last executing test programs:

6m36.417568687s ago: executing program 32 (id=442):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000002040), 0x0, 0x832b, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usbip_server_init(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
fcntl$dupfd(r1, 0x0, r1)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

4m14.463534546s ago: executing program 3 (id=1198):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x66, 0x6, 0x0, 0x0, 0x0, 0x5000000000, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0xd, 0x0, 0x11000, 0x1, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffff5f, &(0x7f0000000200)={0x0, 0x50}}, 0x44030)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @loopback, 0x7}, 0x34)
listen(r1, 0x8)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x718be95e3d1293a3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000005c0)={{0x84, @private=0xa010101, 0x4e20, 0x2, 'sh\x00', 0x3, 0x1ff, 0x7b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 0x4, 0x7, 0x6}}, 0x44)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

4m14.195443466s ago: executing program 3 (id=1200):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
io_uring_setup(0xeb4, &(0x7f00000001c0)={0x0, 0xa230, 0x1, 0x1002, 0x10000000})
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20)
pivot_root(0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003200000018000180140002006e65746465"], 0x2c}}, 0x0)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0)
socket(0x2, 0xa, 0x300)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_emit_ethernet(0x1e, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbbf, &(0x7f0000000c00)="$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")

4m13.565545319s ago: executing program 3 (id=1202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x5, 0xfff, 0xe9, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x5, 0x1, @scatter={0x1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/166, 0xa6}]}, &(0x7f0000000000)="75934a995a", 0x0, 0x0, 0x4, 0x0, 0x0})
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000540000a44000000090a0d0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4007000000080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4m12.393206973s ago: executing program 3 (id=1211):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f00000024c0)=ANY=[], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x103, 0x70bd29, 0x2, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x800)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4000001)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0x9)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
setuid(0xee01)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
kexec_load(0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4)

4m12.275215067s ago: executing program 3 (id=1215):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
r6 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x280000000000)
recvfrom$inet6(r6, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

4m9.136919694s ago: executing program 3 (id=1226):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000010000000, 0x972, &(0x7f0000006680))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x5598851, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2e, 0x0, 0x0)
bind$inet6(r6, 0x0, 0x0)
listen(r6, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)

4m9.092815625s ago: executing program 33 (id=1226):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000010000000, 0x972, &(0x7f0000006680))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x5598851, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2e, 0x0, 0x0)
bind$inet6(r6, 0x0, 0x0)
listen(r6, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)

41.198723677s ago: executing program 5 (id=2718):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

41.129777448s ago: executing program 5 (id=2719):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

41.09379681s ago: executing program 5 (id=2722):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @dev}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0xffffffffffffffff)

41.029991972s ago: executing program 5 (id=2727):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x2800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c8, &(0x7f00000017c0)="$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")
pipe2$9p(0x0, 0x800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1)

40.935736345s ago: executing program 5 (id=2729):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x0, 0x40ca, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x3, 0x7fffffffffffffff}}}, 0x118)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18)

40.633752885s ago: executing program 5 (id=2739):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x23, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

40.581668366s ago: executing program 34 (id=2739):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x23, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

30.306004641s ago: executing program 6 (id=2994):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd)

30.293154762s ago: executing program 6 (id=2995):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

30.104833498s ago: executing program 6 (id=3003):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001)

30.067910379s ago: executing program 6 (id=3005):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

30.067431429s ago: executing program 6 (id=3006):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x100, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r1, 0x40099d}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

29.773843939s ago: executing program 6 (id=3012):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c)

29.773742749s ago: executing program 35 (id=3012):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c)

28.313840757s ago: executing program 7 (id=3034):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6", 0x1}], 0x1}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x582, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)

28.166120341s ago: executing program 7 (id=3037):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x440, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00')
preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0)

28.101641513s ago: executing program 7 (id=3039):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000)

28.013202566s ago: executing program 7 (id=3042):
r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@debug}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={0x0, "a6f1ca8dcdbb3a2edf4d253c866df768"})
syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$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")
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x358, 0x0)

27.88288656s ago: executing program 7 (id=3045):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1)
read(r0, &(0x7f00000002c0)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

27.005895559s ago: executing program 7 (id=3059):
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xea8, 0xa)

26.99320273s ago: executing program 36 (id=3059):
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xea8, 0xa)

11.909599571s ago: executing program 8 (id=3358):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x9, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @remote}, 0x10)

11.389536098s ago: executing program 8 (id=3364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7f, 0x5, 0x6, 0x2, 0x7, 0x400, 0x3, 0x10}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r4, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4)

11.170503666s ago: executing program 8 (id=3368):
socket$l2tp(0x2, 0x2, 0x73)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f00000000c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x48)
r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000f80)=ANY=[], 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000180)=0xb)

10.319034534s ago: executing program 8 (id=3395):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioperm(0x2, 0x7ff, 0x8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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")
setxattr$security_evm(&(0x7f0000000700)='./file1\x00', &(0x7f0000000780), &(0x7f0000000840)=ANY=[@ANYRES32], 0x1, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x7)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nogrpid}, {@noinit_itable}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@errors_remount}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x39)

9.694890834s ago: executing program 8 (id=3399):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc23d, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x8, 0x9, 0x9, 0xfffffe01, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, r0, 0xb)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
writev(r1, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x3ff0}], 0x1)

9.484409181s ago: executing program 8 (id=3404):
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2000ff}, 0x0, 0x400000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x1e)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

9.460447582s ago: executing program 37 (id=3404):
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2000ff}, 0x0, 0x400000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x1e)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.58175038s ago: executing program 0 (id=3463):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioprio_get$pid(0x3, 0x0)

3.497807286s ago: executing program 0 (id=3466):
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x96})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94)
sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10)

3.224593115s ago: executing program 2 (id=3468):
r0 = getpid()
r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=<r2=>0x0)
ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000003c0)={&(0x7f0000000340)="a4b7c028aa4807668f1e3d1814cd379e1dafc2ca425742f4115c3b7699da2874b53cce6ff194a99b3f988d5cf3c7624d102c2732520e138a7357cbc25ee59866d15a81878d4f2da5696646be790884564bf5f54a6a82bddf5026ebca7f6b2f270aa88d36", 0x64})
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffd2a, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3e}, 0x108012, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x7a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000fffc000008f2ffff85dd88a888be08000000100800000100000000000001080022eb0000000420000000020000f763000000000000000800655800000000b308af962398499cff53a41b130ea612ef2482495a01c732c921030da3bfb52202eebcf30c1a0b4df463239c341d3f3427ca598f17663dd1b3cff83503636f076864c681f19b34c227cdcc15"], 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0x0, 0x8ffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', <r5=>0x0, 0x7800, 0x760, 0xfffffff9, 0x4f1, {{0x6, 0x4, 0x2, 0x15, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast1, {[@end, @end]}}}}})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000540)={0x1, 0x4, 0x81, 0xffff, @vifc_lcl_ifindex=r5, @multicast1}, 0x10)
r6 = syz_pidfd_open(r0, 0x0)
setns(r6, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
syz_clone(0xf01e4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x40)

2.949787764s ago: executing program 0 (id=3469):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)

2.774615699s ago: executing program 4 (id=3471):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r3}, &(0x7f0000000a40), &(0x7f0000000a80)=r4}, 0x20)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000001c0))
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

2.677805172s ago: executing program 4 (id=3473):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r4 = accept(r1, 0x0, 0x0)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

2.569274166s ago: executing program 9 (id=3474):
setuid(0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x400000, 0x81)
close(r3)
socket$kcm(0x2c, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
mount$9p_fd(0x0, 0x0, 0x0, 0x8c, 0x0)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4)
sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0)

2.526392178s ago: executing program 9 (id=3475):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
read(r3, &(0x7f0000000040)=""/88, 0x58)

2.434080011s ago: executing program 1 (id=3477):
socket$inet_mptcp(0x2, 0x1, 0x106)
close(0xffffffffffffffff)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
socket(0xa, 0x2, 0x0)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

2.418201831s ago: executing program 1 (id=3478):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0)
close(0x3)

2.356712263s ago: executing program 1 (id=3479):
socket(0x2b, 0x80801, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x2008050}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r1 = creat(&(0x7f0000000e40)='./bus\x00', 0x19)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100)
fallocate(r1, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x22, 0x0, 0x6})

2.356179533s ago: executing program 2 (id=3480):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r4)
socket(0x11, 0x2, 0x10001)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

2.225531897s ago: executing program 2 (id=3481):
socket$nl_route(0x10, 0x3, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e1e, 0x3, 'wlc\x00', 0x21, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2.169377229s ago: executing program 2 (id=3482):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f00000010c0)={0xb, {"a2e3ad21ed9b52f91b5d310987f70e06d038e7ff7fc6e5539b3247298b089b3208356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a49179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b9ed8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a6e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3937f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042890324659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe5ad58bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdee6fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a0148f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d60e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1c8cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.14104567s ago: executing program 0 (id=3483):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

2.026249064s ago: executing program 0 (id=3484):
syz_open_procfs(0x0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
mkdir(0x0, 0x0)

1.768903382s ago: executing program 4 (id=3485):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r5, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
sendmsg$nl_route(r6, 0x0, 0x24040000)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0xac1e0001}})

1.627677267s ago: executing program 9 (id=3486):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)

1.496163521s ago: executing program 4 (id=3487):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
dup3(r1, r0, 0x0)
io_uring_setup(0x1b7b, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
mkdir(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0)
perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)

1.381751705s ago: executing program 4 (id=3488):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x201020, &(0x7f0000000080)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@data_err_ignore}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x800000, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x172, &(0x7f00000001c0)="$eJzs27GKE1EUBuAzZjZGLUwtFgM2VkF9AmVZQRxQlCm0Uog2u7LgNqNVHsUXFGSr7a5kZkl2lwQMJI7ufF+TE37u5Z5mDjdkPtz/cjg9Pvl8/Po0RlkW+dMo4iyLcdyIQUyriIhZAADXyVlK8SullPKI+BEppa5PBADs2mL+35zFLfMfAHrB/AeA/jH/AaB/3r57//JZWR68KYpRxM9ZXdVV87nf5s9flAePisZ4ueq0rqvBIn/c5sXlfC9un+dPmvTivwjn+TAePmjzebr/qryy/k5Md949AAAA9MOkWFh5v59M1uVtdeH3gfn9/e4yz+Ne3nwZ/8V2AIA/cPLt++HHo6NPX//zYnDez6bLRxHR+eEVmxTZv3GMrothbHXDvYjLG3b8YAJ2bvkY6PokAAAAAAAAAAAAAADAOlt9LWm4esOuewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrfgcAAP//TMFI9w==")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

1.311340527s ago: executing program 9 (id=3489):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x800)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
r5 = dup2(r2, r4)
close_range(r5, 0xffffffffffffffff, 0x0)

1.131453233s ago: executing program 2 (id=3490):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffff8000, 0x2}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000ffff000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = fsopen(0x0, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
poll(0x0, 0x0, 0x172)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
fchdir(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
openat$vcsa(0xffffffffffffff9c, 0x0, 0x41, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ftruncate(r0, 0x7fffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

773.534324ms ago: executing program 0 (id=3491):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x10018, &(0x7f0000000240)={[{@debug}, {@prjquota}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/autofs\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}, 0xff, 0x4a2, &(0x7f0000000980)="$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")
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
r0 = syz_ublk_setup_io_uring(0x68f5, 0x0, 0x0, 0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x8, 0x180, 0x40000}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
perf_event_open(&(0x7f0000000140)={0xef7592d86af633a1, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xd7441e5d13dd12be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xd}, 0x100420, 0x1224, 0x0, 0xd, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000020000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_dev$evdev(&(0x7f0000000400), 0x200, 0x1a1800)
syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e)
socket(0x2, 0x2, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9)

750.341685ms ago: executing program 1 (id=3492):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

581.757201ms ago: executing program 9 (id=3493):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[], 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)

106.696236ms ago: executing program 4 (id=3494):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb801b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x3, 0xf60e}, 0xa293, 0x800000, 0x5, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvmsg(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/141, 0x8d}], 0x1}, 0x40000021)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)

89.830837ms ago: executing program 2 (id=3495):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

44.568628ms ago: executing program 1 (id=3496):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000080))
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0100758a0000fedbdf250a000000040001808ee9a5693f"], 0x18}}, 0x10)
r4 = signalfd(0xffffffffffffffff, 0x0, 0x0)
close(r4)
syz_pidfd_open(0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800009db703000000f8ffff850000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

13.600929ms ago: executing program 1 (id=3497):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x4180, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
write$selinux_context(0xffffffffffffffff, 0x0, 0x0)
close(0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, 0x0, 0x10448)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x2404c081, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

0s ago: executing program 9 (id=3498):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r1 = getpid()
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@errors_remount}, {@lazytime}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)

kernel console output (not intermixed with test programs):

30763]" dev="sockfs" ino=30763 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  369.300185][   T28] audit: type=1400 audit(1048945.261:972): avc:  denied  { getopt } for  pid=10429 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  369.922834][T10440] loop5: detected capacity change from 0 to 512
[  369.983808][T10442] netlink: 59060 bytes leftover after parsing attributes in process `syz.0.1808'.
[  370.026807][T10440] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  370.057496][T10440] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  370.089874][T10440] EXT4-fs (loop5): 1 truncate cleaned up
[  370.131166][T10440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.317662][T10445] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  370.537772][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'.
[  370.561995][   T28] audit: type=1400 audit(1048946.521:973): avc:  denied  { write } for  pid=10439 comm="syz.5.1809" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  370.584477][T10450] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  370.680192][   T28] audit: type=1400 audit(1048946.541:974): avc:  denied  { create } for  pid=10439 comm="syz.5.1809" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  370.779100][T10456] loop6: detected capacity change from 0 to 128
[  370.913085][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.946467][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.976934][   T28] audit: type=1400 audit(1048946.941:975): avc:  denied  { sqpoll } for  pid=10451 comm="syz.6.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  371.062230][ T4883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.135247][   T28] audit: type=1400 audit(1048947.091:976): avc:  denied  { create } for  pid=10466 comm="syz.0.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  371.520702][T10479] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10479 comm=syz.5.1814
[  372.230197][   T28] audit: type=1400 audit(1048947.361:977): avc:  denied  { create } for  pid=10464 comm="syz.5.1814" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  373.380321][   T28] audit: type=1400 audit(1048949.341:978): avc:  denied  { unlink } for  pid=4883 comm="syz-executor" name="file1" dev="tmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  373.467029][T10495] __nla_validate_parse: 5 callbacks suppressed
[  373.467043][T10495] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1821'.
[  373.555363][T10499] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  373.853686][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1824'.
[  373.904982][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1824'.
[  373.948344][T10509] syzkaller0: entered promiscuous mode
[  373.953914][T10509] syzkaller0: entered allmulticast mode
[  374.307496][T10518] SELinux:  policydb string  does not match my string SE Linux
[  374.316299][   T28] audit: type=1400 audit(1048950.261:979): avc:  denied  { load_policy } for  pid=10517 comm="syz.5.1828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  374.356738][T10518] SELinux: failed to load policy
[  374.777575][T10540] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1835'.
[  374.861563][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1838'.
[  374.872821][T10539] syzkaller0: entered promiscuous mode
[  374.878598][T10539] syzkaller0: entered allmulticast mode
[  374.886567][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'.
[  375.102246][   T28] audit: type=1400 audit(1048951.061:980): avc:  denied  { write } for  pid=10549 comm="syz.5.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  375.173175][   T28] audit: type=1400 audit(1048951.131:981): avc:  denied  { create } for  pid=10549 comm="syz.5.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  375.346215][T10559] loop5: detected capacity change from 0 to 512
[  375.357554][T10559] EXT4-fs: dax option not supported
[  376.852939][T10570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'.
[  378.518544][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1853'.
[  378.570478][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'.
[  378.776373][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'.
[  379.197998][ T7812] IPVS: starting estimator thread 0...
[  379.395758][   T28] audit: type=1400 audit(1048955.300:982): avc:  denied  { unmount } for  pid=10615 comm="syz.0.1866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  379.419685][T10614] IPVS: using max 2352 ests per chain, 117600 per kthread
[  380.840059][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1867'.
[  380.861244][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'.
[  380.902828][   T28] audit: type=1400 audit(1048956.860:983): avc:  denied  { create } for  pid=10672 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  380.974067][T10673] loop5: detected capacity change from 0 to 512
[  381.000347][T10673] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1869: inode has both inline data and extents flags
[  381.017274][T10673] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  381.017911][T10673] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1869: couldn't read orphan inode 15 (err -117)
[  381.027467][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  381.027517][    C0] EXT4-fs (loop5): initial error at time 1048956: ext4_orphan_get:1397: inode 15
[  381.027677][    C0] EXT4-fs (loop5): last error at time 1048956: ext4_orphan_get:1397: inode 15
[  381.117922][T10673] loop5: lost filesystem error report for type 5 error -117
[  381.121255][T10673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.169585][   T28] audit: type=1400 audit(1048957.120:984): avc:  denied  { write } for  pid=10672 comm="syz.5.1869" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  381.203813][ T4883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.215282][T10684] netlink: 'syz.0.1871': attribute type 12 has an invalid length.
[  381.225545][T10684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1871'.
[  381.277588][ T3908] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  381.393568][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1881'.
[  381.441007][T10703] syzkaller0: entered promiscuous mode
[  381.446933][T10703] syzkaller0: entered allmulticast mode
[  381.452715][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1881'.
[  381.705960][T10739] loop5: detected capacity change from 0 to 128
[  381.771298][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1899'.
[  381.814319][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1899'.
[  382.085789][T10755] loop5: detected capacity change from 0 to 1764
[  385.156254][T10818] loop5: detected capacity change from 0 to 512
[  385.221250][T10818] EXT4-fs: Ignoring removed bh option
[  385.262996][T10818] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  385.307052][T10818] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1926: corrupted in-inode xattr: e_value size too large
[  385.336157][T10818] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  385.340376][T10818] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1926: couldn't read orphan inode 15 (err -117)
[  385.349737][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  385.349765][    C0] EXT4-fs (loop5): initial error at time 1048961: ext4_iget_extra_inode:5128: inode 15
[  385.349846][    C0] EXT4-fs (loop5): last error at time 1048961: ext4_iget_extra_inode:5128: inode 15
[  385.388184][T10818] loop5: lost filesystem error report for type 5 error -117
[  385.393066][T10818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.891939][ T4883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.316550][T10896] random: crng reseeded on system resumption
[  386.344034][T10896] Unrecognized hibernate image header format!
[  386.360033][T10896] PM: hibernation: Image mismatch: architecture specific data
[  386.626741][   T28] audit: type=1400 audit(1048962.589:985): avc:  denied  { read write } for  pid=10922 comm="syz.5.1967" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  386.659369][   T28] audit: type=1400 audit(1048962.589:986): avc:  denied  { open } for  pid=10922 comm="syz.5.1967" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  386.986939][   T28] audit: type=1400 audit(1048962.649:987): avc:  denied  { write } for  pid=10929 comm="syz.5.1970" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  387.214820][T10940] __nla_validate_parse: 2 callbacks suppressed
[  387.214834][T10940] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1972'.
[  387.284909][T10944] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1974'.
[  389.511662][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2018'.
[  391.071433][T11140] ALSA: seq fatal error: cannot create timer (-19)
[  391.093175][T11140] loop5: detected capacity change from 0 to 512
[  391.101385][T11140] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal
[  391.132160][T11140] loop5: detected capacity change from 0 to 164
[  391.143065][T11140] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  391.153459][T11140] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  391.163463][T11140] iso9660: Corrupted directory entry in block 4 of inode 1792
[  391.172881][T11140] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  391.184632][T11140] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  391.193449][T11140] iso9660: Corrupted directory entry in block 4 of inode 1792
[  391.233525][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2040'.
[  391.242602][T11140] tipc: Cannot configure node identity twice
[  391.326718][T11150] bond1: entered allmulticast mode
[  391.542186][T11164] x_tables: ip_tables: osf match: only valid for protocol 6
[  391.748133][   T28] audit: type=1400 audit(1048967.708:988): avc:  denied  { create } for  pid=11168 comm="syz.6.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  391.777765][T11178] netlink: 712 bytes leftover after parsing attributes in process `syz.1.2054'.
[  392.250841][   T28] audit: type=1400 audit(1048967.738:989): avc:  denied  { ioctl } for  pid=11168 comm="syz.6.2051" path="socket:[34222]" dev="sockfs" ino=34222 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  392.335936][T11187] ALSA: seq fatal error: cannot create timer (-19)
[  392.355744][T11187] loop6: detected capacity change from 0 to 512
[  392.375365][T11187] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal
[  392.434555][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2056'.
[  392.740621][T11207] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2062'.
[  393.351729][T11220] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2066'.
[  393.361120][T11220] net_ratelimit: 6946 callbacks suppressed
[  393.361154][T11220] netlink: zone id is out of range
[  393.372181][T11220] netlink: zone id is out of range
[  393.377360][T11220] netlink: zone id is out of range
[  393.382637][T11220] netlink: zone id is out of range
[  393.403579][T11220] netlink: set zone limit has 8 unknown bytes
[  394.006772][T11231] loop5: detected capacity change from 0 to 256
[  394.042230][T11231] vfat: Unknown parameter './file2'
[  394.145165][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'.
[  394.154300][T11233] tipc: Cannot configure node identity twice
[  394.317703][T11237] random: crng reseeded on system resumption
[  394.358798][   T28] audit: type=1400 audit(1048970.278:990): avc:  denied  { read } for  pid=11230 comm="syz.5.2070" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  394.485110][   T28] audit: type=1400 audit(1048970.278:991): avc:  denied  { ioctl } for  pid=11230 comm="syz.5.2070" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  394.859188][   T28] audit: type=1400 audit(1048970.818:992): avc:  denied  { getopt } for  pid=11242 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  395.465788][T11258] syzkaller0: entered promiscuous mode
[  395.489640][T11258] syzkaller0: entered allmulticast mode
[  395.502076][   T28] audit: type=1400 audit(1048971.458:993): avc:  denied  { ioctl } for  pid=11260 comm="syz.5.2079" path="socket:[33644]" dev="sockfs" ino=33644 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  395.536744][T11259] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2078'.
[  395.891736][T11289] netlink: 'syz.1.2091': attribute type 12 has an invalid length.
[  395.900146][T11289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2091'.
[  396.680398][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'.
[  398.755537][T11315] syzkaller0: entered promiscuous mode
[  398.761075][T11315] syzkaller0: entered allmulticast mode
[  399.018476][T11324] loop5: detected capacity change from 0 to 512
[  399.025035][T11324] EXT4-fs: Ignoring removed mblk_io_submit option
[  399.214998][T11324] EXT4-fs (loop5): orphan cleanup on readonly fs
[  399.221493][T11324] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  399.234835][T11324] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2095: attempt to clear invalid blocks 2 len 1
[  399.247723][T11324] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  399.248715][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  399.264280][    C0] EXT4-fs (loop5): initial error at time 1048975: ext4_clear_blocks:876: inode 13
[  399.273510][    C0] EXT4-fs (loop5): last error at time 1048975: ext4_clear_blocks:876: inode 13
[  399.348921][T11324] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  399.363962][T11324] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2095: invalid indirect mapped block 1819239214 (level 0)
[  399.378251][T11324] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  399.379393][T11324] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2095: invalid indirect mapped block 1819239214 (level 1)
[  399.402600][T11324] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  399.403354][T11324] EXT4-fs (loop5): 1 truncate cleaned up
[  399.418381][T11324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  399.431272][T11324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.659690][T11345] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2103'.
[  399.919335][ T7812] page_pool_release_retry() stalled pool shutdown: id 67, 51 inflight 120 sec
[  400.637202][T11371] ieee802154 phy0 wpan0: encryption failed: -22
[  400.804477][T11367] xfrm0 speed is unknown, defaulting to 1000
[  400.815600][T11367] xfrm0 speed is unknown, defaulting to 1000
[  400.823797][T11367] xfrm0 speed is unknown, defaulting to 1000
[  401.388918][T11367] infiniband syz0: set down
[  401.545456][T11401] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2122'.
[  401.556340][T11367] infiniband syz0: added xfrm0
[  401.901360][T11405] loop6: detected capacity change from 0 to 512
[  401.907997][T11405] EXT4-fs: Ignoring removed mblk_io_submit option
[  402.075593][   T11] xfrm0 speed is unknown, defaulting to 1000
[  402.182261][T11405] EXT4-fs (loop6): orphan cleanup on readonly fs
[  402.188658][T11405] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  402.199168][T11405] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2123: attempt to clear invalid blocks 2 len 1
[  402.212070][T11405] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  402.212499][T11405] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, 
[  402.221709][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  402.221735][    C0] EXT4-fs (loop6): initial error at time 1048978: ext4_clear_blocks:876: inode 13
[  402.221758][    C0] EXT4-fs (loop6): last error at time 1048978: ext4_clear_blocks:876: inode 13
[  402.254642][T11405] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  402.263018][T11405] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2123: invalid indirect mapped block 1819239214 (level 0)
[  402.276956][T11405] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  402.278586][T11405] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2123: invalid indirect mapped block 1819239214 (level 1)
[  402.301659][T11405] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  402.302340][T11405] EXT4-fs (loop6): 1 truncate cleaned up
[  402.317499][T11405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  402.330347][T11405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.393377][T11410] loop5: detected capacity change from 0 to 128
[  402.481680][T11367] RDS/IB: syz0: added
[  402.491743][T11367] smc: adding ib device syz0 with port count 1
[  402.498109][T11367] smc:    ib device syz0 port 1 has no pnetid
[  402.512128][T11367] xfrm0 speed is unknown, defaulting to 1000
[  402.576122][ T7683] xfrm0 speed is unknown, defaulting to 1000
[  402.593861][T11410] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  402.598823][T11367] xfrm0 speed is unknown, defaulting to 1000
[  402.614898][   T28] audit: type=1400 audit(1048978.577:994): avc:  denied  { write } for  pid=11408 comm="syz.5.2124" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  402.715436][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'.
[  402.776242][T11410] bond3: entered allmulticast mode
[  402.796703][T11428] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full
[  402.854366][T11367] xfrm0 speed is unknown, defaulting to 1000
[  402.977696][T11367] xfrm0 speed is unknown, defaulting to 1000
[  403.057664][T11367] xfrm0 speed is unknown, defaulting to 1000
[  403.081347][ T4883] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  403.736846][T11455] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2137'.
[  404.595281][T11465] syzkaller0: entered promiscuous mode
[  405.426531][T11465] syzkaller0: entered allmulticast mode
[  405.860218][T11499] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2152'.
[  406.757614][T11503] No such timeout policy "syz1"
[  408.017945][T11478] loop6: detected capacity change from 0 to 512
[  408.045691][T11478] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.2143: corrupted xattr block 95: invalid header
[  408.740081][T11478] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  408.740326][T11478] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2143: bg 0: block 7: invalid block bitmap
[  408.761858][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  408.761878][    C1] EXT4-fs (loop6): initial error at time 1048984: ext4_expand_extra_isize_ea:2810: inode 11
[  408.761916][    C1] EXT4-fs (loop6): last error at time 1048984: ext4_expand_extra_isize_ea:2810: inode 11
[  409.065884][T11478] loop6: lost filesystem error report for type 5 error -117
[  409.071043][T11478] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  409.093201][T11478] loop6: lost filesystem error report for type 5 error -117
[  409.093423][T11478] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.2143: corrupted xattr block 95: invalid header
[  409.186233][T11478] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  409.195946][T11478] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117)
[  409.214319][T11478] EXT4-fs (loop6): 1 orphan inode deleted
[  409.220661][T11478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.292259][T11523] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2162'.
[  409.584035][T11535] xfrm0 speed is unknown, defaulting to 1000
[  409.612839][T11537] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2168'.
[  409.681173][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.873200][T11569] loop5: detected capacity change from 0 to 512
[  409.899251][T11569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.038276][ T4883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.065535][T11581] xfrm0 speed is unknown, defaulting to 1000
[  410.548160][T11621] loop5: detected capacity change from 0 to 2048
[  410.595293][T11621]  loop5: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2
[  410.595541][T11621] loop5: p1 size 393216 extends beyond EOD, 
[  410.689942][   T28] audit: type=1400 audit(1048986.606:995): avc:  denied  { create } for  pid=11635 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  410.697574][T11621] truncated
[  410.717906][   T28] audit: type=1400 audit(1048986.606:996): avc:  denied  { write } for  pid=11635 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  410.729404][T11621] loop5: p5 size 393216 extends beyond EOD, truncated
[  410.779412][T11621] loop5: p7 size 393216 extends beyond EOD, truncated
[  410.793188][T11621] loop5: p9 size 393216 extends beyond EOD, truncated
[  410.802690][T11621] loop5: p11 size 393216 extends beyond EOD, truncated
[  410.812796][T11621] loop5: p13 size 393216 extends beyond EOD, truncated
[  410.823756][T11621] loop5: p15 size 393216 extends beyond EOD, truncated
[  410.833227][T11621] loop5: p17 size 393216 extends beyond EOD, truncated
[  410.842640][T11621] loop5: p19 size 393216 extends beyond EOD, truncated
[  410.919788][T11621] loop5: p21 size 393216 extends beyond EOD, truncated
[  410.981721][T11621] loop5: p23 size 393216 extends beyond EOD, truncated
[  411.028690][T11621] loop5: p25 size 393216 extends beyond EOD, truncated
[  411.083931][T11646] loop6: detected capacity change from 0 to 128
[  411.098912][T11621] loop5: p27 size 393216 extends beyond EOD, truncated
[  411.149520][T11621] loop5: p29 size 393216 extends beyond EOD, truncated
[  411.176643][T11646] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  411.206113][T11621] loop5: p31 size 393216 extends beyond EOD, truncated
[  411.224592][   T28] audit: type=1400 audit(1048987.186:997): avc:  denied  { setattr } for  pid=11645 comm="syz.6.2214" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  411.224830][T11621] loop5: p33 size 393216 extends beyond EOD, truncated
[  411.267195][T11621] loop5: p35 size 393216 extends beyond EOD, truncated
[  411.269242][ T7825] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  411.275634][T11621] loop5: p37 size 393216 extends beyond EOD, truncated
[  411.294052][T11621] loop5: p39 size 393216 extends beyond EOD, truncated
[  411.301756][T11621] loop5: p41 size 393216 extends beyond EOD, truncated
[  411.309641][T11621] loop5: p43 size 393216 extends beyond EOD, truncated
[  411.317832][T11621] loop5: p45 size 393216 extends beyond EOD, truncated
[  411.350073][T11621] loop5: p47 size 393216 extends beyond EOD, truncated
[  411.359926][T11621] loop5: p49 size 393216 extends beyond EOD, truncated
[  411.369286][T11621] loop5: p51 size 393216 extends beyond EOD, truncated
[  411.394727][T11621] loop5: p53 size 393216 extends beyond EOD, truncated
[  411.410908][T11621] loop5: p55 size 393216 extends beyond EOD, truncated
[  411.424245][T11621] loop5: p57 size 393216 extends beyond EOD, truncated
[  411.435776][T11666] netlink: 'syz.0.2222': attribute type 10 has an invalid length.
[  411.445154][T11666] vxcan0: entered promiscuous mode
[  411.463815][T11621] loop5: p59 size 393216 extends beyond EOD, truncated
[  411.464221][T11666] team0: Port device vxcan0 added
[  411.477978][T11621] loop5: p61 size 393216 extends beyond EOD, truncated
[  411.486073][T11621] loop5: p63 size 393216 extends beyond EOD, truncated
[  411.494411][T11621] loop5: p65 size 393216 extends beyond EOD, truncated
[  411.502215][T11621] loop5: p67 size 393216 extends beyond EOD, truncated
[  411.510057][T11621] loop5: p69 size 393216 extends beyond EOD, truncated
[  411.576310][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2219'.
[  411.672578][T11621] loop5: p71 size 393216 extends beyond EOD, truncated
[  411.733796][T11621] loop5: p73 size 393216 extends beyond EOD, truncated
[  411.799060][T11621] loop5: p75 size 393216 extends beyond EOD, truncated
[  411.861864][T11621] loop5: p77 size 393216 extends beyond EOD, truncated
[  411.945170][T11621] loop5: p79 size 393216 extends beyond EOD, truncated
[  411.995351][T11621] loop5: p81 size 393216 extends beyond EOD, truncated
[  412.011622][T11621] loop5: p83 size 393216 extends beyond EOD, truncated
[  412.028097][T11621] loop5: p85 size 393216 extends beyond EOD, truncated
[  412.048710][T11621] loop5: p87 size 393216 extends beyond EOD, truncated
[  412.067233][T11621] loop5: p89 size 393216 extends beyond EOD, truncated
[  412.075478][T11621] loop5: p91 size 393216 extends beyond EOD, truncated
[  412.084104][T11621] loop5: p93 size 393216 extends beyond EOD, truncated
[  412.092456][T11621] loop5: p95 size 393216 extends beyond EOD, truncated
[  412.100744][T11621] loop5: p97 size 393216 extends beyond EOD, truncated
[  412.109739][T11621] loop5: p99 size 393216 extends beyond EOD, truncated
[  412.110744][T11705] ieee802154 phy0 wpan0: encryption failed: -22
[  412.118298][T11621] loop5: p101 size 393216 extends beyond EOD, truncated
[  412.133859][T11621] loop5: p103 size 393216 extends beyond EOD, truncated
[  412.143409][T11621] loop5: p105 size 393216 extends beyond EOD, truncated
[  412.153338][T11621] loop5: p107 size 393216 extends beyond EOD, truncated
[  412.165944][T11621] loop5: p109 size 393216 extends beyond EOD, truncated
[  412.260293][T11621] loop5: p111 size 393216 extends beyond EOD, truncated
[  412.313207][T11621] loop5: p113 size 393216 extends beyond EOD, truncated
[  412.350403][T11621] loop5: p115 size 393216 extends beyond EOD, truncated
[  412.379175][T11621] loop5: p117 size 393216 extends beyond EOD, truncated
[  412.408883][T11621] loop5: p119 size 393216 extends beyond EOD, truncated
[  412.435786][T11621] loop5: p121 size 393216 extends beyond EOD, truncated
[  412.464232][T11621] loop5: p123 size 393216 extends beyond EOD, truncated
[  412.496161][T11621] loop5: p125 size 393216 extends beyond EOD, truncated
[  412.523816][T11621] loop5: p127 size 393216 extends beyond EOD, truncated
[  412.550200][T11621] loop5: p129 size 393216 extends beyond EOD, truncated
[  412.577316][T11621] loop5: p131 size 393216 extends beyond EOD, truncated
[  412.599562][T11621] loop5: p133 size 393216 extends beyond EOD, truncated
[  412.609275][T11621] loop5: p135 size 393216 extends beyond EOD, truncated
[  412.617650][T11621] loop5: p137 size 393216 extends beyond EOD, truncated
[  412.626233][T11621] loop5: p139 size 393216 extends beyond EOD, truncated
[  412.641804][T11621] loop5: p141 size 393216 extends beyond EOD, truncated
[  412.651525][T11621] loop5: p143 size 393216 extends beyond EOD, truncated
[  412.710108][T11621] loop5: p145 size 393216 extends beyond EOD, truncated
[  412.723797][T11621] loop5: p147 size 393216 extends beyond EOD, truncated
[  412.737732][T11621] loop5: p149 size 393216 extends beyond EOD, truncated
[  412.753556][T11621] loop5: p151 size 393216 extends beyond EOD, truncated
[  412.767033][T11711] rdma_rxe: rxe_newlink: failed to add xfrm0
[  412.775444][T11621] loop5: p153 size 393216 extends beyond EOD, truncated
[  412.792177][T11621] loop5: p155 size 393216 extends beyond EOD, truncated
[  412.802260][T11621] loop5: p157 size 393216 extends beyond EOD, truncated
[  412.812299][T11732] netlink: 'syz.6.2252': attribute type 32 has an invalid length.
[  412.821952][T11621] loop5: p159 size 393216 extends beyond EOD, truncated
[  412.834956][T11621] loop5: p161 size 393216 extends beyond EOD, truncated
[  412.847245][T11621] loop5: p163 size 393216 extends beyond EOD, truncated
[  412.855988][T11621] loop5: p165 size 393216 extends beyond EOD, truncated
[  412.864685][T11621] loop5: p167 size 393216 extends beyond EOD, truncated
[  412.884656][T11621] loop5: p169 size 393216 extends beyond EOD, truncated
[  412.910183][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'.
[  412.919537][T11621] loop5: p171 size 393216 extends beyond EOD, truncated
[  412.935247][T11621] loop5: p173 size 393216 extends beyond EOD, truncated
[  412.964385][T11621] loop5: p175 size 393216 extends beyond EOD, truncated
[  412.978722][T11621] loop5: p177 size 393216 extends beyond EOD, truncated
[  412.991536][T11750] xfrm0 speed is unknown, defaulting to 1000
[  413.062530][T11621] loop5: p179 size 393216 extends beyond EOD, truncated
[  413.099536][T11621] loop5: p181 size 393216 extends beyond EOD, truncated
[  413.107560][T11621] loop5: p183 size 393216 extends beyond EOD, truncated
[  413.115757][T11621] loop5: p185 size 393216 extends beyond EOD, truncated
[  413.128223][T11621] loop5: p187 size 393216 extends beyond EOD, truncated
[  413.137035][T11621] loop5: p189 size 393216 extends beyond EOD, truncated
[  413.152112][T11621] loop5: p191 size 393216 extends beyond EOD, truncated
[  413.163727][T11621] loop5: p193 size 393216 extends beyond EOD, truncated
[  413.169763][   T28] audit: type=1400 audit(1048989.125:998): avc:  denied  { getopt } for  pid=11764 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  413.172210][T11621] loop5: p195 size 393216 extends beyond EOD, truncated
[  413.335560][T11621] loop5: p197 size 393216 extends beyond EOD, truncated
[  413.347802][T11621] loop5: p199 size 393216 extends beyond EOD, truncated
[  413.398496][T11621] loop5: p201 size 393216 extends beyond EOD, truncated
[  413.444745][T11621] loop5: p203 size 393216 extends beyond EOD, truncated
[  413.483023][T11621] loop5: p205 size 393216 extends beyond EOD, truncated
[  413.510412][T11621] loop5: p207 size 393216 extends beyond EOD, truncated
[  413.692114][T11621] loop5: p209 size 393216 extends beyond EOD, truncated
[  413.711802][T11621] loop5: p211 size 393216 extends beyond EOD, truncated
[  413.728797][T11621] loop5: p213 size 393216 extends beyond EOD, truncated
[  413.771436][T11621] loop5: p215 size 393216 extends beyond EOD, truncated
[  413.807880][T11621] loop5: p217 size 393216 extends beyond EOD, truncated
[  413.937438][T11621] loop5: p219 size 393216 extends beyond EOD, truncated
[  414.108045][T11621] loop5: p221 size 393216 extends beyond EOD, truncated
[  414.117295][T11621] loop5: p223 size 393216 extends beyond EOD, truncated
[  414.125625][T11621] loop5: p225 size 393216 extends beyond EOD, truncated
[  414.164844][T11621] loop5: p227 size 393216 extends beyond EOD, truncated
[  415.221835][T11621] loop5: p229 size 393216 extends beyond EOD, truncated
[  415.302854][T11621] loop5: p231 size 393216 extends beyond EOD, truncated
[  415.311233][T11621] loop5: p233 size 393216 extends beyond EOD, truncated
[  415.319979][T11621] loop5: p235 size 393216 extends beyond EOD, truncated
[  415.328132][T11621] loop5: p237 size 393216 extends beyond EOD, truncated
[  415.350105][T11621] loop5: p239 size 393216 extends beyond EOD, truncated
[  415.358305][T11621] loop5: p241 size 393216 extends beyond EOD, truncated
[  415.367834][T11792] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2272'.
[  415.436888][T11621] loop5: p243 size 393216 extends beyond EOD, truncated
[  415.454770][T11621] loop5: p245 size 393216 extends beyond EOD, truncated
[  415.474156][T11621] loop5: p247 size 393216 extends beyond EOD, truncated
[  415.490583][T11621] loop5: p249 size 393216 extends beyond EOD, truncated
[  415.506686][T11621] loop5: p251 size 393216 extends beyond EOD, truncated
[  415.515141][T11621] loop5: p253 size 393216 extends beyond EOD, truncated
[  415.523428][T11621] loop5: p255 size 393216 extends beyond EOD, truncated
[  415.551888][T11804] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  416.100036][T11823] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  416.156399][   T28] audit: type=1400 audit(1048992.115:999): avc:  denied  { ioctl } for  pid=11824 comm="syz.6.2283" path="mnt:[4026532377]" dev="nsfs" ino=4026532377 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  416.203031][T11803] udevd[11803]: inotify_add_watch(7, /dev/loop5p20, 10) failed: No such file or directory
[  416.214787][T11801] udevd[11801]: inotify_add_watch(7, /dev/loop5p23, 10) failed: No such file or directory
[  416.223388][T11802] udevd[11802]: inotify_add_watch(7, /dev/loop5p21, 10) failed: No such file or directory
[  416.235908][T11805] udevd[11805]: inotify_add_watch(7, /dev/loop5p28, 10) failed: No such file or directory
[  416.239728][T11801] udevd[11801]: inotify_add_watch(7, /dev/loop5p30, 10) failed: No such file or directory
[  416.247170][T10164] udevd[10164]: inotify_add_watch(7, /dev/loop5p25, 10) failed: No such file or directory
[  416.264949][T11807] udevd[11807]: inotify_add_watch(7, /dev/loop5p29, 10) failed: No such file or directory
[  416.266962][T11806] udevd[11806]: inotify_add_watch(7, /dev/loop5p24, 10) failed: No such file or directory
[  416.276735][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop5p27, 10) failed: No such file or directory
[  416.286751][T10294] udevd[10294]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory
[  416.516041][T11850] loop5: detected capacity change from 0 to 512
[  416.555223][T11849] xfrm0 speed is unknown, defaulting to 1000
[  416.562496][T11845] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2291'.
[  416.619723][T11850] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  416.650869][T11850] FAT-fs (loop5): Filesystem has been set read-only
[  417.431237][T11855] loop6: detected capacity change from 0 to 512
[  417.443674][T11855] EXT4-fs: dax option not supported
[  418.087299][T11879] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2306'.
[  418.449190][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'.
[  418.498582][   T28] audit: type=1400 audit(1048994.455:1000): avc:  denied  { getopt } for  pid=11909 comm="syz.6.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  419.267684][T11960] loop6: detected capacity change from 0 to 512
[  419.335370][T11960] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  419.361480][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  419.367937][    C1] EXT4-fs (loop6): initial error at time 1048995: mb_free_blocks:2049: inode 11: block 64
[  419.377858][    C1] EXT4-fs (loop6): last error at time 1048995: mb_free_blocks:2049: inode 11: block 64
[  419.451472][T11960] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #11: comm syz.6.2341: corrupted inode contents
[  419.506613][T11960] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  419.507139][T11960] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #11: comm syz.6.2341: mark_inode_dirty error
[  419.816195][T11960] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  419.816389][T11960] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2341: invalid indirect mapped block 1 (level 1)
[  419.894067][T11960] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  419.894240][T11960] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #11: comm syz.6.2341: corrupted inode contents
[  419.935270][T11980] loop5: detected capacity change from 0 to 128
[  419.962316][T11980] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  419.982448][T11960] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  419.985448][T11960] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  420.022471][T11980] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  420.034815][T11960] loop6: lost filesystem error report for type 5 error -117
[  420.035000][T11960] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #11: comm syz.6.2341: corrupted inode contents
[  420.107383][T11960] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  420.107529][T11960] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.2341: mark_inode_dirty error
[  420.183546][T11960] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  420.183707][T11960] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  420.240195][T11960] loop6: lost filesystem error report for type 5 error -117
[  420.240431][T11960] EXT4-fs (loop6): 1 truncate cleaned up
[  420.258742][T12006] sctp: [Deprecated]: syz.1.2362 (pid 12006) Use of int in max_burst socket option.
[  420.258742][T12006] Use struct sctp_assoc_value instead
[  420.286119][T11960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.339564][T11960] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.2341: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  420.371018][   T28] audit: type=1400 audit(1048996.294:1001): avc:  denied  { write } for  pid=11959 comm="syz.6.2341" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  420.411075][T12000] xfrm0 speed is unknown, defaulting to 1000
[  420.501803][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.616175][   T28] audit: type=1400 audit(1048996.574:1002): avc:  denied  { remount } for  pid=12030 comm="syz.0.2374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  420.679451][T12036] netlink: 'syz.0.2375': attribute type 46 has an invalid length.
[  420.928709][T12052] syzkaller0: entered promiscuous mode
[  420.936925][T12052] syzkaller0: entered allmulticast mode
[  421.103334][   T28] audit: type=1400 audit(1048997.054:1003): avc:  denied  { append } for  pid=12066 comm="syz.5.2389" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  422.027968][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2411'.
[  422.320349][T12130] xfrm0 speed is unknown, defaulting to 1000
[  422.825321][   T28] audit: type=1400 audit(1048998.784:1004): avc:  denied  { append } for  pid=12146 comm="syz.5.2426" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  423.370522][T12175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2431'.
[  424.327819][T12180] xfrm0 speed is unknown, defaulting to 1000
[  424.463170][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2448'.
[  424.725072][T12216] loop6: detected capacity change from 0 to 512
[  424.978539][   T28] audit: type=1400 audit(1049000.934:1005): avc:  denied  { map } for  pid=12247 comm="syz.1.2470" path="socket:[38136]" dev="sockfs" ino=38136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  425.142042][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2477'.
[  425.246995][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2472'.
[  426.235835][T12299] xfrm0 speed is unknown, defaulting to 1000
[  426.284739][   T28] audit: type=1400 audit(1049002.244:1006): avc:  denied  { mount } for  pid=12314 comm="syz.1.2498" name="/" dev="hugetlbfs" ino=38293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  426.551189][T12325] xt_hashlimit: size too large, truncated to 1048576
[  426.886174][T12329] loop6: detected capacity change from 0 to 512
[  426.902685][T12329] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  426.959282][T12329] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  426.971448][T12329] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2501: bad orphan inode 4
[  426.981850][T12329] loop6: lost filesystem error report for type 5 error -117
[  426.982515][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  426.996207][    C0] EXT4-fs (loop6): initial error at time 1049002: ext4_orphan_get:1423
[  427.004454][    C0] EXT4-fs (loop6): last error at time 1049002: ext4_orphan_get:1423
[  427.014650][T12329] EXT4-fs (loop6): 1 orphan inode deleted
[  427.066068][T12329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.096872][T12329] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.2501: lblock 0 mapped to illegal pblock 4 (length 1)
[  427.128977][   T28] audit: type=1400 audit(1049003.053:1007): avc:  denied  { write } for  pid=12318 comm="syz.6.2501" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  427.157783][   T28] audit: type=1400 audit(1049003.053:1008): avc:  denied  { create } for  pid=12318 comm="syz.6.2501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  427.345007][T12358] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  427.597117][T12409] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2541'.
[  427.669145][   T28] audit: type=1326 audit(1049003.623:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  427.695839][   T28] audit: type=1326 audit(1049003.623:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  427.721792][   T28] audit: type=1326 audit(1049003.623:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  427.748271][   T28] audit: type=1326 audit(1049003.623:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  427.774368][   T28] audit: type=1326 audit(1049003.623:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  427.884590][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'.
[  427.895184][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2558'.
[  427.895227][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.915043][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'.
[  428.045315][T12459] netlink: 59060 bytes leftover after parsing attributes in process `syz.6.2563'.
[  428.054949][T12459] netlink: zone id is out of range
[  428.060210][T12459] netlink: zone id is out of range
[  428.065673][T12459] netlink: zone id is out of range
[  428.076326][T12459] netlink: zone id is out of range
[  428.081671][T12459] netlink: zone id is out of range
[  428.086944][T12459] netlink: zone id is out of range
[  428.092202][T12459] netlink: zone id is out of range
[  428.097602][T12459] netlink: zone id is out of range
[  428.102773][T12459] netlink: zone id is out of range
[  428.108023][T12459] netlink: zone id is out of range
[  428.727971][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  428.727986][   T28] audit: type=1400 audit(1049004.683:1018): avc:  denied  { map } for  pid=12470 comm="syz.1.2568" path="socket:[37804]" dev="sockfs" ino=37804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  428.772171][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2569'.
[  428.812864][   T28] audit: type=1400 audit(1049004.683:1019): avc:  denied  { read accept } for  pid=12470 comm="syz.1.2568" path="socket:[37804]" dev="sockfs" ino=37804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  428.837643][   T28] audit: type=1400 audit(1049004.713:1020): avc:  denied  { getopt } for  pid=12470 comm="syz.1.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  428.965846][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.107073][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.145309][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'.
[  429.201716][T12485] gretap0: entered promiscuous mode
[  429.321612][T12491] xfrm0 speed is unknown, defaulting to 1000
[  429.710755][T12499] loop6: detected capacity change from 0 to 2048
[  429.734320][T12499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.800289][T12502] xfrm0 speed is unknown, defaulting to 1000
[  429.832244][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.125519][T12524] netlink: 'syz.1.2591': attribute type 7 has an invalid length.
[  430.416289][   T28] audit: type=1400 audit(1049006.373:1021): avc:  denied  { execute_no_trans } for  pid=12538 comm="syz.6.2598" path="/236/file0" dev="tmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  430.835983][T12582] xfrm0 speed is unknown, defaulting to 1000
[  430.976974][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2621'.
[  430.986350][T12586] syz_tun: refused to change device tx_queue_len
[  431.078211][T12592] xfrm0 speed is unknown, defaulting to 1000
[  431.127705][T12599] ieee802154 phy0 wpan0: encryption failed: -22
[  431.201477][T12606] loop5: detected capacity change from 0 to 256
[  431.367656][T12619] xfrm0 speed is unknown, defaulting to 1000
[  431.392469][   T28] audit: type=1326 audit(1049007.343:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.5.2638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  431.440573][   T28] audit: type=1326 audit(1049007.343:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.5.2638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  431.467372][   T28] audit: type=1326 audit(1049007.343:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.5.2638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  431.499081][   T28] audit: type=1326 audit(1049007.343:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.5.2638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  431.541971][   T28] audit: type=1326 audit(1049007.343:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.5.2638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  431.617932][   T28] audit: type=1326 audit(1049007.343:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.5.2638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1e6ce59 code=0x7ffc0000
[  431.663727][T12631] loop6: detected capacity change from 0 to 1024
[  431.739464][T12631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.770621][T12633] loop5: detected capacity change from 0 to 1024
[  431.788223][T12633] EXT4-fs: inline encryption not supported
[  431.796958][T12639] xfrm0 speed is unknown, defaulting to 1000
[  431.808763][T12631] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  431.818773][T12633] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  431.837410][T12631] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2641: bg 0: block 112: padding at end of block bitmap is not set
[  431.866404][T12633] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.2642: lblock 2 mapped to illegal pblock 2 (length 1)
[  431.880441][T12633] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  431.880607][T12633] EXT4-fs (loop5): Remounting filesystem read-only
[  431.889646][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  431.889665][    C1] EXT4-fs (loop5): initial error at time 1049007: ext4_map_blocks:791: inode 3: block 2
[  431.889691][    C1] EXT4-fs (loop5): last error at time 1049007: ext4_map_blocks:791: inode 3: block 2
[  431.916060][T12644] xfrm0 speed is unknown, defaulting to 1000
[  431.922478][T12633] EXT4-fs (loop5): 1 orphan inode deleted
[  431.936622][T12633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.939163][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  431.949835][T12633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.055773][T12653] loop5: detected capacity change from 0 to 512
[  432.088139][T12653] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  432.096481][T12653] EXT4-fs (loop5): orphan cleanup on readonly fs
[  432.103495][T12653] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  432.118126][T12653] EXT4-fs (loop5): Cannot turn on quotas: error -5
[  432.126333][T12653] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2647: bg 0: block 64: padding at end of block bitmap is not set
[  432.141019][T12653] loop5: lost filesystem error report for type 5 error -117
[  432.141764][T12653] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  432.149149][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  432.149166][    C0] EXT4-fs (loop5): initial error at time 1049008: ext4_validate_block_bitmap:441
[  432.149183][    C0] EXT4-fs (loop5): last error at time 1049008: ext4_validate_block_bitmap:441
[  432.184270][T12653] loop5: lost filesystem error report for type 5 error -117
[  432.188199][T12653] EXT4-fs (loop5): 1 truncate cleaned up
[  432.204335][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  432.224987][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.238689][T12653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  432.306673][T12668] xt_hashlimit: size too large, truncated to 1048576
[  432.315594][ T4883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.505418][T12683] netlink: 59060 bytes leftover after parsing attributes in process `syz.1.2657'.
[  433.007311][T12697] loop5: detected capacity change from 0 to 512
[  433.034536][T12697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  433.050952][T12697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  433.059307][T12697] System zones: 1-12
[  433.063977][T12697] EXT4-fs (loop5): 1 truncate cleaned up
[  433.070199][T12697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.109270][ T4883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.318302][T12724] xfrm0 speed is unknown, defaulting to 1000
[  433.626068][T12750] netlink: 59060 bytes leftover after parsing attributes in process `syz.5.2686'.
[  433.635496][T12750] net_ratelimit: 6946 callbacks suppressed
[  433.635507][T12750] netlink: zone id is out of range
[  433.646601][T12750] netlink: zone id is out of range
[  433.652126][T12750] netlink: zone id is out of range
[  433.663243][T12750] netlink: zone id is out of range
[  433.668496][T12750] netlink: zone id is out of range
[  433.673788][T12750] netlink: zone id is out of range
[  433.679030][T12750] netlink: zone id is out of range
[  433.684221][T12750] netlink: zone id is out of range
[  433.689448][T12750] netlink: zone id is out of range
[  433.694733][T12750] netlink: zone id is out of range
[  434.617265][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  434.617280][   T28] audit: type=1400 audit(1049010.572:1044): avc:  denied  { bind } for  pid=12799 comm="syz.4.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  434.629616][T12795] xfrm0 speed is unknown, defaulting to 1000
[  434.912735][T12828] loop5: detected capacity change from 0 to 128
[  434.939242][T12828] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  434.961524][   T28] audit: type=1400 audit(1049010.912:1045): avc:  denied  { write } for  pid=12827 comm="syz.5.2719" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  434.986635][ T4883] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  435.057888][T12845] loop5: detected capacity change from 0 to 256
[  435.066924][T12845] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  435.070724][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2728'.
[  435.084945][T12845] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  435.099372][ T4883] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  435.115083][ T4883] FAT-fs (loop5): Filesystem has been set read-only
[  435.134117][ T4883] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  435.139104][T12852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2731'.
[  435.153548][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2731'.
[  435.169820][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2731'.
[  435.350445][T12864] raw_sendmsg: syz.0.2736 forgot to set AF_INET. Fix it!
[  435.458104][   T28] audit: type=1400 audit(1049011.412:1046): avc:  denied  { map } for  pid=12870 comm="syz.0.2741" path="socket:[40463]" dev="sockfs" ino=40463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  435.557070][   T28] audit: type=1400 audit(1049011.512:1047): avc:  denied  { map } for  pid=12887 comm="syz.6.2747" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  435.580933][   T28] audit: type=1400 audit(1049011.512:1048): avc:  denied  { execute } for  pid=12887 comm="syz.6.2747" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  435.660935][T12879] xfrm0 speed is unknown, defaulting to 1000
[  435.667189][T12902] loop6: detected capacity change from 0 to 1024
[  435.674699][T12902] EXT4-fs: Ignoring removed orlov option
[  435.687903][T12902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.713449][   T28] audit: type=1400 audit(1049011.662:1049): avc:  denied  { remount } for  pid=12901 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  435.733402][T12902] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  435.752240][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.791738][T12879] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.798956][T12879] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.806310][T12879] bridge_slave_0: entered allmulticast mode
[  435.814937][ T7814] kernel write not supported for file [eventfd] (pid: 7814 comm: kworker/0:14)
[  435.819054][T12879] bridge_slave_0: entered promiscuous mode
[  435.835272][T12879] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.842328][T12879] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.849489][T12879] bridge_slave_1: entered allmulticast mode
[  435.857787][T12879] bridge_slave_1: entered promiscuous mode
[  435.872762][T12879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.883025][T12879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.901421][T12879] team0: Port device team_slave_0 added
[  435.908304][T12879] team0: Port device team_slave_1 added
[  435.927245][T12879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.934271][T12879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.960642][T12879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.972113][T12879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.979279][T12879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.005428][T12879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.071948][T12879] hsr_slave_0: entered promiscuous mode
[  436.084292][T12879] hsr_slave_1: entered promiscuous mode
[  436.099378][T12879] debugfs: 'hsr0' already exists in 'hsr'
[  436.105932][T12879] Cannot create hsr debugfs directory
[  436.176020][T12933] xfrm0 speed is unknown, defaulting to 1000
[  436.256787][T12879] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  436.277396][T12879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.288188][T12879] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  436.298757][T12879] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.317611][T12879] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  436.328495][T12879] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.342103][T12879] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  436.351945][T12879] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.393288][T12879] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.400419][T12879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.407802][T12879] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.414863][T12879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.423571][T10338] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.433252][T10338] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.475121][T12879] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.488167][T12879] 8021q: adding VLAN 0 to HW filter on device team0
[  436.507979][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.515095][ T1879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.524408][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.531525][ T1879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.565418][   T28] audit: type=1400 audit(1049012.522:1050): avc:  denied  { egress } for  pid=7683 comm="kworker/1:8" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  436.590858][   T28] audit: type=1400 audit(1049012.522:1051): avc:  denied  { sendto } for  pid=7683 comm="kworker/1:8" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  436.717939][T12879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.812597][T12879] veth0_vlan: entered promiscuous mode
[  436.820362][T12879] veth1_vlan: entered promiscuous mode
[  436.836694][T12879] veth0_macvtap: entered promiscuous mode
[  436.844104][T12879] veth1_macvtap: entered promiscuous mode
[  436.855651][T12879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.867441][T12879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.878421][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.887447][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.896652][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.905459][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.924259][   T28] audit: type=1400 audit(1049012.872:1052): avc:  denied  { mount } for  pid=12879 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  436.965348][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2742'.
[  437.265911][T13010] xfrm0 speed is unknown, defaulting to 1000
[  437.269136][T13014] loop7: detected capacity change from 0 to 512
[  437.279633][T13014] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  437.291823][T13014] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2783: bg 0: block 425: padding at end of block bitmap is not set
[  437.308118][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.313478][T13014] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  437.320812][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  437.320831][    C0] EXT4-fs (loop7): initial error at time 1049013: ext4_validate_block_bitmap:441
[  437.320851][    C0] EXT4-fs (loop7): last error at time 1049013: ext4_validate_block_bitmap:441
[  437.333686][T13012] xfrm0 speed is unknown, defaulting to 1000
[  437.351370][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.365622][T13014] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2783: attempt to clear invalid blocks 983260 len 1
[  437.387042][T13014] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  437.387288][T13014] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.2783: Invalid inode table block 0 in block_group 0
[  437.410016][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.410139][T13014] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  437.444265][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.445712][T13014] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  437.475914][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.476072][T13014] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.2783: Invalid inode table block 0 in block_group 0
[  437.518402][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.519795][T13014] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  437.561065][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.562499][T13014] EXT4-fs error (device loop7): ext4_truncate:4690: inode #11: comm syz.7.2783: mark_inode_dirty error
[  437.606668][T13014] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  437.606911][T13014] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  437.665440][T13014] loop7: lost filesystem error report for type 5 error -117
[  437.666957][T13014] EXT4-fs (loop7): 1 truncate cleaned up
[  437.695300][T13014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.750721][T13014] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2783: Invalid block bitmap block 0 in block_group 0
[  437.789962][T13048] loop6: detected capacity change from 0 to 256
[  437.807575][T13048] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  437.841688][T13047] xfrm0 speed is unknown, defaulting to 1000
[  437.851710][T12879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.884574][   T28] audit: type=1326 audit(1049013.832:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.4.2784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa13820ce59 code=0x0
[  437.935793][T13050] loop7: detected capacity change from 0 to 736
[  438.103395][T13066] loop7: detected capacity change from 0 to 1024
[  438.142972][T13066] EXT4-fs: inline encryption not supported
[  438.163903][T13066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  438.191802][T13070] xfrm0 speed is unknown, defaulting to 1000
[  438.202081][T13066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003]
[  438.219629][T13066] System zones: 0-1, 3-36
[  438.229238][T13066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.267793][T12879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.344326][T13086] loop7: detected capacity change from 0 to 512
[  438.365151][T13086] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2812: bg 0: block 393: padding at end of block bitmap is not set
[  438.406357][T13086] loop7: lost filesystem error report for type 5 error -117
[  438.408096][T13086] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  438.415435][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  438.415450][    C1] EXT4-fs (loop7): initial error at time 1049014: ext4_validate_block_bitmap:441
[  438.415475][    C1] EXT4-fs (loop7): last error at time 1049014: ext4_validate_block_bitmap:441
[  438.449205][T13086] loop7: lost filesystem error report for type 5 error -117
[  438.449584][T13086] EXT4-fs (loop7): 2 truncates cleaned up
[  438.463204][T13086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.560919][T12879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.571432][T13095] 
@0Ù: renamed from bond_slave_1
[  438.603306][T13099] batadv_slave_0: entered promiscuous mode
[  438.661619][T13098] batadv_slave_0: left promiscuous mode
[  438.684055][T13107] bond0: entered promiscuous mode
[  438.714814][T13107] batadv0: entered promiscuous mode
[  438.724890][T13107] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  438.772391][T13107] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  438.832547][T13107] 8021q: adding VLAN 0 to HW filter on device hsr1
[  438.874342][T13107] bond0: left promiscuous mode
[  438.887509][T13107] batadv0: left promiscuous mode
[  439.012301][T13137] loop6: detected capacity change from 0 to 256
[  439.228369][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2848'.
[  439.265452][T13167] xfrm0 speed is unknown, defaulting to 1000
[  439.352127][T13173] loop6: detected capacity change from 0 to 512
[  439.360853][T13173] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  439.412334][T13175] xfrm0 speed is unknown, defaulting to 1000
[  439.726778][T13183] loop7: detected capacity change from 0 to 1024
[  439.733868][T13183] EXT4-fs: Ignoring removed nobh option
[  439.739857][T13183] EXT4-fs: Ignoring removed nobh option
[  439.745916][T13183] EXT4-fs: Ignoring removed nomblk_io_submit option
[  439.755946][T13183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c098, mo2=0002]
[  439.780559][T13183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.796502][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  439.796515][   T28] audit: type=1400 audit(1049015.752:1065): avc:  denied  { write } for  pid=13182 comm="syz.7.2856" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  439.824418][   T28] audit: type=1400 audit(1049015.752:1066): avc:  denied  { ioctl } for  pid=13182 comm="syz.7.2856" path="/13/file1/file1" dev="loop7" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  439.851043][T12879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.916124][T13200] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2863'.
[  440.035701][   T28] audit: type=1400 audit(1049015.992:1067): avc:  denied  { name_bind } for  pid=13209 comm="syz.1.2866" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  440.283075][T13231] loop7: detected capacity change from 0 to 512
[  440.295028][T13231] EXT4-fs: dax option not supported
[  441.959128][T13256] net_ratelimit: 3468 callbacks suppressed
[  441.959159][T13256] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  442.028920][T13253] xfrm0 speed is unknown, defaulting to 1000
[  442.075865][T13266] lo: entered allmulticast mode
[  442.091817][T13266] lo: left allmulticast mode
[  442.118846][T13260] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2884'.
[  442.178014][T13277] loop7: detected capacity change from 0 to 512
[  442.228545][T13277] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  442.260909][T13286] xt_hashlimit: size too large, truncated to 1048576
[  442.287821][T13277] EXT4-fs (loop7): failed to open journal device unknown-block(11,127) -6
[  442.732819][T13328] xfrm0 speed is unknown, defaulting to 1000
[  442.934727][T13341] PID 13341 killed due to inadequate hugepage pool
[  443.133103][T13360] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  443.156898][T13360] xfrm0 speed is unknown, defaulting to 1000
[  443.197780][   T28] audit: type=1400 audit(1049019.151:1068): avc:  denied  { accept } for  pid=13361 comm="syz.0.2929" lport=51003 faddr=::ffff:172.30.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  443.231794][   T28] audit: type=1400 audit(1049019.151:1069): avc:  denied  { setopt } for  pid=13361 comm="syz.0.2929" lport=51003 faddr=::ffff:172.30.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  443.312016][   T28] audit: type=1400 audit(1049019.261:1070): avc:  denied  { ioctl } for  pid=13370 comm="syz.4.2932" path="socket:[42534]" dev="sockfs" ino=42534 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  443.641779][T13392] xfrm0 speed is unknown, defaulting to 1000
[  443.904482][T13399] loop6: detected capacity change from 0 to 2048
[  443.948233][T13399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.963767][   T28] audit: type=1400 audit(1049019.921:1071): avc:  denied  { write } for  pid=13398 comm="syz.6.2945" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  444.019456][ T7825] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.102441][T13418] loop7: detected capacity change from 0 to 512
[  444.118071][T13419] xt_CT: You must specify a L4 protocol and not use inversions on it
[  444.138369][T13418] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  444.153177][T13418] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  444.162330][T13418] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  444.172763][T13418] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  444.181191][T13418] System zones: 0-2, 18-18, 34-35
[  444.187067][T13418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.202622][   T28] audit: type=1400 audit(1049020.161:1072): avc:  denied  { watch watch_reads } for  pid=13417 comm="syz.7.2952" path="/26/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  444.226600][T13426] xfrm0 speed is unknown, defaulting to 1000
[  444.245177][T12879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.273429][T13432] loop7: detected capacity change from 0 to 128
[  444.283055][T13428] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2957'.
[  444.298310][T13432] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  444.312080][T13432] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  444.326157][   T28] audit: type=1400 audit(1049020.281:1073): avc:  denied  { write } for  pid=13431 comm="syz.7.2958" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  444.343711][T13432] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 20: comm syz.7.2958: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  444.347884][   T28] audit: type=1400 audit(1049020.281:1074): avc:  denied  { write } for  pid=13431 comm="syz.7.2958" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  444.388246][T13432] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem
[  444.428438][T13438] xfrm0 speed is unknown, defaulting to 1000
[  444.437696][T12879] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  444.488003][T13437] xfrm0 speed is unknown, defaulting to 1000
[  444.980001][T13465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2970'.
[  445.005440][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'.
[  445.200940][T13505] ipip0: entered promiscuous mode
[  445.206042][T13505] ipip0: entered allmulticast mode
[  445.234942][T13507] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2985'.
[  445.877063][T13537] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2997'.
[  445.944132][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  445.944147][   T28] audit: type=1400 audit(1049021.891:1077): avc:  denied  { bind } for  pid=13547 comm="syz.7.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  446.008534][   T28] audit: type=1400 audit(1049021.961:1078): avc:  denied  { unmount } for  pid=7825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  446.052899][T13558] ip6gre1: entered promiscuous mode
[  446.059879][T13558] ip6gre1: entered allmulticast mode
[  446.075380][T13558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  446.295350][ T1879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  446.304195][ T1879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  446.325523][ T7683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  446.335846][ T7683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  446.366895][T13569] xfrm0 speed is unknown, defaulting to 1000
[  446.522903][T13569] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.531213][T13569] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.538551][T13569] bridge_slave_0: entered allmulticast mode
[  446.545076][T13569] bridge_slave_0: entered promiscuous mode
[  446.552381][   T30] bridge_slave_1: left allmulticast mode
[  446.558158][   T30] bridge_slave_1: left promiscuous mode
[  446.564064][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.571805][   T30] bridge_slave_0: left allmulticast mode
[  446.577551][   T30] bridge_slave_0: left promiscuous mode
[  446.583312][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.621607][   T28] audit: type=1400 audit(1049022.571:1079): avc:  denied  { write } for  pid=13599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.644942][   T28] audit: type=1400 audit(1049022.571:1080): avc:  denied  { write } for  pid=13613 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.717061][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.725702][ T7683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  446.733973][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.743173][   T30] bond0 (unregistering): Released all slaves
[  446.750698][   T30] bond1 (unregistering): Released all slaves
[  446.758820][T13569] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.766027][T13569] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.773244][T13569] bridge_slave_1: entered allmulticast mode
[  446.779855][T13569] bridge_slave_1: entered promiscuous mode
[  446.791241][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9
[  446.799003][   T30] tipc: Left network mode
[  446.810666][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.823343][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.850630][T13569] team0: Port device team_slave_0 added
[  446.860249][T13618] xfrm0 speed is unknown, defaulting to 1000
[  446.861453][T13569] team0: Port device team_slave_1 added
[  446.888035][   T30] hsr_slave_0: left promiscuous mode
[  446.902428][   T30] hsr_slave_1: left promiscuous mode
[  446.909634][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.923299][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.971197][   T30] team0 (unregistering): Port device team_slave_1 removed
[  446.981205][   T30] team0 (unregistering): Port device team_slave_0 removed
[  446.983119][T13630] loop7: detected capacity change from 0 to 512
[  447.015784][T13630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  447.042000][T13630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.046608][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.061766][   T28] audit: type=1400 audit(1049279.016:1081): avc:  denied  { write } for  pid=13629 comm="syz.7.3028" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  447.084018][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.147275][T12879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.156660][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.189016][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.196121][T13637] loop7: detected capacity change from 0 to 128
[  447.202506][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.202532][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.231367][T13569] hsr_slave_0: entered promiscuous mode
[  447.254955][T13569] hsr_slave_1: entered promiscuous mode
[  447.261334][T13569] debugfs: 'hsr0' already exists in 'hsr'
[  447.267440][T13569] Cannot create hsr debugfs directory
[  447.292674][T13637] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  447.310300][   T28] audit: type=1400 audit(1049279.266:1082): avc:  denied  { write } for  pid=13635 comm="syz.7.3029" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  447.333566][   T28] audit: type=1400 audit(1049279.266:1083): avc:  denied  { setattr } for  pid=13635 comm="syz.7.3029" path="/42/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  447.388732][T13569] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  447.403664][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  447.412426][T13569] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  447.425514][   T28] audit: type=1400 audit(1049279.376:1084): avc:  denied  { write } for  pid=13638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.468959][   T28] audit: type=1400 audit(1049279.426:1085): avc:  denied  { write } for  pid=13657 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.542196][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  447.558972][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10
[  447.566256][T13569] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  447.567756][T12879] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  447.583299][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  447.593894][T13654] xfrm0 speed is unknown, defaulting to 1000
[  447.614709][   T30] IPVS: stop unused estimator thread 0...
[  447.622134][T13569] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  447.634532][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  447.701286][T13569] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.717791][T13569] 8021q: adding VLAN 0 to HW filter on device team0
[  447.746079][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.753245][ T1879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.767530][   T28] audit: type=1400 audit(1049279.726:1086): avc:  denied  { write } for  pid=13673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.795083][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.802171][ T1879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.891586][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11
[  448.035158][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.085392][T13727] loop7: detected capacity change from 0 to 256
[  448.185980][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12
[  448.273795][T13569] veth0_vlan: entered promiscuous mode
[  448.296932][T13569] veth1_vlan: entered promiscuous mode
[  448.327144][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'.
[  448.343524][T13569] veth0_macvtap: entered promiscuous mode
[  448.351566][T13569] veth1_macvtap: entered promiscuous mode
[  448.367416][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.394670][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.417661][   T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.427514][   T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.443992][   T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.463511][   T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.486162][T13765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5139 sclass=netlink_route_socket pid=13765 comm=syz.1.3051
[  448.552183][T13763] xfrm0 speed is unknown, defaulting to 1000
[  448.846965][T13778] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3054'.
[  448.870277][T13778] netlink: 35 bytes leftover after parsing attributes in process `syz.8.3054'.
[  448.888479][T13778] netlink: 'syz.8.3054': attribute type 5 has an invalid length.
[  448.909889][T13778] netlink: 'syz.8.3054': attribute type 6 has an invalid length.
[  448.925713][T13778] netlink: 35 bytes leftover after parsing attributes in process `syz.8.3054'.
[  448.994441][T13784] loop8: detected capacity change from 0 to 512
[  449.013948][T13784] EXT4-fs: Ignoring removed nomblk_io_submit option
[  449.035855][T13784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002]
[  449.044000][T13784] System zones: 1-12
[  449.048602][T13784] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3057: invalid indirect mapped block 8 (level 2)
[  449.062064][T13784] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  449.065101][T13784] EXT4-fs (loop8): 1 truncate cleaned up
[  449.074361][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  449.074379][    C1] EXT4-fs (loop8): initial error at time 1049281: ext4_free_branches:1023: inode 11
[  449.074421][    C1] EXT4-fs (loop8): last error at time 1049281: ext4_free_branches:1023: inode 11
[  449.105866][T13784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.167963][T13795] xfrm0 speed is unknown, defaulting to 1000
[  449.343972][T13797] xfrm0 speed is unknown, defaulting to 1000
[  449.357480][T13569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.506396][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'.
[  449.586924][T13828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3070'.
[  449.762893][T13797] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.781007][T13797] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.789707][T13797] bridge_slave_0: entered allmulticast mode
[  449.796511][T13797] bridge_slave_0: entered promiscuous mode
[  449.804215][T13797] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.811803][T13797] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.819167][T13797] bridge_slave_1: entered allmulticast mode
[  449.825749][T13797] bridge_slave_1: entered promiscuous mode
[  449.843264][T13797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.854761][T13797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.878430][T13797] team0: Port device team_slave_0 added
[  449.887085][T13797] team0: Port device team_slave_1 added
[  449.903283][T13797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.910388][T13797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.936509][T13797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.953186][T13797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.953992][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3079'.
[  449.960338][T13797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.995451][T13797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.031514][T13797] hsr_slave_0: entered promiscuous mode
[  450.038411][T13797] hsr_slave_1: entered promiscuous mode
[  450.044528][T13797] debugfs: 'hsr0' already exists in 'hsr'
[  450.050280][T13797] Cannot create hsr debugfs directory
[  450.146495][T13797] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  450.156823][T13797] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  450.165037][T13797] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  450.230090][T13797] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  450.240334][T13797] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  450.250729][T13797] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  450.258181][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  450.269381][T13797] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  450.280714][T13797] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  450.304525][T13873] xt_hashlimit: size too large, truncated to 1048576
[  450.356992][T13797] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.429782][T13797] 8021q: adding VLAN 0 to HW filter on device team0
[  450.451648][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.458739][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.470201][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.477328][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.524649][T13892] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in;
[  450.524649][T13892]    program syz.8.3090 not setting count and/or reply_len properly
[  450.559917][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'.
[  450.635448][T13910] loop8: detected capacity change from 0 to 512
[  450.644830][T13910] EXT4-fs: Ignoring removed nomblk_io_submit option
[  450.658159][T13910] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  450.662763][T13797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.668350][T13910] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3092: corrupted in-inode xattr: e_value size too large
[  450.687604][T13910] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  450.687743][T13910] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3092: couldn't read orphan inode 15 (err -117)
[  450.696899][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  450.696913][    C0] EXT4-fs (loop8): initial error at time 1049282: ext4_iget_extra_inode:5128: inode 15
[  450.696936][    C0] EXT4-fs (loop8): last error at time 1049282: ext4_iget_extra_inode:5128: inode 15
[  450.741992][T13910] loop8: lost filesystem error report for type 5 error -117
[  450.742865][T13910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.786054][T13569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.805564][T13931] loop8: detected capacity change from 0 to 256
[  450.821391][T13797] veth0_vlan: entered promiscuous mode
[  450.829166][T13797] veth1_vlan: entered promiscuous mode
[  450.855374][T13797] veth0_macvtap: entered promiscuous mode
[  450.869931][T13797] veth1_macvtap: entered promiscuous mode
[  450.875959][T13935] loop8: detected capacity change from 0 to 512
[  450.882271][T13797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.884080][T13935] EXT4-fs: Ignoring removed i_version option
[  450.896030][T13935] EXT4-fs: Ignoring removed bh option
[  450.902580][T13935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  450.912931][T13797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.924308][   T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.926271][T13935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.933112][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.962190][   T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.974920][   T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.986429][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  450.986442][   T28] audit: type=1400 audit(1049282.948:1091): avc:  denied  { write } for  pid=13934 comm="syz.8.3097" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  451.005402][T13935] EXT4-fs error (device loop8): ext4_resize_begin:60: comm syz.8.3097: resize_inode disabled but reserved GDT blocks non-zero
[  451.052710][T13569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.145040][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3103'.
[  451.180310][T13960] loop8: detected capacity change from 0 to 128
[  451.188229][T13960] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  451.206098][T13960] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  451.225167][ T1626] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  451.504168][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3116'.
[  451.606559][T13996] netlink: 'syz.8.3120': attribute type 10 has an invalid length.
[  451.618603][T13996] team0: Failed to send options change via netlink (err -105)
[  451.626587][T13996] team0: Port device dummy0 added
[  451.634991][T13996] netlink: 'syz.8.3120': attribute type 10 has an invalid length.
[  451.643420][T13996] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  451.654877][T13996] team0: Failed to send options change via netlink (err -105)
[  451.662482][T13996] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  451.672115][T13996] team0: Port device dummy0 removed
[  451.680044][T13996] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  452.500125][T14166] xfrm0 speed is unknown, defaulting to 1000
[  452.591953][T14175] SELinux:  truncated policydb string identifier
[  452.599389][T14175] SELinux: failed to load policy
[  452.623119][T14180] xt_recent: Unsupported userspace flags (000000b1)
[  452.633342][   T28] audit: type=1400 audit(1049284.599:1092): avc:  denied  { name_bind } for  pid=14181 comm="syz.8.3145" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  452.697545][ T1626] Bluetooth: hci0: Frame reassembly failed (-84)
[  452.732129][   T28] audit: type=1400 audit(1049284.689:1093): avc:  denied  { cmd } for  pid=14192 comm="syz.9.3151" path="socket:[46170]" dev="sockfs" ino=46170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  452.790485][   T28] audit: type=1400 audit(1049284.749:1094): avc:  denied  { name_bind } for  pid=14198 comm="syz.9.3154" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  452.861146][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.869867][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.889702][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.905997][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.921859][   T28] audit: type=1400 audit(1049284.879:1095): avc:  denied  { write } for  pid=14216 comm="syz.1.3161" path="socket:[45185]" dev="sockfs" ino=45185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  452.965412][T14220] xfrm0 speed is unknown, defaulting to 1000
[  453.051472][T14224] netlink: zone id is out of range
[  453.056715][T14224] netlink: zone id is out of range
[  453.062011][T14224] netlink: zone id is out of range
[  453.067340][T14224] netlink: zone id is out of range
[  453.079446][T14224] netlink: zone id is out of range
[  453.084798][T14224] netlink: zone id is out of range
[  453.089977][T14224] netlink: zone id is out of range
[  453.095257][T14224] netlink: zone id is out of range
[  453.100540][T14224] netlink: zone id is out of range
[  453.105926][T14224] netlink: zone id is out of range
[  453.819036][T14246] __nla_validate_parse: 7 callbacks suppressed
[  453.819062][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3170'.
[  454.507719][T14263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3178'.
[  454.517437][T14263] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3178'.
[  454.527496][T14263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3178'.
[  454.560046][T14268] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3180'.
[  454.607839][T14277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'.
[  454.624392][T14277] geneve2: entered promiscuous mode
[  454.630192][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.639124][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.647996][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.656985][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.722314][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  454.728419][ T3908] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  454.771107][T14296] netlink: 'syz.9.3192': attribute type 4 has an invalid length.
[  454.843839][   T28] audit: type=1400 audit(1049286.800:1096): avc:  denied  { shutdown } for  pid=14303 comm="syz.9.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  454.867885][   T28] audit: type=1400 audit(1049286.800:1097): avc:  denied  { read } for  pid=14303 comm="syz.9.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  455.466200][T14329] xfrm0 speed is unknown, defaulting to 1000
[  456.262725][   T28] audit: type=1400 audit(1049288.221:1098): avc:  denied  { getopt } for  pid=14375 comm="syz.1.3222" lport=43609 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  456.424520][T14388] xfrm0 speed is unknown, defaulting to 1000
[  456.699875][T14398] vlan0: Caught tx_queue_len zero misconfig
[  456.821772][   T28] audit: type=1400 audit(1049288.771:1099): avc:  denied  { connect } for  pid=14403 comm="syz.8.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  456.881870][   T28] audit: type=1400 audit(1049288.801:1100): avc:  denied  { setopt } for  pid=14404 comm="syz.4.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  456.966125][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3235'.
[  457.115445][T14426] team0: Device gtp1 is of different type
[  457.919847][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  457.945842][T14461] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3254'.
[  457.971471][T14461] tc_dump_action: action bad kind
[  458.172181][T14473] loop9: detected capacity change from 0 to 512
[  458.191788][T14473] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3259: inode has both inline data and extents flags
[  458.205368][T14473] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.205550][T14473] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3259: couldn't read orphan inode 15 (err -117)
[  458.214786][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  458.214814][    C0] EXT4-fs (loop9): initial error at time 1049290: ext4_orphan_get:1397: inode 15
[  458.214842][    C0] EXT4-fs (loop9): last error at time 1049290: ext4_orphan_get:1397: inode 15
[  458.252402][T14473] loop9: lost filesystem error report for type 5 error -117
[  458.252866][T14473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.343940][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.352681][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.398999][T13797] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.107808][T14512] loop8: detected capacity change from 0 to 512
[  459.115525][T14512] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  459.145924][T14512] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6
[  459.171796][T14512] loop8: detected capacity change from 0 to 128
[  459.185556][   T28] audit: type=1400 audit(1049291.142:1101): avc:  denied  { write } for  pid=14513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  459.216601][   T28] audit: type=1400 audit(1049291.142:1102): avc:  denied  { write } for  pid=14526 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  459.217418][T14512] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  459.265530][T14512] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.3275: No space for directory leaf checksum. Please run e2fsck -D.
[  459.281046][T14512] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.3275: checksumming directory block 0
[  459.295034][T14512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  459.304664][T14512] block device autoloading is deprecated and will be removed.
[  459.322684][T13569] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  459.600301][T14537] xfrm0 speed is unknown, defaulting to 1000
[  460.022791][   T28] audit: type=1400 audit(1049291.982:1103): avc:  denied  { write } for  pid=14560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.079555][   T28] audit: type=1400 audit(1049292.032:1104): avc:  denied  { write } for  pid=14575 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.298077][T14596] xfrm0 speed is unknown, defaulting to 1000
[  460.312317][   T28] audit: type=1400 audit(1049292.273:1105): avc:  denied  { write } for  pid=14580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.375490][   T28] audit: type=1400 audit(1049292.313:1106): avc:  denied  { write } for  pid=14599 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.574232][T14612] net_ratelimit: 3470 callbacks suppressed
[  460.574246][T14612] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  460.670632][T14623] ipip0: entered promiscuous mode
[  460.710894][T14627] xfrm0 speed is unknown, defaulting to 1000
[  460.874998][   T28] audit: type=1400 audit(1049292.823:1107): avc:  denied  { write } for  pid=14630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.149761][T14661] xt_hashlimit: size too large, truncated to 1048576
[  461.902662][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3328'.
[  462.002073][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.011839][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.225590][T14738] netlink: 59060 bytes leftover after parsing attributes in process `syz.4.3336'.
[  462.235143][T14738] netlink: zone id is out of range
[  462.240434][T14738] netlink: zone id is out of range
[  462.245597][T14738] netlink: zone id is out of range
[  462.250786][T14738] netlink: zone id is out of range
[  462.262078][T14738] netlink: zone id is out of range
[  462.267410][T14738] netlink: zone id is out of range
[  462.272649][T14738] netlink: zone id is out of range
[  462.277950][T14738] netlink: zone id is out of range
[  462.283150][T14738] netlink: zone id is out of range
[  462.561678][T14741] xfrm0 speed is unknown, defaulting to 1000
[  462.733436][T14744] loop8: detected capacity change from 0 to 512
[  462.784229][T14744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.802572][T14746] xfrm0 speed is unknown, defaulting to 1000
[  462.812368][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  462.812380][   T28] audit: type=1400 audit(1049294.774:1111): avc:  denied  { write } for  pid=14743 comm="syz.8.3338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.871558][   T28] audit: type=1400 audit(1049294.774:1112): avc:  denied  { append } for  pid=14743 comm="syz.8.3338" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  462.993933][T13569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.041594][T14754] xfrm0 speed is unknown, defaulting to 1000
[  463.231869][T14776] loop9: detected capacity change from 0 to 764
[  463.525545][T14776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.535593][T14776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.939970][T14791] loop8: detected capacity change from 0 to 512
[  463.964074][T14791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  463.973816][T14791] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3354: iget: bad i_size value: 38620345925642
[  463.986699][T14791] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  463.989434][T14791] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3354: couldn't read orphan inode 15 (err -117)
[  463.998652][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  463.998672][    C0] EXT4-fs (loop8): initial error at time 1049295: ext4_orphan_get:1397: inode 15
[  463.998696][    C0] EXT4-fs (loop8): last error at time 1049295: ext4_orphan_get:1397: inode 15
[  464.036773][T14791] loop8: lost filesystem error report for type 5 error -117
[  464.046297][T14791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.144024][T14800] loop9: detected capacity change from 0 to 1024
[  464.157182][T14800] EXT4-fs: Ignoring removed orlov option
[  464.164977][T13569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.189429][T14800] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.246239][   T28] audit: type=1400 audit(1049296.205:1113): avc:  denied  { write } for  pid=14799 comm="syz.9.3357" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  464.279010][T13797] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.335938][   T28] audit: type=1400 audit(1049296.205:1114): avc:  denied  { write } for  pid=14799 comm="syz.9.3357" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  464.391014][   T28] audit: type=1400 audit(1049296.205:1115): avc:  denied  { rename } for  pid=14799 comm="syz.9.3357" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  464.545224][T14811] syzkaller0: entered promiscuous mode
[  464.550731][T14811] syzkaller0: entered allmulticast mode
[  464.558147][T14805] veth0: entered promiscuous mode
[  464.563880][T14804] veth0: left promiscuous mode
[  464.648395][   T28] audit: type=1400 audit(1049296.615:1116): avc:  denied  { mounton } for  pid=14817 comm="syz.9.3363" path="/41/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  464.656736][T14820] syzkaller0: entered promiscuous mode
[  464.671523][T14818] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32
[  464.676983][T14820] syzkaller0: entered allmulticast mode
[  464.719950][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3365'.
[  464.982910][T14832] loop8: detected capacity change from 0 to 764
[  465.070791][T14851] lo: entered allmulticast mode
[  465.080685][T14854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.089883][T14854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.099534][T14854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.108309][T14854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.215744][T14832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.230698][T14832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.313197][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'.
[  465.702529][T14892] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  465.784750][T14896] loop9: detected capacity change from 0 to 512
[  465.810807][T14896] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.846565][   T28] audit: type=1400 audit(1049297.815:1117): avc:  denied  { write } for  pid=14893 comm="syz.9.3394" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  465.924882][T14895] loop8: detected capacity change from 0 to 512
[  465.931578][   T28] audit: type=1400 audit(1049297.835:1118): avc:  denied  { write } for  pid=14893 comm="syz.9.3394" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  466.002571][T14895] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  466.056990][T14895] EXT4-fs (loop8): 1 truncate cleaned up
[  466.090462][T14895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.158531][T13797] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.311987][   T28] audit: type=1400 audit(1049298.276:1119): avc:  denied  { write } for  pid=14894 comm="syz.8.3395" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  466.358509][T13569] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  466.572126][T14908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.592566][T14925] xfrm0 speed is unknown, defaulting to 1000
[  466.757735][T14928] xfrm0 speed is unknown, defaulting to 1000
[  466.902694][T14928] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.916178][T14928] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.923593][T14928] bridge_slave_0: entered allmulticast mode
[  466.930302][T14928] bridge_slave_0: entered promiscuous mode
[  466.937483][T14928] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.944676][T14928] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.952016][T14928] bridge_slave_1: entered allmulticast mode
[  466.958854][T14928] bridge_slave_1: entered promiscuous mode
[  466.976153][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.986634][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.006021][T14928] team0: Port device team_slave_0 added
[  467.012781][T14928] team0: Port device team_slave_1 added
[  467.029831][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.037003][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.079789][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.105536][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.121215][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.158686][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'.
[  467.172222][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.183737][T14948] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  467.202559][T14928] hsr_slave_0: entered promiscuous mode
[  467.208773][T14928] hsr_slave_1: entered promiscuous mode
[  467.260949][T14928] debugfs: 'hsr0' already exists in 'hsr'
[  467.272497][T14928] Cannot create hsr debugfs directory
[  467.320772][T14957] loop9: detected capacity change from 0 to 8192
[  467.573498][   T28] audit: type=1400 audit(1049299.536:1120): avc:  denied  { write } for  pid=14979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  467.785827][T14928] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  467.797066][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.804795][T14928] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  467.815158][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.823042][T14928] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  467.829694][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  467.829707][   T28] audit: type=1400 audit(1049299.786:1125): avc:  denied  { write } for  pid=15016 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  467.863868][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  467.877779][T14928] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  467.888224][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.948503][   T28] audit: type=1400 audit(1049299.916:1126): avc:  denied  { write } for  pid=15018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  467.962089][T14928] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.992879][   T28] audit: type=1400 audit(1049299.956:1127): avc:  denied  { write } for  pid=15035 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.005010][T14928] 8021q: adding VLAN 0 to HW filter on device team0
[  468.030376][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.037469][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.050682][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.057759][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.204513][T15049] xfrm0 speed is unknown, defaulting to 1000
[  468.213812][   T28] audit: type=1400 audit(1049300.176:1128): avc:  denied  { write } for  pid=15037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.301609][   T28] audit: type=1400 audit(1049300.267:1129): avc:  denied  { write } for  pid=15062 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.354119][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.432935][   T28] audit: type=1326 audit(1049300.397:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15067 comm="syz.1.3421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4360ecce59 code=0x7ffc0000
[  468.497219][   T28] audit: type=1326 audit(1049300.427:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15067 comm="syz.1.3421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4360ecce59 code=0x7ffc0000
[  468.564560][   T28] audit: type=1326 audit(1049300.427:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15067 comm="syz.1.3421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4360ecce59 code=0x7ffc0000
[  468.591980][T14928] veth0_vlan: entered promiscuous mode
[  468.611424][T14928] veth1_vlan: entered promiscuous mode
[  468.613671][   T28] audit: type=1326 audit(1049300.427:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15067 comm="syz.1.3421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4360ecce59 code=0x7ffc0000
[  468.669197][T14928] veth0_macvtap: entered promiscuous mode
[  468.699465][   T28] audit: type=1326 audit(1049300.497:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15067 comm="syz.1.3421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4360e8d68e code=0x7ffc0000
[  468.701427][T14928] veth1_macvtap: entered promiscuous mode
[  468.819855][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.854622][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.867981][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.878669][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.932485][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.944825][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.497982][T15168] tipc: Cannot configure node identity twice
[  469.649464][T15180] netlink: 59060 bytes leftover after parsing attributes in process `syz.1.3432'.
[  469.659568][T15180] net_ratelimit: 3470 callbacks suppressed
[  469.659626][T15180] netlink: zone id is out of range
[  469.670758][T15180] netlink: zone id is out of range
[  469.676167][T15180] netlink: zone id is out of range
[  469.681370][T15180] netlink: zone id is out of range
[  469.692723][T15180] netlink: zone id is out of range
[  469.698073][T15180] netlink: zone id is out of range
[  469.703229][T15180] netlink: zone id is out of range
[  469.708400][T15180] netlink: zone id is out of range
[  469.713696][T15180] netlink: zone id is out of range
[  469.718864][T15180] netlink: zone id is out of range
[  470.212945][T15183] syzkaller0: entered promiscuous mode
[  470.223227][T15183] syzkaller0: entered allmulticast mode
[  470.752059][T15210] lo: entered allmulticast mode
[  470.948470][T15243] loop9: detected capacity change from 0 to 1024
[  470.980468][T15243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  471.029319][T13797] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  471.375190][T15286] syzkaller0: entered promiscuous mode
[  471.380903][T15286] syzkaller0: entered allmulticast mode
[  471.538320][T15270] infiniband syz2: set down
[  471.542867][T15270] infiniband syz2: added ipvlan0
[  471.552949][T15270] RDS/IB: syz2: added
[  471.557038][T15270] smc: adding ib device syz2 with port count 1
[  471.563326][T15270] smc:    ib device syz2 port 1 has no pnetid
[  472.209743][T15306] xfrm0 speed is unknown, defaulting to 1000
[  472.632572][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  473.175829][T15324] loop9: detected capacity change from 0 to 512
[  473.184673][T15319] xfrm0 speed is unknown, defaulting to 1000
[  473.754262][T15352] syzkaller0: entered promiscuous mode
[  473.764542][T15352] syzkaller0: entered allmulticast mode
[  473.883461][ T7683] IPVS: starting estimator thread 0...
[  473.972796][T15356] IPVS: using max 2256 ests per chain, 112800 per kthread
[  474.055686][   T28] kauditd_printk_skb: 55 callbacks suppressed
[  474.055699][   T28] audit: type=1400 audit(1049306.029:1190): avc:  denied  { create } for  pid=15363 comm="syz.0.3484" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  474.581420][T15370] syzkaller0: entered promiscuous mode
[  474.598973][T15370] syzkaller0: entered allmulticast mode
[  475.300547][   T28] audit: type=1400 audit(1049307.260:1191): avc:  denied  { unlink } for  pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=3970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  475.514063][T15390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.523456][T15390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.918866][T15385] xfrm0 speed is unknown, defaulting to 1000
[  476.004231][T15394] syzkaller0: entered promiscuous mode
[  476.009774][T15394] syzkaller0: entered allmulticast mode
[  476.092149][T15402] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  476.137809][T15391] ==================================================================
[  476.145908][T15391] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
[  476.153617][T15391] 
[  476.155933][T15391] write to 0xffff888105b91000 of 8 bytes by task 15395 on cpu 1:
[  476.163637][T15391]  mas_wr_store_entry+0x3be9/0x5ad0
[  476.168831][T15391]  mas_store_prealloc+0x43e/0x690
[  476.173845][T15391]  vma_complete+0x3c7/0x850
[  476.178336][T15391]  __split_vma+0x593/0x640
[  476.182745][T15391]  vms_gather_munmap_vmas+0x184/0x850
[  476.188106][T15391]  do_vmi_align_munmap+0x1e1/0x400
[  476.193211][T15391]  do_vmi_munmap+0x1da/0x220
[  476.197790][T15391]  __vm_munmap+0x1a8/0x290
[  476.202202][T15391]  __x64_sys_munmap+0x36/0x50
[  476.206863][T15391]  x64_sys_call+0x9c0/0x3020
[  476.211442][T15391]  do_syscall_64+0x12c/0x3b0
[  476.216021][T15391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.221900][T15391] 
[  476.224207][T15391] read to 0xffff888105b91000 of 8 bytes by task 15391 on cpu 0:
[  476.231814][T15391]  mtree_range_walk+0x350/0x490
[  476.236649][T15391]  mas_walk+0x1cc/0x370
[  476.240791][T15391]  lock_vma_under_rcu+0xc9/0x210
[  476.245718][T15391]  do_user_addr_fault+0x232/0x1050
[  476.250818][T15391]  exc_page_fault+0x62/0xa0
[  476.255308][T15391]  asm_exc_page_fault+0x26/0x30
[  476.260146][T15391] 
[  476.262451][T15391] value changed: 0xffff8881427acc06 -> 0xffff888105b91000
[  476.269535][T15391] 
[  476.271842][T15391] Reported by Kernel Concurrency Sanitizer on:
[  476.277983][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.4.3494 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  476.288902][T15391] Tainted: [W]=WARN
[  476.292686][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  476.302729][T15391] ==================================================================