program 2 (id=3497):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4d3, &(0x7f0000000f80)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x13)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000100))
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x1, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000080), 0x0}, 0x20)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=ANY=[], 0xc7, 0x1)

6.516237711s ago: executing program 1 (id=3498):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xfc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

6.23631518s ago: executing program 0 (id=3501):
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
dup(0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.283757519s ago: executing program 1 (id=3503):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000dc0)=ANY=[], 0x14)
io_uring_setup(0x3cf9, &(0x7f00000000c0)={0x0, 0xfc5a, 0x0, 0x1, 0xcf})
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

3.716306177s ago: executing program 2 (id=3504):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)

3.460243005s ago: executing program 1 (id=3505):
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
recvfrom$inet6(r1, 0x0, 0x0, 0x300, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

3.167032994s ago: executing program 4 (id=3506):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x100, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3.089396826s ago: executing program 2 (id=3507):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

3.047305837s ago: executing program 4 (id=3508):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, <r6=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4)

2.93628564s ago: executing program 4 (id=3509):
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
io_uring_setup(0x3309, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, 0x0, 0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

2.890604972s ago: executing program 2 (id=3510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

2.803702205s ago: executing program 2 (id=3511):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}})
poll(0x0, 0x0, 0x9)

2.725007327s ago: executing program 0 (id=3512):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4d3, &(0x7f0000000f80)="$eJzs3c1rHOcZAPBndy1ZkuX6o6XYLtQGF9wPrE+KpbaXntoeDKWGXlpwVWmtOFpphXblWMIHObn5kENISCDkkHv+glziU0wg5JzcQw7BIXEUSAKBDTO7a0srrbJOZK2s+f1gpHc+dp/33eV5mXlnZieAzDqX/MlFDEbEBxFxrD67eYNz9X/rD25NJ1MuarUrn+fS7ZL55aP1TZuvOxIRaxHRFxH/+lvE/3Nb41ZWVuemSqXiUmN+uDq/OFxZWb14fX5qtjhbXBiduDQ5OTEyPja5a2298+Kzdy6//Y/et75+4f69l959J6nWYGNd0o5dC7RBvek9cWLDskMR8ZcnEawLCo329He7Ivwoyff384g4n+b/sSik3yaQBbVarfZd7XC71Ws14MDKp/vAufxQRNTL+fzQUH0f/hcxkC+VK9U/XCsvL8zU95WPR0/+2vVScSQK6bHC8ejJJfOjafnR/FjL/HhEug/8cqE/nR+aLpdm9rarA1ocacn/rwr1/AcywiE/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kEn/vHw5mWrN+99nbqwsz5VvXJwpVuaG5penh6bLS4tDs+XybHrPzvwPvV+pXF4c/WMs3xyuFivV4crK6tX58vJC9Wp6X//VYs+etAroxImzdz/KRcTan/rTKdHbWCdX4WCr1XLR7XuQge4odLsDArrG0B9kl2N8oPUnelv3C/ravXDx0Xgh8HTJd7sCQNdcOP345//a7gsATxXj/5Bdxv8hu4z/A9s8om+Tncb/gaeT8X/IrsE2z/86uuHZXSMR8bOI+LDQc7j5rC/gIMh/mmvs/1849pvB1rW9uW/SUwS9EfHc61devTlVrS6NJsu/eLi8+lpj+diGFzpJCPtOM0+beQwAZNf6g1vTzWkv43721/pFCFvjH2qMTfal5ygH1nObrlXI7dK1C2u3I+LUdvFzjeed1w9kBtYLW+KfbPzP1d8ire+h9Lnpj2nn+Pl28U9viP/rDfHP/KRPBLLjbtL/jGyXf/k0p+Nh/m/ufwZ36dqJ9v1f/mH/V2jT/53tMMYzbzz/Sdv4tyPObBu/Ga8vjdUaP6nbhQ7j3//vv3/Zbl3tzfr7bBe//inXS33V+cXhysrqxfR35GaLC6MTlyYnJ0bGxyaH0zHq4eZI9VZ/PvX+vZ3aP9Am/k7tT5b9rsP2f/ur9/5zbof4vz2//fd/cof4/RHx+w7jfzn28f/arUviz7Rpf36H+Mmy8Q7jV175++EONwUA9kBlZXVuqlQqLik84ULv/qiGwr4r3N4f1WgpdLtnAp60ykpyaJ4kfbdrAgAAAAAAAAAAAHRqLy4n7nYbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgu8DAAD//1pH088=")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x13)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000100))
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x1, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000080), 0x0}, 0x20)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=ANY=[], 0xc7, 0x1)

2.546208622s ago: executing program 4 (id=3513):
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

2.477616824s ago: executing program 4 (id=3514):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000f80)={0x6, [0x1, 0xffffffff], 0x1}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000180)={@multicast1, @empty, 0x1, "4cf5cfe5d5f9f0cffa4df8fefacb9a83de01d0d036873fba338636a80c02095e", 0x6000000, 0x0, 0x4, 0x9}, 0x3c)
bind$inet(r1, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
listen(r2, 0x7f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffff7fc}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0)
read$watch_queue(r6, &(0x7f0000000540)=""/222, 0xe80)

1.896212782s ago: executing program 2 (id=3515):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
setresgid(0x0, 0xee01, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r4, 0x0, 0x0)
pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa)

566.073463ms ago: executing program 0 (id=3516):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060036"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

230.209643ms ago: executing program 1 (id=3517):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)

0s ago: executing program 4 (id=3518):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$netlink(0x10, 0x3, 0xa)
write(r0, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007e", 0xb, 0x4048050, &(0x7f0000000080)={0x11, 0x11, r3, 0x1, 0xe5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20008000)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x26000000}, 0x50000)

kernel console output (not intermixed with test programs):

us mode
[  576.145816][T13375] syzkaller0: entered allmulticast mode
[  576.530118][T10956] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  576.671227][T10967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  576.803000][T13407] team0: Device ipip0 is up. Set it down before adding it as a team port
[  577.234713][T10956] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  577.721607][T10956] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  577.862193][T13426] batadv_slave_0: left promiscuous mode
[  577.868376][T13426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  577.917140][T13426] macsec0: left promiscuous mode
[  577.922350][T13426] macsec0: left allmulticast mode
[  577.927384][T13426] veth1_macvtap: left allmulticast mode
[  577.938020][T13426] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  579.274869][T13387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  579.333316][T13444] loop1: detected capacity change from 0 to 1024
[  579.341125][T13444] EXT4-fs: Ignoring removed i_version option
[  579.411403][T13444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.480843][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  579.495837][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.580772][   T28] audit: type=1400 audit(1782163505.499:1186): avc:  denied  { setopt } for  pid=13445 comm="syz.3.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  579.640319][   T28] audit: type=1400 audit(1782163505.499:1187): avc:  denied  { bind } for  pid=13445 comm="syz.3.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  579.951962][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  580.275521][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.309621][T13493] team0: Device ipip0 is up. Set it down before adding it as a team port
[  580.327668][T13495] team0: Device ipip0 is up. Set it down before adding it as a team port
[  580.349683][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.405841][T13477] lo speed is unknown, defaulting to 1000
[  580.447172][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.535380][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.609381][   T12] bridge_slave_1: left allmulticast mode
[  580.623393][   T12] bridge_slave_1: left promiscuous mode
[  580.632991][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.647336][   T12] bridge_slave_0: left allmulticast mode
[  580.653191][   T12] bridge_slave_0: left promiscuous mode
[  580.658952][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.787681][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.819231][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.844313][   T12] bond0 (unregistering): Released all slaves
[  581.003562][T13477] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.022670][T13477] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.037803][T13477] bridge_slave_0: entered allmulticast mode
[  581.053363][T13477] bridge_slave_0: entered promiscuous mode
[  581.250953][T13532] lo speed is unknown, defaulting to 1000
[  582.022384][   T12] hsr_slave_0: left promiscuous mode
[  582.027998][   T12] hsr_slave_1: left promiscuous mode
[  582.034456][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.041979][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.049466][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.056864][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.068105][   T12] veth1_macvtap: left promiscuous mode
[  582.393950][   T12] veth0_macvtap: left promiscuous mode
[  582.399754][   T12] veth1_vlan: left promiscuous mode
[  582.405077][   T12] veth0_vlan: left promiscuous mode
[  582.533131][   T12] team0 (unregistering): Port device team_slave_1 removed
[  582.545432][   T12] team0 (unregistering): Port device team_slave_0 removed
[  582.588531][T13477] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.596109][T13477] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.603439][T13477] bridge_slave_1: entered allmulticast mode
[  582.613161][T13477] bridge_slave_1: entered promiscuous mode
[  582.892548][T13477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.920664][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'.
[  582.941306][T13477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.019698][T13548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2672'.
[  583.197232][T13477] team0: Port device team_slave_0 added
[  583.207212][T13477] team0: Port device team_slave_1 added
[  583.236047][T13477] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.247268][T13477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.273536][T13477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.307572][T13477] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.319855][T13477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.347569][T13477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.414667][T13509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  583.714912][T13477] hsr_slave_0: entered promiscuous mode
[  583.722645][T13477] hsr_slave_1: entered promiscuous mode
[  584.301330][   T28] audit: type=1400 audit(1782163510.239:1188): avc:  denied  { read } for  pid=13623 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  584.644971][   T28] audit: type=1400 audit(1782163510.239:1189): avc:  denied  { read open } for  pid=13623 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  585.276388][   T28] audit: type=1400 audit(1782163510.239:1190): avc:  denied  { getattr } for  pid=13623 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  585.875646][   T28] audit: type=1400 audit(1782163511.789:1191): avc:  denied  { write } for  pid=13622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  585.906434][   T28] audit: type=1400 audit(1782163511.789:1192): avc:  denied  { add_name } for  pid=13622 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  585.920056][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3
[  585.930500][   T28] audit: type=1400 audit(1782163511.799:1193): avc:  denied  { write } for  pid=13681 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.066433][T13693] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2688'.
[  586.083277][   T28] audit: type=1400 audit(1782163511.799:1194): avc:  denied  { remove_name } for  pid=13681 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=22800 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.759520][T13653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  587.772162][T13477] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  587.798498][T13477] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  587.822816][T13477] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  587.841555][T13477] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  587.850699][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'.
[  587.874289][T13477] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  587.886473][T13477] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  587.890346][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'.
[  587.902407][   T28] audit: type=1400 audit(1782163513.829:1195): avc:  denied  { write } for  pid=13771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.903011][T13477] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  587.964574][   T28] audit: type=1400 audit(1782163513.899:1196): avc:  denied  { write } for  pid=13797 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.969190][T13799] loop0: detected capacity change from 0 to 1024
[  587.993376][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'.
[  587.994843][T13477] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  588.008507][T13799] EXT4-fs: Ignoring removed i_version option
[  588.034671][T13799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.078119][T13477] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.150150][   T28] audit: type=1400 audit(1782163514.079:1197): avc:  denied  { write } for  pid=13813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  588.187202][   T28] audit: type=1400 audit(1782163514.119:1198): avc:  denied  { write } for  pid=13829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  588.198833][T13477] 8021q: adding VLAN 0 to HW filter on device team0
[  588.241967][T11104] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.249033][T11104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.262173][T11104] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.269297][T11104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.287452][T13477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  588.430073][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  588.576020][T13477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.870208][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.114123][T13477] veth0_vlan: entered promiscuous mode
[  589.302126][T13477] veth1_vlan: entered promiscuous mode
[  589.337976][T13477] veth0_macvtap: entered promiscuous mode
[  589.358432][T13477] veth1_macvtap: entered promiscuous mode
[  589.368004][T13901] loop0: detected capacity change from 0 to 1024
[  589.380502][T13901] EXT4-fs: Ignoring removed i_version option
[  589.389325][T13477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.408163][T13477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.417392][T13901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.433774][T11163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.452264][T11163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.484108][T11163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.501704][T11163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.927877][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'.
[  589.996576][T13926] syzkaller0: entered promiscuous mode
[  590.020969][T13926] syzkaller0: entered allmulticast mode
[  590.416999][T13942] loop3: detected capacity change from 0 to 512
[  590.424146][T13942] EXT4-fs: Ignoring removed nobh option
[  590.521447][T13944] lo speed is unknown, defaulting to 1000
[  591.024229][T13942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  591.032293][T13942] System zones: 1-12
[  591.037266][T13942] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2712: corrupted in-inode xattr: e_value size too large
[  591.051435][T13942] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  591.054779][T13942] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2712: couldn't read orphan inode 15 (err -117)
[  591.063905][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  591.063929][    C0] EXT4-fs (loop3): initial error at time 1782163516: ext4_iget_extra_inode:5180: inode 15
[  591.063959][    C0] EXT4-fs (loop3): last error at time 1782163516: ext4_iget_extra_inode:5180: inode 15
[  591.102040][T13942] loop3: lost filesystem error report for type 5 error -117
[  591.106631][T13942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.280622][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  591.280637][   T28] audit: type=1400 audit(1782163517.059:1203): avc:  denied  { write } for  pid=13931 comm="syz.3.2712" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  591.665082][   T28] audit: type=1400 audit(1782163517.059:1204): avc:  denied  { add_name } for  pid=13931 comm="syz.3.2712" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  591.731504][T13942] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  592.293531][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.440590][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2725'.
[  592.722568][T13985] lo speed is unknown, defaulting to 1000
[  593.619714][T13993] syzkaller0: entered promiscuous mode
[  593.625261][T13993] syzkaller0: entered allmulticast mode
[  594.558363][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.429174][T13973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  595.494895][T14027] syzkaller0: entered promiscuous mode
[  595.500983][T14027] syzkaller0: entered allmulticast mode
[  595.638959][T14041] loop3: detected capacity change from 0 to 1024
[  595.653106][T14041] EXT4-fs: Ignoring removed i_version option
[  595.665037][T14041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  595.909577][T14048] syzkaller0: entered promiscuous mode
[  595.915279][T14048] syzkaller0: entered allmulticast mode
[  596.296548][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'.
[  596.325412][T14053] bridge0: entered promiscuous mode
[  596.342298][T14053] bridge0: entered allmulticast mode
[  596.366371][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'.
[  596.395826][T14054] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.403037][T14054] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.450124][T14054] bridge0: left promiscuous mode
[  596.455649][T14054] bridge0: left allmulticast mode
[  596.665008][T14056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.674363][T14056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.971454][T14060] loop1: detected capacity change from 0 to 1024
[  596.996624][T14060] EXT4-fs: Ignoring removed i_version option
[  597.011712][T14060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.442691][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.141621][T14097] loop3: detected capacity change from 0 to 1024
[  598.160813][T14097] EXT4-fs: Ignoring removed i_version option
[  598.172645][T14097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.146054][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.350137][T14105] loop2: detected capacity change from 0 to 1024
[  599.367224][T14105] EXT4-fs: Ignoring removed i_version option
[  599.382576][T14105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.510509][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.528738][T14120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2768'.
[  599.539976][T14120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  599.547225][T14120] IPv6: NLM_F_CREATE should be set when creating new route
[  600.373808][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.396313][   T28] audit: type=1400 audit(1782163526.329:1205): avc:  denied  { create } for  pid=14140 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  600.550371][   T28] audit: type=1400 audit(1782163526.359:1206): avc:  denied  { bind } for  pid=14140 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  600.662588][   T28] audit: type=1400 audit(1782163526.359:1207): avc:  denied  { connect } for  pid=14140 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  600.769955][   T28] audit: type=1400 audit(1782163526.359:1208): avc:  denied  { write } for  pid=14140 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  601.003345][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'.
[  601.019849][T14159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  601.027087][T14159] IPv6: NLM_F_CREATE should be set when creating new route
[  601.246999][T14168] lo speed is unknown, defaulting to 1000
[  601.359822][T14171] loop2: detected capacity change from 0 to 512
[  601.366987][T14171] EXT4-fs: Ignoring removed nobh option
[  601.544042][T14171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  601.552105][T14171] System zones: 1-12
[  601.560890][T14171] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2783: corrupted in-inode xattr: e_value size too large
[  601.575007][T14171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  601.575322][T14171] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2783: couldn't read orphan inode 15 (err -117)
[  601.584463][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  601.584478][    C1] EXT4-fs (loop2): initial error at time 1782163527: ext4_iget_extra_inode:5180: inode 15
[  601.584520][    C1] EXT4-fs (loop2): last error at time 1782163527: ext4_iget_extra_inode:5180: inode 15
[  601.622284][T14171] loop2: lost filesystem error report for type 5 error -117
[  601.646240][T14171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  602.921376][T14181] loop1: detected capacity change from 0 to 512
[  602.928156][T14181] EXT4-fs: Ignoring removed nobh option
[  603.072678][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.094349][T14181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  603.102441][T14181] System zones: 1-12
[  603.106790][T14181] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2786: corrupted in-inode xattr: e_value size too large
[  603.120812][T14181] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  603.121439][T14181] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2786: couldn't read orphan inode 15 (err -117)
[  603.130583][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  603.130603][    C1] EXT4-fs (loop1): initial error at time 1782163529: ext4_iget_extra_inode:5180: inode 15
[  603.130651][    C1] EXT4-fs (loop1): last error at time 1782163529: ext4_iget_extra_inode:5180: inode 15
[  603.168850][T14181] loop1: lost filesystem error report for type 5 error -117
[  603.171183][T14181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.207925][   T28] audit: type=1400 audit(1782163529.139:1209): avc:  denied  { write } for  pid=14178 comm="syz.1.2786" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  603.761872][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'.
[  603.846563][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'.
[  604.588408][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.613460][T14194] batadv0: entered promiscuous mode
[  604.627648][T14194] macvtap1: entered promiscuous mode
[  604.635666][T14194] macvtap1: entered allmulticast mode
[  604.641799][T14194] batadv0: entered allmulticast mode
[  604.648273][T14194] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  604.671562][T14198] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.678726][T14198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.686224][T14198] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.693283][T14198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.851088][T14212] loop4: detected capacity change from 0 to 1024
[  604.866581][T14212] EXT4-fs: Ignoring removed i_version option
[  604.903293][T14212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.925416][T14225] loop1: detected capacity change from 0 to 1024
[  604.943435][T14225] EXT4-fs: Ignoring removed i_version option
[  605.007700][T14225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.070087][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  605.117029][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.177178][T14213] syzkaller0: entered promiscuous mode
[  605.190352][T14213] syzkaller0: entered allmulticast mode
[  605.221212][T14237] syzkaller0: entered promiscuous mode
[  605.233289][T14237] syzkaller0: entered allmulticast mode
[  605.326805][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.521345][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'.
[  605.548296][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'.
[  605.572850][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'.
[  605.987489][T14278] batadv_slave_0: left promiscuous mode
[  605.993775][T14278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  606.034903][T14278] macsec0: left promiscuous mode
[  606.040136][T14278] macsec0: left allmulticast mode
[  606.045183][T14278] veth1_macvtap: left allmulticast mode
[  606.055026][T14278] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  606.158455][T10946] dummy0: entered promiscuous mode
[  607.490718][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'.
[  607.841746][T14294] loop1: detected capacity change from 0 to 512
[  607.848795][T14294] EXT4-fs: Ignoring removed nobh option
[  607.871768][T14294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  607.879791][T14294] System zones: 1-12
[  607.924940][T14294] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2822: corrupted in-inode xattr: e_value size too large
[  607.939020][T14294] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  607.939347][T14294] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2822: couldn't read orphan inode 15 (err -117)
[  607.948480][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  607.948505][    C1] EXT4-fs (loop1): initial error at time 1782163533: ext4_iget_extra_inode:5180: inode 15
[  607.948542][    C1] EXT4-fs (loop1): last error at time 1782163533: ext4_iget_extra_inode:5180: inode 15
[  607.986306][T14294] loop1: lost filesystem error report for type 5 error -117
[  607.989109][T14294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.022468][   T28] audit: type=1400 audit(1782163533.949:1210): avc:  denied  { write } for  pid=14290 comm="syz.1.2822" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  608.044880][T14215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  608.318326][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'.
[  608.545541][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'.
[  608.764959][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.820233][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.357158][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.717634][T14325] syzkaller0: entered promiscuous mode
[  609.728993][T14325] syzkaller0: entered allmulticast mode
[  610.891102][T14335] lo speed is unknown, defaulting to 1000
[  611.293804][T14350] loop4: detected capacity change from 0 to 1024
[  611.473141][T14350] EXT4-fs: Ignoring removed i_version option
[  611.658779][T14350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.036997][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'.
[  613.928214][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.970994][T10963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  614.085690][T14389] loop2: detected capacity change from 0 to 512
[  614.092430][T14389] EXT4-fs: Ignoring removed nobh option
[  614.136999][T14389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  614.145107][T14389] System zones: 1-12
[  614.151354][T14389] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2852: corrupted in-inode xattr: e_value size too large
[  614.165653][T14389] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  614.166696][T14389] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2852: couldn't read orphan inode 15 (err -117)
[  614.175848][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  614.175868][    C1] EXT4-fs (loop2): initial error at time 1782163540: ext4_iget_extra_inode:5180: inode 15
[  614.175917][    C1] EXT4-fs (loop2): last error at time 1782163540: ext4_iget_extra_inode:5180: inode 15
[  614.213787][T14389] loop2: lost filesystem error report for type 5 error -117
[  614.216252][T14389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.267033][T14389] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  614.290107][   T28] audit: type=1400 audit(1782163540.199:1211): avc:  denied  { write } for  pid=14385 comm="syz.2.2852" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  614.580235][T10963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  615.704398][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.524472][T14434] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2865'.
[  616.969937][T14432] syzkaller0: entered promiscuous mode
[  616.975513][T14432] syzkaller0: entered allmulticast mode
[  617.102148][T14408] lo speed is unknown, defaulting to 1000
[  618.272333][T14408] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.279460][T14408] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.349638][T14454] loop4: detected capacity change from 0 to 512
[  618.356711][T14454] EXT4-fs: Ignoring removed nobh option
[  618.371740][T14454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  618.379696][T14454] System zones: 1-12
[  618.384783][T14454] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2868: corrupted in-inode xattr: e_value size too large
[  618.398859][T14454] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  618.400009][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  618.415555][    C1] EXT4-fs (loop4): initial error at time 1782163544: ext4_iget_extra_inode:5180: inode 15
[  618.425480][    C1] EXT4-fs (loop4): last error at time 1782163544: ext4_iget_extra_inode:5180: inode 15
[  618.441595][T14454] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2868: couldn't read orphan inode 15 (err -117)
[  618.453478][T14454] loop4: lost filesystem error report for type 5 error -117
[  618.542738][T14454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.573990][T14454] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  618.597853][   T28] audit: type=1400 audit(1782163544.509:1212): avc:  denied  { write } for  pid=14445 comm="syz.4.2868" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  618.653478][T14458] loop0: detected capacity change from 0 to 128
[  618.725957][T14458] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  618.788478][T14458] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  618.900034][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  619.237468][T14408] bridge_slave_0: entered allmulticast mode
[  619.244504][T14408] bridge_slave_0: entered promiscuous mode
[  619.251392][T14408] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.258471][T14408] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.265597][T14408] bridge_slave_1: entered allmulticast mode
[  619.281053][T14408] bridge_slave_1: entered promiscuous mode
[  619.478884][T14408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.499153][T14408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.541351][T14408] team0: Port device team_slave_0 added
[  619.548039][T14408] team0: Port device team_slave_1 added
[  619.565949][T14408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.573047][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  619.599422][T14408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.610834][T14408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.617837][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  619.644055][T14408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.674399][T14408] hsr_slave_0: entered promiscuous mode
[  619.680555][T14408] hsr_slave_1: entered promiscuous mode
[  619.686499][T14408] debugfs: 'hsr0' already exists in 'hsr'
[  619.692609][T14408] Cannot create hsr debugfs directory
[  619.892647][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.934038][   T28] audit: type=1400 audit(1782163545.869:1213): avc:  denied  { read } for  pid=3018 comm="dhcpcd" name="n29" dev="tmpfs" ino=23774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  619.970549][T11107] bridge_slave_1: left allmulticast mode
[  619.980238][T11107] bridge_slave_1: left promiscuous mode
[  619.985835][T14483] loop4: detected capacity change from 0 to 128
[  619.993715][   T28] audit: type=1400 audit(1782163545.869:1214): avc:  denied  { open } for  pid=3018 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=23774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  619.993922][T11107] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.041748][T11107] bridge_slave_0: left allmulticast mode
[  620.049461][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'.
[  620.058404][T11107] bridge_slave_0: left promiscuous mode
[  620.064335][T11107] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.070689][T14483] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  620.076480][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'.
[  620.092829][   T28] audit: type=1400 audit(1782163545.869:1215): avc:  denied  { getattr } for  pid=3018 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=23774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  620.117303][T14483] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  620.127846][   T28] audit: type=1400 audit(1782163545.899:1216): avc:  denied  { name_bind } for  pid=14480 comm="syz.2.2877" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  620.196084][T13477] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  620.209047][T11107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  620.237410][T11107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  620.261847][T11107] bond0 (unregistering): Released all slaves
[  620.364810][T14504] loop1: detected capacity change from 0 to 128
[  620.387067][T14504] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  620.409763][T14504] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  620.432023][T11107] hsr_slave_0: left promiscuous mode
[  620.439572][T11107] hsr_slave_1: left promiscuous mode
[  620.445648][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  620.462444][T11107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  620.483118][T11107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  620.493646][   T28] audit: type=1400 audit(1782163546.429:1217): avc:  denied  { write } for  pid=14498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  620.517622][T11107] veth1_macvtap: left allmulticast mode
[  620.521772][   T28] audit: type=1400 audit(1782163546.429:1218): avc:  denied  { create } for  pid=14498 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  620.572372][   T28] audit: type=1400 audit(1782163546.429:1219): avc:  denied  { write } for  pid=14498 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=23849 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  620.599633][   T28] audit: type=1400 audit(1782163546.429:1220): avc:  denied  { append } for  pid=14498 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=23849 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  620.628923][   T28] audit: type=1400 audit(1782163546.539:1221): avc:  denied  { write } for  pid=14517 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  620.651770][   T28] audit: type=1400 audit(1782163546.539:1222): avc:  denied  { unlink } for  pid=14517 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=23849 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  620.655518][T14519] loop1: detected capacity change from 0 to 1024
[  620.709575][T14519] EXT4-fs: Ignoring removed i_version option
[  620.715897][T11107] team0 (unregistering): Port device team_slave_1 removed
[  620.730700][T11107] team0 (unregistering): Port device team_slave_0 removed
[  620.754769][T14519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.789100][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1
[  620.815828][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.016040][T14408] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  621.032972][T14408] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  621.063883][T14408] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  621.086850][T14408] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  621.104975][T14408] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  621.130964][T14408] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  621.147882][T14408] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  621.169065][T14408] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  621.365707][T14552] macvtap1: left promiscuous mode
[  621.372074][T14552] macvtap1: left allmulticast mode
[  621.377356][T14552] batadv0: left allmulticast mode
[  621.494431][T14408] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.534840][T14408] 8021q: adding VLAN 0 to HW filter on device team0
[  621.560214][T11163] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.567375][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.643072][T11051] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.650197][T11051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.745352][T14588] loop1: detected capacity change from 0 to 512
[  621.752341][T14588] EXT4-fs: Ignoring removed nobh option
[  621.878846][T14588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  621.886870][T14588] System zones: 1-12
[  621.894591][T14588] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2896: corrupted in-inode xattr: e_value size too large
[  621.908675][T14588] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  621.909137][T14588] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2896: couldn't read orphan inode 15 (err -117)
[  621.918370][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  621.918385][    C1] EXT4-fs (loop1): initial error at time 1782163547: ext4_iget_extra_inode:5180: inode 15
[  621.918411][    C1] EXT4-fs (loop1): last error at time 1782163547: ext4_iget_extra_inode:5180: inode 15
[  621.956294][T14588] loop1: lost filesystem error report for type 5 error -117
[  621.957927][T14588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.991105][T14588] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  622.056036][T14408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  622.160873][T14408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  622.929873][T14408] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.266750][T14408] veth0_vlan: entered promiscuous mode
[  623.301611][T14408] veth1_vlan: entered promiscuous mode
[  623.331461][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.337639][T14408] veth0_macvtap: entered promiscuous mode
[  623.357092][T14408] veth1_macvtap: entered promiscuous mode
[  623.378417][T14408] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.400358][T14408] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.422278][T10746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.431130][T10746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.451833][T10746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.493565][T10746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.686739][T14652] loop1: detected capacity change from 0 to 512
[  623.693710][T14652] EXT4-fs: Ignoring removed nobh option
[  623.708490][T14652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  623.716564][T14652] System zones: 1-12
[  623.721947][T14652] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2905: corrupted in-inode xattr: e_value size too large
[  623.736002][T14652] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  623.738382][T14652] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2905: couldn't read orphan inode 15 (err -117)
[  623.747673][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  623.747690][    C1] EXT4-fs (loop1): initial error at time 1782163549: ext4_iget_extra_inode:5180: inode 15
[  623.747721][    C1] EXT4-fs (loop1): last error at time 1782163549: ext4_iget_extra_inode:5180: inode 15
[  623.785475][T14652] loop1: lost filesystem error report for type 5 error -117
[  623.788441][T14652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.140205][T14592] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  624.610988][T14679] syzkaller0: entered promiscuous mode
[  624.616549][T14679] syzkaller0: entered allmulticast mode
[  624.788193][T14699] loop4: detected capacity change from 0 to 128
[  624.838074][T14699] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  624.851786][T14699] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  624.865679][T14702] loop2: detected capacity change from 0 to 128
[  624.884057][T14702] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  624.918870][T13477] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  624.928168][T14702] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  624.951069][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.169803][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.301421][T14714] lo speed is unknown, defaulting to 1000
[  625.432395][T14724] macsec0: entered promiscuous mode
[  625.455345][T14724] macsec0: entered allmulticast mode
[  625.469407][T14724] veth1_macvtap: entered allmulticast mode
[  625.815325][T14733] syzkaller0: entered promiscuous mode
[  625.820824][T14733] syzkaller0: entered allmulticast mode
[  626.310557][T14750] loop2: detected capacity change from 0 to 512
[  626.317662][T14750] EXT4-fs: Ignoring removed nobh option
[  626.351773][T14750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  626.359796][T14750] System zones: 1-12
[  626.366922][T14750] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2926: corrupted in-inode xattr: e_value size too large
[  626.380938][T14750] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  626.381765][T14750] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2926: couldn't read orphan inode 15 (err -117)
[  626.391019][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  626.391039][    C1] EXT4-fs (loop2): initial error at time 1782163552: ext4_iget_extra_inode:5180: inode 15
[  626.391069][    C1] EXT4-fs (loop2): last error at time 1782163552: ext4_iget_extra_inode:5180: inode 15
[  626.428799][T14750] loop2: lost filesystem error report for type 5 error -117
[  626.430107][T14750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.453890][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  626.453921][   T28] audit: type=1400 audit(1782163552.389:1233): avc:  denied  { write } for  pid=14740 comm="syz.2.2926" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  628.211765][T14778] macvlan2: entered promiscuous mode
[  628.217088][T14778] macvlan2: entered allmulticast mode
[  629.160658][T14744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  629.235715][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.620635][T14801] syzkaller0: entered promiscuous mode
[  629.626155][T14801] syzkaller0: entered allmulticast mode
[  629.712973][T14809] loop4: detected capacity change from 0 to 1024
[  629.719896][T14809] EXT4-fs: Ignoring removed i_version option
[  629.733606][T14809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.104907][T14826] loop0: detected capacity change from 0 to 512
[  630.112423][T14826] EXT4-fs: Ignoring removed nobh option
[  630.133805][T14826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  630.141894][T14826] System zones: 1-12
[  630.146264][T14826] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.2952: corrupted in-inode xattr: e_value size too large
[  630.160368][T14826] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  630.162230][T14826] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2952: couldn't read orphan inode 15 (err -117)
[  630.171408][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  630.171429][    C1] EXT4-fs (loop0): initial error at time 1782163556: ext4_iget_extra_inode:5180: inode 15
[  630.171456][    C1] EXT4-fs (loop0): last error at time 1782163556: ext4_iget_extra_inode:5180: inode 15
[  630.209199][T14826] loop0: lost filesystem error report for type 5 error -117
[  630.312159][T14826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.468203][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.489230][T14838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.497832][T14838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.703420][T14844] lo speed is unknown, defaulting to 1000
[  631.845218][T11172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.856524][T14844] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.863707][T14844] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.871032][T14844] bridge_slave_0: entered allmulticast mode
[  631.877588][T14844] bridge_slave_0: entered promiscuous mode
[  631.884366][T14844] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.891544][T14844] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.898698][T14844] bridge_slave_1: entered allmulticast mode
[  631.905002][T14844] bridge_slave_1: entered promiscuous mode
[  631.918385][T11172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.935971][T14844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.946560][T14844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.964693][T14844] team0: Port device team_slave_0 added
[  631.971196][T14844] team0: Port device team_slave_1 added
[  631.985936][T14844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.992881][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.018899][T14844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.030228][T14844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.037357][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.063591][T14844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.076681][T11172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.102307][T14844] hsr_slave_0: entered promiscuous mode
[  632.108130][T14844] hsr_slave_1: entered promiscuous mode
[  632.114129][T14844] debugfs: 'hsr0' already exists in 'hsr'
[  632.119834][T14844] Cannot create hsr debugfs directory
[  632.145200][T11172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.229423][T11172] bridge_slave_1: left allmulticast mode
[  632.235106][T11172] bridge_slave_1: left promiscuous mode
[  632.240815][T11172] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.248550][T11172] bridge_slave_0: left allmulticast mode
[  632.254289][T11172] bridge_slave_0: left promiscuous mode
[  632.260006][T11172] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.322426][T11172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  632.332218][T11172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.341921][T11172] bond0 (unregistering): Released all slaves
[  632.399386][T11172] hsr_slave_0: left promiscuous mode
[  632.404912][T11172] hsr_slave_1: left promiscuous mode
[  632.410953][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  632.418359][T11172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.426077][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.433484][T11172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.443624][T11172] veth1_macvtap: left promiscuous mode
[  632.449072][T11172] veth0_macvtap: left promiscuous mode
[  632.454636][T11172] veth1_vlan: left promiscuous mode
[  632.459837][T11172] veth0_vlan: left promiscuous mode
[  632.516986][T11172] team0 (unregistering): Port device team_slave_1 removed
[  632.526341][T11172] team0 (unregistering): Port device team_slave_0 removed
[  632.859863][T14819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  632.872546][T14844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  632.900205][T14844] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  632.912944][T14844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  632.928006][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.940490][T14844] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  632.948543][T14844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  632.958509][T14844] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  632.970651][T14844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  632.989883][T14844] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  633.039085][T14844] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.057558][T14844] 8021q: adding VLAN 0 to HW filter on device team0
[  633.086780][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.093872][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.117884][   T28] audit: type=1400 audit(1782163559.049:1234): avc:  denied  { write } for  pid=14874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  633.151594][T11104] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.158669][T11104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  633.182985][T14844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  633.211224][   T28] audit: type=1400 audit(1782163559.149:1235): avc:  denied  { write } for  pid=14906 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  633.314120][T14913] syzkaller0: entered promiscuous mode
[  633.319823][T14913] syzkaller0: entered allmulticast mode
[  633.468571][T14844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  633.489214][   T28] audit: type=1400 audit(1782163559.419:1236): avc:  denied  { write } for  pid=14922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  633.543939][   T28] audit: type=1400 audit(1782163559.479:1237): avc:  denied  { write } for  pid=14944 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  633.619856][T14844] veth0_vlan: entered promiscuous mode
[  633.627955][T14844] veth1_vlan: entered promiscuous mode
[  633.653818][T14844] veth0_macvtap: entered promiscuous mode
[  633.664227][T14844] veth1_macvtap: entered promiscuous mode
[  633.681321][T14844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.695465][T14844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.712178][T11172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.724082][T11172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.741533][T11172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.752734][T11172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.588311][T14972] loop2: detected capacity change from 0 to 512
[  634.595426][T14972] EXT4-fs: Ignoring removed nobh option
[  634.618865][T14972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  634.627002][T14972] System zones: 1-12
[  634.743860][T14972] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2976: corrupted in-inode xattr: e_value size too large
[  634.757991][T14972] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  634.759051][T14972] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2976: couldn't read orphan inode 15 (err -117)
[  634.768263][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  634.768277][    C1] EXT4-fs (loop2): initial error at time 1782163560: ext4_iget_extra_inode:5180: inode 15
[  634.768303][    C1] EXT4-fs (loop2): last error at time 1782163560: ext4_iget_extra_inode:5180: inode 15
[  634.806178][T14972] loop2: lost filesystem error report for type 5 error -117
[  634.809962][T14972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.173385][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'.
[  635.326171][T14991] syzkaller0: entered promiscuous mode
[  635.338592][T14991] syzkaller0: entered allmulticast mode
[  636.575249][T14950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  636.646742][T14975] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  636.726429][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.050916][T15126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.070317][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  637.081065][T15126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.776180][T15142] macsec0: entered promiscuous mode
[  637.818105][T15142] macsec0: entered allmulticast mode
[  637.842035][T15142] veth1_macvtap: entered allmulticast mode
[  637.965288][T15136] lo speed is unknown, defaulting to 1000
[  638.827967][T15163] loop4: detected capacity change from 0 to 512
[  638.835197][T15163] EXT4-fs: Ignoring removed nobh option
[  638.848178][T15163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  638.856262][T15163] System zones: 1-12
[  638.864169][T15163] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3001: corrupted in-inode xattr: e_value size too large
[  638.918802][T15163] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  638.918948][T15163] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3001: couldn't read orphan inode 15 (err -117)
[  638.928517][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  638.928532][    C1] EXT4-fs (loop4): initial error at time 1782163564: ext4_iget_extra_inode:5180: inode 15
[  638.928558][    C1] EXT4-fs (loop4): last error at time 1782163564: ext4_iget_extra_inode:5180: inode 15
[  638.972924][T15166] loop0: detected capacity change from 0 to 1024
[  638.987436][T15166] EXT4-fs: Ignoring removed i_version option
[  639.002561][T15163] loop4: lost filesystem error report for type 5 error -117
[  639.004713][T15163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.056201][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.084027][T15166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.232049][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.252090][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.536535][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.605191][T15184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.625276][T15184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.951317][T15192] macsec0: entered promiscuous mode
[  639.961626][T15192] macsec0: entered allmulticast mode
[  639.966951][T15192] veth1_macvtap: entered allmulticast mode
[  639.993731][T15190] lo speed is unknown, defaulting to 1000
[  640.553815][T15205] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3015'.
[  641.882802][T15227] loop3: detected capacity change from 0 to 128
[  641.909611][T15227] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  641.946433][T15227] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  641.997232][T14408] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  642.083959][T15235] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3027'.
[  642.505967][T15248] syzkaller0: entered promiscuous mode
[  642.579203][T15248] syzkaller0: entered allmulticast mode
[  642.753112][T15259] loop0: detected capacity change from 0 to 128
[  642.765380][T15259] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  642.831816][T15259] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  642.998555][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  643.146986][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'.
[  643.167713][T15275] geneve1: entered promiscuous mode
[  643.173983][T15275] geneve1: entered allmulticast mode
[  643.180838][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'.
[  643.200249][T15275] geneve1: left promiscuous mode
[  643.209506][T15275] geneve1: left allmulticast mode
[  643.598750][   T28] audit: type=1400 audit(1782163569.529:1238): avc:  denied  { getopt } for  pid=15291 comm="syz.2.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  643.738801][T15299] loop1: detected capacity change from 0 to 1024
[  643.796255][T15299] EXT4-fs: Ignoring removed i_version option
[  643.847893][T15299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.860909][T15295] macsec0: left promiscuous mode
[  643.866038][T15295] macsec0: left allmulticast mode
[  643.871184][T15295] veth1_macvtap: left allmulticast mode
[  643.991899][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.069538][   T28] audit: type=1400 audit(1782163569.999:1239): avc:  denied  { shutdown } for  pid=15302 comm="syz.2.3049" laddr=::1 lport=53551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  644.159545][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'.
[  644.402325][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'.
[  644.665039][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'.
[  644.713126][   T28] audit: type=1400 audit(1782163570.649:1240): avc:  denied  { name_connect } for  pid=15312 comm="syz.1.3053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  644.981223][T15321] dummy0: entered allmulticast mode
[  645.030212][T15321] dummy0: entered promiscuous mode
[  645.035501][T15321] macvlan2: left promiscuous mode
[  645.049658][T15321] macvlan2: left allmulticast mode
[  645.076420][T15321] dummy0: left allmulticast mode
[  646.354213][T15354] macvlan3: entered promiscuous mode
[  646.354231][T15354] macvlan3: entered allmulticast mode
[  646.354385][T15354] team0: Device macvlan3 is already an upper device of the team interface
[  646.373892][T15357] syzkaller0: entered promiscuous mode
[  646.373982][T15357] syzkaller0: entered allmulticast mode
[  646.531662][T15372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15372 comm=syz.1.3075
[  646.720042][T15380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3078'.
[  647.676916][T15403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15403 comm=syz.4.3087
[  647.759169][T15399] macsec0: left promiscuous mode
[  647.804144][T15399] macsec0: left allmulticast mode
[  647.875779][T15399] veth1_macvtap: left allmulticast mode
[  648.021830][T15408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3089'.
[  648.060046][T10959] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  648.592308][T10959] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  648.637700][T15430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3099'.
[  651.251121][T15473] syzkaller0: entered promiscuous mode
[  651.252828][T15477] loop2: detected capacity change from 0 to 1024
[  651.274334][T15473] syzkaller0: entered allmulticast mode
[  651.296680][T15477] EXT4-fs: Ignoring removed i_version option
[  651.421878][T15477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  652.193380][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'.
[  652.235054][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'.
[  652.455318][T15514] lo speed is unknown, defaulting to 1000
[  652.637999][T15521] macsec0: entered promiscuous mode
[  652.648392][T15521] macsec0: entered allmulticast mode
[  652.668256][T15521] veth1_macvtap: entered allmulticast mode
[  652.859898][T15529] macvlan2: entered promiscuous mode
[  652.892272][T15529] macvlan2: entered allmulticast mode
[  652.918709][T15529] team0: Device macvlan2 is already an upper device of the team interface
[  655.099147][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.211674][T15502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  655.334139][   T28] audit: type=1400 audit(1782163581.269:1241): avc:  denied  { name_connect } for  pid=15565 comm="syz.1.3146" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  655.551297][T15585] macsec0: entered promiscuous mode
[  655.564030][T15585] macsec0: entered allmulticast mode
[  655.575423][T15585] veth1_macvtap: entered allmulticast mode
[  655.612331][T15573] lo speed is unknown, defaulting to 1000
[  658.463623][T15578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  658.579872][T15620] loop0: detected capacity change from 0 to 256
[  658.659793][T15633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.669813][T15633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  661.678616][T15637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  661.766771][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'.
[  662.120620][T15701] lo speed is unknown, defaulting to 1000
[  662.695726][T15724] loop4: detected capacity change from 0 to 512
[  662.741907][T15712] lo speed is unknown, defaulting to 1000
[  663.370272][T15724] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3199: bad orphan inode 11862016
[  663.384128][T15724] loop4: lost filesystem error report for type 5 error -117
[  663.420120][T15724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  663.491095][T15724] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  663.568630][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  664.268358][T15736] lo speed is unknown, defaulting to 1000
[  664.937523][T15785] loop2: detected capacity change from 0 to 256
[  664.956359][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  664.964276][T15736] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.973519][T15736] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.974818][T15785] FAT-fs (loop2): Filesystem has been set read-only
[  664.980777][T15736] bridge_slave_0: entered allmulticast mode
[  664.998148][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.000137][T15736] bridge_slave_0: entered promiscuous mode
[  665.013792][T15736] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.018571][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.021104][T15736] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.036765][T15736] bridge_slave_1: entered allmulticast mode
[  665.038352][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.043519][T15736] bridge_slave_1: entered promiscuous mode
[  665.062945][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.071805][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.080633][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.096118][T15736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.106479][T15736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.115654][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.130772][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.135945][T15736] team0: Port device team_slave_0 added
[  665.146221][T15736] team0: Port device team_slave_1 added
[  665.154874][T15785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  665.227999][T15736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  665.242651][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.389458][T15736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.409598][T15736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.419991][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.454841][T15736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.521901][T15736] hsr_slave_0: entered promiscuous mode
[  665.528237][T15736] hsr_slave_1: entered promiscuous mode
[  665.537273][T15736] debugfs: 'hsr0' already exists in 'hsr'
[  665.546129][T15736] Cannot create hsr debugfs directory
[  665.690805][T15736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.791213][T15736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.851595][T15736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.882726][T15828] loop2: detected capacity change from 0 to 512
[  665.910630][T15736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.988474][T15736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  665.998403][T15736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  666.006262][T15736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  666.015086][T15736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  666.022884][T15736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  666.031922][T15736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  666.039675][T15736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  666.048722][T15736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  666.256960][T15736] 8021q: adding VLAN 0 to HW filter on device bond0
[  666.284946][T15736] 8021q: adding VLAN 0 to HW filter on device team0
[  666.305911][T11168] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.313172][T11168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.339178][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.346268][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.529623][T15736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  666.636870][T15736] veth0_vlan: entered promiscuous mode
[  666.655330][T15736] veth1_vlan: entered promiscuous mode
[  666.683881][T15736] veth0_macvtap: entered promiscuous mode
[  666.698587][T15736] veth1_macvtap: entered promiscuous mode
[  666.721750][T15736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.739366][T15736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.255549][   T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.264317][   T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.286955][   T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.298934][   T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.404215][T15883] loop2: detected capacity change from 0 to 128
[  669.423023][T15873] loop3: detected capacity change from 0 to 8192
[  669.619139][T15895] loop4: detected capacity change from 0 to 1024
[  669.639115][T15898] loop3: detected capacity change from 0 to 8192
[  669.649326][T15895] EXT4-fs: Ignoring removed i_version option
[  669.716103][T15895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  670.516001][T15930] loop0: detected capacity change from 0 to 512
[  670.615862][T15930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  670.686352][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.696392][T15940] loop3: detected capacity change from 0 to 512
[  670.708951][T15940] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  670.786667][T15940] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  670.806470][T15940] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3262: Corrupt directory, running e2fsck is recommended
[  670.820886][T15940] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  670.825560][T15949] loop1: detected capacity change from 0 to 512
[  670.829143][T15940] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3262: corrupted in-inode xattr: e_name out of bounds
[  670.849223][T15940] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  670.852182][T15940] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3262: couldn't read orphan inode 15 (err -117)
[  670.859970][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  670.879570][    C0] EXT4-fs (loop3): initial error at time 1782163596: ext4_iget_extra_inode:5180: inode 15
[  670.889519][    C0] EXT4-fs (loop3): last error at time 1782163596: ext4_iget_extra_inode:5180: inode 15
[  670.897255][T15940] loop3: lost filesystem error report for type 5 error -117
[  670.904497][T15949] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3266: bad orphan inode 11862016
[  670.924487][T15940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  670.943168][T15949] loop1: lost filesystem error report for type 5 error -117
[  670.944084][T15949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  670.999220][T15940] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  671.011190][T15949] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  671.020503][T15940] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  671.032791][T15940] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3262: Corrupt directory, running e2fsck is recommended
[  671.050632][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  671.072715][T15940] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  671.100164][T15940] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  671.124840][T15940] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3262: Corrupt directory, running e2fsck is recommended
[  671.144980][T15965] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  671.163761][T15965] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  671.181513][T15965] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3262: Corrupt directory, running e2fsck is recommended
[  671.205331][T15940] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  671.224078][T15940] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.3262: path /77/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  671.259880][T15940] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.3262: path /77/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  674.098319][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.098923][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.132486][T15972] loop3: detected capacity change from 0 to 256
[  674.729391][T15993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3282'.
[  674.765026][T15991] loop1: detected capacity change from 0 to 8192
[  674.795161][T15998] loop0: detected capacity change from 0 to 1024
[  674.811533][T15998] EXT4-fs: Ignoring removed bh option
[  674.837263][T15998] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  674.860864][T16002] loop3: detected capacity change from 0 to 512
[  674.868465][T15998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  674.889872][T16002] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  674.909038][T16002] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  674.922615][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.932618][T16002] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3284: Corrupt directory, running e2fsck is recommended
[  674.946760][T15994] lo speed is unknown, defaulting to 1000
[  674.950917][T16002] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  674.960983][T16002] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3284: corrupted in-inode xattr: e_name out of bounds
[  674.974983][T16002] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  674.979672][T16002] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3284: couldn't read orphan inode 15 (err -117)
[  674.989972][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  675.007045][    C0] EXT4-fs (loop3): initial error at time 1782163600: ext4_iget_extra_inode:5180: inode 15
[  675.016973][    C0] EXT4-fs (loop3): last error at time 1782163600: ext4_iget_extra_inode:5180: inode 15
[  675.042578][T16002] loop3: lost filesystem error report for type 5 error -117
[  675.044677][T16002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  675.124410][T16002] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  675.151140][T16016] syzkaller0: entered promiscuous mode
[  675.156631][T16016] syzkaller0: entered allmulticast mode
[  675.159978][T16002] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  675.242314][T16002] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3284: Corrupt directory, running e2fsck is recommended
[  675.272285][T16021] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  675.286361][T16021] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  675.328497][T16021] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3284: Corrupt directory, running e2fsck is recommended
[  675.402250][T15994] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.423144][T15994] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.432563][T15994] bridge_slave_0: entered allmulticast mode
[  675.440077][T15994] bridge_slave_0: entered promiscuous mode
[  675.447042][T15994] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.454111][T15994] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.461411][T15994] bridge_slave_1: entered allmulticast mode
[  675.467893][T15994] bridge_slave_1: entered promiscuous mode
[  675.488782][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.499651][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.509253][T16035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3293'.
[  675.530476][T15994] team0: Port device team_slave_0 added
[  675.536968][T15994] team0: Port device team_slave_1 added
[  675.553652][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  675.560669][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  675.588268][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  675.600751][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  675.607727][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  675.633956][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  676.148656][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.171076][T16038] loop4: detected capacity change from 0 to 1024
[  676.181110][T16038] EXT4-fs: Ignoring removed bh option
[  676.187840][T16038] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  676.233117][T16038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.235271][T15994] hsr_slave_0: entered promiscuous mode
[  676.262392][T15994] hsr_slave_1: entered promiscuous mode
[  676.266864][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.268502][T15994] debugfs: 'hsr0' already exists in 'hsr'
[  676.282788][T15994] Cannot create hsr debugfs directory
[  677.055554][T16056] syzkaller0: entered promiscuous mode
[  677.067902][T16056] syzkaller0: entered allmulticast mode
[  677.123733][T15994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.259752][T15994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.327276][T16069] loop3: detected capacity change from 0 to 512
[  677.370785][T16069] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  677.383099][T16069] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  677.409854][T16069] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3302: Corrupt directory, running e2fsck is recommended
[  677.436941][T16069] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  677.450497][T16069] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3302: corrupted in-inode xattr: e_name out of bounds
[  677.472697][T16069] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  677.473298][T16069] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3302: couldn't read orphan inode 15 (err -117)
[  677.482455][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  677.482476][    C1] EXT4-fs (loop3): initial error at time 1782163603: ext4_iget_extra_inode:5180: inode 15
[  677.482510][    C1] EXT4-fs (loop3): last error at time 1782163603: ext4_iget_extra_inode:5180: inode 15
[  677.493066][T16075] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3304'.
[  677.494430][T16069] loop3: lost filesystem error report for type 5 error -117
[  677.529930][T16069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  677.557262][T16069] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  677.591448][T16069] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  677.611466][T16069] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3302: Corrupt directory, running e2fsck is recommended
[  677.633174][T16080] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  677.651425][T16080] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  677.673170][T16080] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3302: Corrupt directory, running e2fsck is recommended
[  679.311896][T16005] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  680.400178][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.400875][T15994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.489725][T16102] loop4: detected capacity change from 0 to 1024
[  680.499325][T16102] EXT4-fs: Ignoring removed i_version option
[  680.650031][T16102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  680.753761][T16108] syzkaller0: entered promiscuous mode
[  680.764036][T16108] syzkaller0: entered allmulticast mode
[  680.828087][T15994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.196495][T15994] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  681.258039][T15994] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  681.297860][T15994] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  682.063120][T15994] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  682.091430][T15994] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  682.118508][T15994] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  682.309317][T16121] macsec0: left promiscuous mode
[  682.322425][T16121] macsec0: left allmulticast mode
[  682.353855][T16121] veth1_macvtap: left allmulticast mode
[  682.439157][T15994] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  682.462030][T15994] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  682.483455][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.536762][T15994] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.566434][T15994] 8021q: adding VLAN 0 to HW filter on device team0
[  682.590359][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.597464][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.614775][T11168] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.621842][T11168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.666527][T15994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  683.348084][T16149] syzkaller0: entered promiscuous mode
[  683.365989][T16149] syzkaller0: entered allmulticast mode
[  683.371892][T16154] loop1: detected capacity change from 0 to 512
[  683.393214][T16154] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3326: bad orphan inode 11862016
[  683.422180][T16154] loop1: lost filesystem error report for type 5 error -117
[  683.423423][T16154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  683.449171][T16154] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  683.482045][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  683.571391][T15994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  683.659658][T16181] loop4: detected capacity change from 0 to 512
[  683.662387][T15994] veth0_vlan: entered promiscuous mode
[  683.682145][T15994] veth1_vlan: entered promiscuous mode
[  683.706008][T16181] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  683.723937][T15994] veth0_macvtap: entered promiscuous mode
[  683.740588][T16181] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  683.750776][T16181] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3330: Corrupt directory, running e2fsck is recommended
[  683.768857][T16181] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  683.778274][T16181] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3330: corrupted in-inode xattr: e_name out of bounds
[  683.794377][T16181] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  683.794571][T16181] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3330: couldn't read orphan inode 15 (err -117)
[  683.803710][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  683.803725][    C1] EXT4-fs (loop4): initial error at time 1782163609: ext4_iget_extra_inode:5180: inode 15
[  683.803752][    C1] EXT4-fs (loop4): last error at time 1782163609: ext4_iget_extra_inode:5180: inode 15
[  683.852136][T16181] loop4: lost filesystem error report for type 5 error -117
[  683.852813][T16181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.874722][T15994] veth1_macvtap: entered promiscuous mode
[  683.887434][   T28] audit: type=1400 audit(1782163609.809:1242): avc:  denied  { name_bind } for  pid=16190 comm="syz.0.3334" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  683.913812][T15994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.927447][T16181] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  683.933972][T15994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  683.986047][T16181] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  684.005266][T11172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.017100][T16181] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3330: Corrupt directory, running e2fsck is recommended
[  684.066891][T11172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.106608][T16194] loop0: detected capacity change from 0 to 512
[  684.136684][T11172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.147633][T16195] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.197488][T16194] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.220868][T11172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.258406][T16195] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  684.295809][T16194] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  684.364980][T16195] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3330: Corrupt directory, running e2fsck is recommended
[  684.372818][T16194] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3335: Corrupt directory, running e2fsck is recommended
[  684.409209][T16181] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.421847][T16194] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  684.444105][T16194] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.3335: corrupted in-inode xattr: e_name out of bounds
[  684.460842][T16198] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.472786][T16194] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  684.472858][T16181] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  684.477594][T16198] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  684.482072][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  684.482091][    C1] EXT4-fs (loop0): initial error at time 1782163610: ext4_iget_extra_inode:5180: inode 15
[  684.482121][    C1] EXT4-fs (loop0): last error at time 1782163610: ext4_iget_extra_inode:5180: inode 15
[  684.482811][T16194] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3335: couldn't read orphan inode 15 (err -117)
[  684.551500][T16181] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.3330: path /132/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  684.591043][T16194] loop0: lost filesystem error report for type 5 error -117
[  684.608482][T16194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.662570][T16204] macsec0: entered promiscuous mode
[  684.694875][T16204] macsec0: entered allmulticast mode
[  684.701317][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.709107][T16194] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.727695][T16194] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  684.750859][T16204] veth1_macvtap: entered allmulticast mode
[  684.780210][T16194] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3335: Corrupt directory, running e2fsck is recommended
[  684.785742][T16221] loop1: detected capacity change from 0 to 1024
[  684.815075][T16221] EXT4-fs: Ignoring removed i_version option
[  684.820753][T16219] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.840654][T16219] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  684.857246][T16224] loop4: detected capacity change from 0 to 1024
[  684.860437][T16212] syzkaller0: entered promiscuous mode
[  684.869291][T16212] syzkaller0: entered allmulticast mode
[  684.870546][T16219] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3335: Corrupt directory, running e2fsck is recommended
[  684.891663][T16221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.918965][T16224] EXT4-fs: Ignoring removed bh option
[  684.924707][T16224] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  684.937872][T16222] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  684.960272][T16224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  684.972411][T16222] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  684.995480][T16222] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3335: Corrupt directory, running e2fsck is recommended
[  685.019512][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.034305][T16194] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  685.064360][T16202] lo speed is unknown, defaulting to 1000
[  685.096172][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.218530][T16249] loop3: detected capacity change from 0 to 512
[  686.277661][T16249] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  686.312203][T16249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  686.368222][T16249] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3348: bad orphan inode 131083
[  686.389796][T16249] loop3: lost filesystem error report for type 5 error -117
[  686.390348][T16249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.466115][T16254] loop4: detected capacity change from 0 to 512
[  686.492687][   T28] audit: type=1400 audit(1782163612.399:1243): avc:  denied  { write } for  pid=16248 comm="syz.3.3348" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  686.523874][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.543352][T16254] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  686.597940][T16254] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  686.612156][   T28] audit: type=1400 audit(1782163612.399:1244): avc:  denied  { remove_name } for  pid=16248 comm="syz.3.3348" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  686.676008][T16254] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3349: Corrupt directory, running e2fsck is recommended
[  686.705754][T16254] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  686.713934][T16254] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3349: corrupted in-inode xattr: e_name out of bounds
[  686.746034][T16254] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  686.746201][T16254] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3349: couldn't read orphan inode 15 (err -117)
[  686.755369][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  686.755383][    C1] EXT4-fs (loop4): initial error at time 1782163612: ext4_iget_extra_inode:5180: inode 15
[  686.755422][    C1] EXT4-fs (loop4): last error at time 1782163612: ext4_iget_extra_inode:5180: inode 15
[  686.842814][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.860452][T16254] loop4: lost filesystem error report for type 5 error -117
[  686.861743][T16254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  686.936446][T16254] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  686.966983][T16254] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  686.977092][T16254] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3349: Corrupt directory, running e2fsck is recommended
[  687.004391][T16265] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  687.049815][T16265] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  687.079082][T16265] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3349: Corrupt directory, running e2fsck is recommended
[  687.119911][T16270] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  687.124736][T16272] syzkaller0: entered promiscuous mode
[  687.147273][T16272] syzkaller0: entered allmulticast mode
[  687.155590][T16270] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  687.182450][T16270] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3349: Corrupt directory, running e2fsck is recommended
[  687.238619][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.381029][T16280] loop4: detected capacity change from 0 to 512
[  687.453603][T16280] EXT4-fs: Ignoring removed nomblk_io_submit option
[  687.462516][T16280] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3355: corrupted in-inode xattr: invalid ea_ino
[  687.476032][T16280] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  687.477298][T16280] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3355: couldn't read orphan inode 15 (err -117)
[  687.479964][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  687.504661][    C1] EXT4-fs (loop4): initial error at time 1782163613: ext4_iget_extra_inode:5180: inode 15
[  687.513725][T16288] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3361'.
[  687.514589][    C1] EXT4-fs (loop4): last error at time 1782163613: ext4_iget_extra_inode:5180: inode 15
[  687.526394][T16280] loop4: lost filesystem error report for type 5 error -117
[  687.680830][T16280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  687.883799][T16294] loop1: detected capacity change from 0 to 1024
[  687.963901][T16294] EXT4-fs: Ignoring removed i_version option
[  688.207397][   T28] audit: type=1400 audit(1782163614.139:1245): avc:  denied  { write } for  pid=16278 comm="syz.4.3355" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  688.234224][T16294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.258247][T16302] loop3: detected capacity change from 0 to 512
[  688.311906][T16302] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  688.323399][T16302] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  688.335970][   T28] audit: type=1400 audit(1782163614.139:1246): avc:  denied  { append } for  pid=16278 comm="syz.4.3355" path="/137/file0/file0/cpuset.effective_cpus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  688.391768][T16302] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3365: Corrupt directory, running e2fsck is recommended
[  688.431544][T16309] loop2: detected capacity change from 0 to 1024
[  688.441923][T16309] EXT4-fs: Ignoring removed i_version option
[  688.478602][T16302] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  688.487380][T16302] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3365: corrupted in-inode xattr: e_name out of bounds
[  688.503164][T16302] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  688.503360][T16302] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3365: couldn't read orphan inode 15 (err -117)
[  688.512662][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  688.512679][    C1] EXT4-fs (loop3): initial error at time 1782163614: ext4_iget_extra_inode:5180: inode 15
[  688.512710][    C1] EXT4-fs (loop3): last error at time 1782163614: ext4_iget_extra_inode:5180: inode 15
[  688.538988][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  688.542584][T16309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.570134][T16302] loop3: lost filesystem error report for type 5 error -117
[  688.586021][T16302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.759566][T16302] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  689.576354][T16302] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  689.599747][T16302] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3365: Corrupt directory, running e2fsck is recommended
[  689.780077][T16322] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  689.793893][T16322] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  689.804057][T16322] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3365: Corrupt directory, running e2fsck is recommended
[  689.818843][T16302] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  690.297708][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  690.357179][T16302] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  690.613737][T16302] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3365: Corrupt directory, running e2fsck is recommended
[  690.712621][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  690.727585][T16332] loop1: detected capacity change from 0 to 512
[  690.757942][T16332] EXT4-fs: Ignoring removed nomblk_io_submit option
[  690.778682][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'.
[  690.803181][T16332] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3373: corrupted in-inode xattr: invalid ea_ino
[  690.842128][T16332] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  690.842217][T16332] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3373: couldn't read orphan inode 15 (err -117)
[  690.851382][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  690.851403][    C1] EXT4-fs (loop1): initial error at time 1782163616: ext4_iget_extra_inode:5180: inode 15
[  690.851439][    C1] EXT4-fs (loop1): last error at time 1782163616: ext4_iget_extra_inode:5180: inode 15
[  690.923487][T16338] syzkaller0: entered promiscuous mode
[  690.936307][T16338] syzkaller0: entered allmulticast mode
[  690.980465][T16332] loop1: lost filesystem error report for type 5 error -117
[  690.981000][T16332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  691.184001][   T28] audit: type=1400 audit(1782163617.119:1247): avc:  denied  { write } for  pid=16331 comm="syz.1.3373" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  691.353713][T15994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.440298][T16350] lo speed is unknown, defaulting to 1000
[  691.591642][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.337212][T16361] loop1: detected capacity change from 0 to 512
[  692.414268][T16361] EXT4-fs: Ignoring removed nomblk_io_submit option
[  692.464292][T16361] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3381: corrupted in-inode xattr: invalid ea_ino
[  692.483332][T16363] macsec0: entered promiscuous mode
[  692.492436][T16361] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  692.492572][T16361] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3381: couldn't read orphan inode 15 (err -117)
[  692.501731][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  692.501748][    C1] EXT4-fs (loop1): initial error at time 1782163618: ext4_iget_extra_inode:5180: inode 15
[  692.501783][    C1] EXT4-fs (loop1): last error at time 1782163618: ext4_iget_extra_inode:5180: inode 15
[  692.502081][T16363] macsec0: entered allmulticast mode
[  692.545205][T16363] veth1_macvtap: entered allmulticast mode
[  692.568091][T16361] loop1: lost filesystem error report for type 5 error -117
[  692.568637][T16361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  692.616678][T16371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3387'.
[  692.626346][T16371] IPv6: NLM_F_CREATE should be specified when creating new route
[  692.635977][T16371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3387'.
[  692.752153][T16356] lo speed is unknown, defaulting to 1000
[  692.826338][   T28] audit: type=1400 audit(1782163618.759:1248): avc:  denied  { write } for  pid=16360 comm="syz.1.3381" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  692.961757][T16386] loop3: detected capacity change from 0 to 512
[  692.979836][T16386] EXT4-fs: Ignoring removed nomblk_io_submit option
[  693.014753][T16386] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3392: corrupted in-inode xattr: invalid ea_ino
[  693.028147][T16386] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  693.028241][T16386] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3392: couldn't read orphan inode 15 (err -117)
[  693.037430][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  693.037445][    C0] EXT4-fs (loop3): initial error at time 1782163618: ext4_iget_extra_inode:5180: inode 15
[  693.037474][    C0] EXT4-fs (loop3): last error at time 1782163618: ext4_iget_extra_inode:5180: inode 15
[  693.075808][T16386] loop3: lost filesystem error report for type 5 error -117
[  693.076501][T16386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  693.144243][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.459892][   T28] audit: type=1400 audit(1782163619.329:1249): avc:  denied  { write } for  pid=16385 comm="syz.3.3392" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  693.883654][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.900867][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3395'.
[  693.934776][T16400] loop0: detected capacity change from 0 to 512
[  693.943262][T16400] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  693.956912][T16400] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  693.967472][T16400] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3396: Corrupt directory, running e2fsck is recommended
[  693.981494][T16400] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  693.989744][T16400] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.3396: corrupted in-inode xattr: e_name out of bounds
[  694.003741][T16400] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  694.003896][T16400] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3396: couldn't read orphan inode 15 (err -117)
[  694.013021][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  694.013037][    C0] EXT4-fs (loop0): initial error at time 1782163619: ext4_iget_extra_inode:5180: inode 15
[  694.013077][    C0] EXT4-fs (loop0): last error at time 1782163619: ext4_iget_extra_inode:5180: inode 15
[  694.071189][T16400] loop0: lost filesystem error report for type 5 error -117
[  694.086661][T16400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  694.526112][T16400] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  695.091166][T16400] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  695.101571][T16400] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3396: Corrupt directory, running e2fsck is recommended
[  695.123638][T16409] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  696.087175][T16409] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  696.097359][T16409] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3396: Corrupt directory, running e2fsck is recommended
[  696.150909][T16400] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  696.270209][T16400] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  696.291352][T16400] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3396: Corrupt directory, running e2fsck is recommended
[  696.321985][T16400] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.3396: path /35/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  696.344034][T16400] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.3396: path /35/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  696.444403][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.456001][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'.
[  696.496621][T16435] loop0: detected capacity change from 0 to 1024
[  696.504068][T16435] EXT4-fs: Ignoring removed i_version option
[  696.618245][T16435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  698.012536][T16462] macsec0: entered promiscuous mode
[  698.023774][T16462] macsec0: entered allmulticast mode
[  698.035190][T16462] veth1_macvtap: entered allmulticast mode
[  698.689340][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.847317][T16454] lo speed is unknown, defaulting to 1000
[  699.337780][T16486] loop0: detected capacity change from 0 to 1024
[  699.345603][T16486] EXT4-fs: Ignoring removed i_version option
[  699.423761][T16486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  699.490070][   T28] audit: type=1400 audit(1782163625.419:1250): avc:  denied  { write } for  pid=16485 comm="syz.0.3421" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  700.588168][T16501] syzkaller0: entered promiscuous mode
[  700.593694][T16501] syzkaller0: entered allmulticast mode
[  700.931715][T16505] loop4: detected capacity change from 0 to 1024
[  700.958011][T16505] EXT4-fs: Ignoring removed i_version option
[  701.004575][T16507] loop2: detected capacity change from 0 to 1024
[  701.028741][T16507] EXT4-fs: Ignoring removed i_version option
[  701.036136][T16505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.094081][T16507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.481001][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.491405][T16513] loop1: detected capacity change from 0 to 1024
[  701.573605][T16513] EXT4-fs: Ignoring removed i_version option
[  701.664471][T16513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.057497][T13477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.073082][T16536] loop3: detected capacity change from 0 to 1024
[  704.108875][T16536] EXT4-fs: Ignoring removed i_version option
[  704.172938][T16536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  704.257436][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.910223][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  705.513731][T16552] lo speed is unknown, defaulting to 1000
[  705.547561][T16555] loop1: detected capacity change from 0 to 512
[  705.670227][T16555] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  705.693379][T16555] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  705.716893][T16555] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3439: Corrupt directory, running e2fsck is recommended
[  705.799312][T16555] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  705.815376][T16555] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3439: corrupted in-inode xattr: e_name out of bounds
[  705.848708][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'.
[  705.863815][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'.
[  705.875840][T16555] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  705.876059][T16555] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3439: couldn't read orphan inode 15 (err -117)
[  705.885228][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  705.885243][    C1] EXT4-fs (loop1): initial error at time 1782163631: ext4_iget_extra_inode:5180: inode 15
[  705.885295][    C1] EXT4-fs (loop1): last error at time 1782163631: ext4_iget_extra_inode:5180: inode 15
[  706.029251][T16555] loop1: lost filesystem error report for type 5 error -117
[  706.030181][T16555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  706.068664][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.096185][T16555] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  706.109416][T16555] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  706.142892][T16555] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3439: Corrupt directory, running e2fsck is recommended
[  706.163396][T15994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.180314][T16568] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  706.213187][T16568] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  706.239317][T16555] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  706.273486][T16568] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3439: Corrupt directory, running e2fsck is recommended
[  706.301960][T16570] lo speed is unknown, defaulting to 1000
[  706.309208][T16555] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  706.338451][T16555] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3439: Corrupt directory, running e2fsck is recommended
[  706.370965][T16578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3446'.
[  706.374515][T16555] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.3439: path /104/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  706.403286][T16555] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.3439: path /104/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  706.423777][T16578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3446'.
[  706.467231][T14844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.081809][T16599] loop0: detected capacity change from 0 to 1024
[  707.140620][T16599] EXT4-fs: Ignoring removed i_version option
[  707.150996][T16588] lo speed is unknown, defaulting to 1000
[  707.193592][T16599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.877774][T16617] loop3: detected capacity change from 0 to 1024
[  708.906850][T16617] EXT4-fs: Ignoring removed i_version option
[  709.805896][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.844143][T16626] loop2: detected capacity change from 0 to 512
[  710.095467][T16617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.128804][T16626] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  710.221644][T16626] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  710.282214][T16626] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3459: Corrupt directory, running e2fsck is recommended
[  710.356733][T16626] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  710.402220][T16626] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3459: corrupted in-inode xattr: e_name out of bounds
[  710.475250][T16626] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  710.476231][T16626] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3459: couldn't read orphan inode 15 (err -117)
[  710.485570][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  710.485591][    C1] EXT4-fs (loop2): initial error at time 1782163636: ext4_iget_extra_inode:5180: inode 15
[  710.485622][    C1] EXT4-fs (loop2): last error at time 1782163636: ext4_iget_extra_inode:5180: inode 15
[  710.694780][   T28] audit: type=1400 audit(1782163636.599:1251): avc:  denied  { write } for  pid=16614 comm="syz.3.3455" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  710.767554][T16626] loop2: lost filesystem error report for type 5 error -117
[  710.768857][T16626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.968987][T16626] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  711.036047][T16626] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  711.047573][T16635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3460'.
[  711.081278][T16635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3460'.
[  711.100388][T16626] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3459: Corrupt directory, running e2fsck is recommended
[  711.172410][T16638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  711.184331][T16638] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  711.194629][T16638] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3459: Corrupt directory, running e2fsck is recommended
[  711.232318][T16640] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  711.257335][T16640] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  711.279569][T16640] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3459: Corrupt directory, running e2fsck is recommended
[  711.390514][T15994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.460280][T16652] loop0: detected capacity change from 0 to 128
[  711.484972][T16652] tmpfs: Unsupported parameter 'huge'
[  712.480835][T16667] loop0: detected capacity change from 0 to 128
[  712.504644][T16667] tmpfs: Unsupported parameter 'huge'
[  713.562247][T16698] lo speed is unknown, defaulting to 1000
[  713.635951][T16694] macsec0: entered promiscuous mode
[  713.665785][T16694] macsec0: entered allmulticast mode
[  713.689505][T16694] veth1_macvtap: entered allmulticast mode
[  714.169731][T16721] lo speed is unknown, defaulting to 1000
[  714.320334][T16715] macsec0: entered promiscuous mode
[  714.371259][T16715] macsec0: entered allmulticast mode
[  714.378236][T16715] veth1_macvtap: entered allmulticast mode
[  714.632937][T16731] loop2: detected capacity change from 0 to 1024
[  714.664297][T16731] EXT4-fs: Ignoring removed i_version option
[  714.703309][T16731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  718.042752][T15994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  718.383798][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'.
[  718.442055][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'.
[  718.552116][T16773] macvtap1: entered promiscuous mode
[  718.557613][T16773] team0: entered promiscuous mode
[  718.577380][T16773] team_slave_0: entered promiscuous mode
[  718.586387][T16773] team_slave_1: entered promiscuous mode
[  718.592224][T16773] macvtap1: entered allmulticast mode
[  718.597647][T16773] team0: entered allmulticast mode
[  718.602796][T16773] team_slave_0: entered allmulticast mode
[  718.609885][T16773] team_slave_1: entered allmulticast mode
[  718.616928][T16773] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  718.629141][T16776] team0: left allmulticast mode
[  718.635618][T16776] team_slave_0: left allmulticast mode
[  718.660004][T16776] team_slave_1: left allmulticast mode
[  718.668428][T16782] loop0: detected capacity change from 0 to 1024
[  718.690819][T16776] team0: left promiscuous mode
[  718.704371][T16782] EXT4-fs: Ignoring removed i_version option
[  718.715558][T16776] macvtap1: left promiscuous mode
[  718.720894][T16776] macvtap1: left allmulticast mode
[  718.727528][ T3521] team_slave_0: left promiscuous mode
[  718.732936][ T3521] team_slave_1: left promiscuous mode
[  718.784990][T16782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  719.056697][   T28] audit: type=1400 audit(1782163644.989:1252): avc:  denied  { write } for  pid=16781 comm="syz.0.3512" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  720.755558][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.178483][T16798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3517'.
[  721.350080][T16803] ==================================================================
[  721.358174][T16803] BUG: KCSAN: data-race in ktime_get / timekeeping_update_from_shadow
[  721.366318][T16803] 
[  721.368631][T16803] write to 0xffffffff893ca4c8 of 304 bytes by interrupt on cpu 1:
[  721.376420][T16803]  timekeeping_update_from_shadow+0x40d/0x440
[  721.382484][T16803]  __timekeeping_advance+0xa68/0xc10
[  721.387763][T16803]  update_wall_time+0x21/0x50
[  721.392428][T16803]  tick_do_update_jiffies64+0x169/0x1c0
[  721.397963][T16803]  tick_nohz_handler+0x88/0x380
[  721.402800][T16803]  __hrtimer_run_queues+0x1f8/0x510
[  721.408003][T16803]  hrtimer_interrupt+0x257/0x810
[  721.412940][T16803]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  721.418823][T16803]  sysvec_apic_timer_interrupt+0x6f/0x80
[  721.424452][T16803]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  721.430421][T16803]  kcsan_setup_watchpoint+0x3e8/0x450
[  721.435785][T16803]  __unix_dgram_recvmsg+0x5d0/0x860
[  721.440984][T16803]  unix_dgram_recvmsg+0x7e/0x90
[  721.445827][T16803]  sock_recvmsg_nosec+0xc2/0xf0
[  721.450685][T16803]  ____sys_recvmsg+0x26f/0x280
[  721.455443][T16803]  ___sys_recvmsg+0x11f/0x3a0
[  721.460115][T16803]  do_recvmmsg+0x1e5/0x560
[  721.464524][T16803]  __x64_sys_recvmmsg+0xe5/0x170
[  721.469454][T16803]  x64_sys_call+0x80f/0x3020
[  721.474044][T16803]  do_syscall_64+0x136/0x3c0
[  721.478633][T16803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.484519][T16803] 
[  721.486827][T16803] read to 0xffffffff893ca4e8 of 8 bytes by task 16803 on cpu 0:
[  721.494444][T16803]  ktime_get+0x130/0x240
[  721.498680][T16803]  __se_sys_futex+0x243/0x370
[  721.503350][T16803]  __x64_sys_futex+0x78/0x90
[  721.507939][T16803]  x64_sys_call+0x24ab/0x3020
[  721.512606][T16803]  do_syscall_64+0x136/0x3c0
[  721.517189][T16803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.523071][T16803] 
[  721.525377][T16803] value changed: 0x0010a224ab349234 -> 0x00113abb2b3dbf30
[  721.532467][T16803] 
[  721.534772][T16803] Reported by Kernel Concurrency Sanitizer on:
[  721.540924][T16803] CPU: 0 UID: 0 PID: 16803 Comm: syz.4.3518 Not tainted syzkaller #0 PREEMPT(lazy) 
[  721.550280][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  721.560320][T16803] ==================================================================
[  722.157794][T14408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.