last executing test programs:

11.889446559s ago: executing program 0 (id=411):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000000c80), 0xff, 0x249, &(0x7f0000000880)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x4, 0x5, 0x9, 0x53950, 0xffffffffffffffff, 0x801, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x0, @void, @value, @value}, 0x50)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
truncate(&(0x7f0000000140)='./file2\x00', 0x3)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0, 0x140)
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x0, 0x42)
open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)

11.01297828s ago: executing program 0 (id=421):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@dioread_nolock}, {@usrjquota}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfc, 0x569, &(0x7f0000000c40)="$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")
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "21163a66af6a097c"})
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000140)='./file0/file0\x00', r2, 0x0, 0x0)

10.436363954s ago: executing program 0 (id=426):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))

10.143833481s ago: executing program 0 (id=432):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/72, 0x93, 0x48, 0x1, 0x5, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20008004, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf90800000053e6a846606e"], 0x10)

7.321399412s ago: executing program 0 (id=433):
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7151, 0x0)

5.518532519s ago: executing program 0 (id=460):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ptrace(0x10, 0x1)
inotify_init1(0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x6b, &(0x7f0000000f40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x22, 0x18, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x25, 0x2, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x10, 0x9, 0x9, 0x4}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x8, [0x931d, 0x5, 0x9, 0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xc71c83f4459687d, 0xf, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x5bf, 0x2, 0x97, 0x1d}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xf, 0xe}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x250, 0x8, 0x6, 0x5, 0x10, 0xc5}, 0x10, &(0x7f0000001000)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x5, 0x8, 0x9, 0xfff7, 0x1}]}, 0x1, [{0x0, 0x0}]})
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

5.266801402s ago: executing program 4 (id=471):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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")
creat(&(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYBLOB="1263a7b959383aa0a9fa10796416da755d29640e5041a395796348a83463470c07de0fe7c8e02a1a743587f58ffb22bbd585d0a5cbead9ca0823180dad88e609da79bbd442bddae537570748f21ac461994ea7754a096f9d50951ef0a07c555e2e53a20f4a407feef4892391f639afa0eccda43b87b58452d42073ba989bbdec9a81948e1f0c9cb8c0ad00fccafaefa58aadfc71bbd61088", @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000280)='./bus/file0\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000004c0)='./bus/file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x2)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

5.146185983s ago: executing program 4 (id=476):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00')
open_by_handle_at(r5, &(0x7f0000000280)=@shmem={0xc, 0x1, {0x2da}}, 0x0)

5.112458316s ago: executing program 4 (id=477):
socket$inet(0xa, 0x801, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa9b, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000180)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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")

5.07690495s ago: executing program 4 (id=478):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.940185092s ago: executing program 4 (id=479):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

4.076242202s ago: executing program 4 (id=494):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', <r1=>0x0})
setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4)
prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000001040)=[{0x400002, 0x2, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0x1}], 0x20)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(r0, &(0x7f0000001000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.460211945s ago: executing program 1 (id=548):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r3}, 0xc)

588.698225ms ago: executing program 1 (id=558):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000018092f80000080000d93c52a7387c0c8c2c6a0002b52171238e668c33790485d19a72967a362794226df3a1c3d70556127b6d02398d2934bda12e96420a99f0fc2bf26435a923c523dd453f79652e7d10e2a36804ce00db81ebd05e39095b7949af59fcce4fa864396dbb0677d12add78d344dc89e825d8df5bcc1577c2624c47ae760b729ca7564cf6a0", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

559.772058ms ago: executing program 1 (id=559):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
chdir(&(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0xb}, 0x18)

524.987551ms ago: executing program 1 (id=561):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6, @dev}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

494.765464ms ago: executing program 2 (id=564):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x2, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

484.247405ms ago: executing program 3 (id=565):
r0 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x800)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0xff, 0x7c2d, 0x80, 0x28, 0xe})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020601040000000000000000000000000500040000000000070001000600000016000300686173683a6e65742c706f72742c6e657400000005000500020000000c000780050015000f0000000900020073797a31"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00098008000140e000000205000100070000000900020073797a31"], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})

441.485549ms ago: executing program 2 (id=566):
setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

427.87606ms ago: executing program 3 (id=567):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00')
open_by_handle_at(r5, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x30}}, 0x9e4b)

357.970427ms ago: executing program 3 (id=568):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x85, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

357.272857ms ago: executing program 3 (id=569):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001040), 0x1, 0x784, &(0x7f00000007c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0}, 0x18)

356.636087ms ago: executing program 2 (id=570):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @generic={0x66, 0x0, 0x0, 0xfffc}, @initr0, @exit, @printk={@s, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

320.24144ms ago: executing program 2 (id=571):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x89)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008000ca748018200000", @ANYRES32, @ANYBLOB="00000000000000001820", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

284.435863ms ago: executing program 2 (id=572):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0)

140.167107ms ago: executing program 3 (id=573):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r0)
inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r1 = gettid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffe9, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
fcntl$setown(r0, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa1)
rmdir(&(0x7f0000000100)='./control\x00')

133.092798ms ago: executing program 1 (id=583):
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x800050, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)

129.719328ms ago: executing program 2 (id=574):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

36.194067ms ago: executing program 1 (id=575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
accept(r1, &(0x7f0000000080)=@can, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x790f, 0x80, 0x7f, 0x6}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

0s ago: executing program 3 (id=576):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback}, 0x10)
sendmsg(r3, &(0x7f0000003d40)={0x0, 0x7fffefff, &(0x7f0000002c80)=[{&(0x7f0000002980)='j', 0x1}], 0x300}, 0x0)

kernel console output (not intermixed with test programs):

1560 would solve the problem.
[   29.300963][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.324356][ T3261] hsr_slave_0: entered promiscuous mode
[   29.330462][ T3261] hsr_slave_1: entered promiscuous mode
[   29.336436][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.343986][ T3261] Cannot create hsr debugfs directory
[   29.351645][ T3260] hsr_slave_0: entered promiscuous mode
[   29.357834][ T3260] hsr_slave_1: entered promiscuous mode
[   29.363741][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.371339][ T3260] Cannot create hsr debugfs directory
[   29.387195][ T3265] hsr_slave_0: entered promiscuous mode
[   29.393362][ T3265] hsr_slave_1: entered promiscuous mode
[   29.399601][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.407212][ T3265] Cannot create hsr debugfs directory
[   29.474658][ T3263] hsr_slave_0: entered promiscuous mode
[   29.480771][ T3263] hsr_slave_1: entered promiscuous mode
[   29.486890][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.494467][ T3263] Cannot create hsr debugfs directory
[   29.589129][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.611181][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.632937][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.643844][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.687919][ T3260] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.699322][ T3260] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.709882][ T3260] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.721765][ T3260] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.742187][ T3265] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.751256][ T3265] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.762236][ T3265] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.773241][ T3265] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.819366][ T3263] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.828902][ T3263] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.838157][ T3263] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.847373][ T3263] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.883642][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.896118][ T3261] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.920617][ T3261] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.929156][ T3261] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.938333][ T3261] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.959006][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.967965][ T3266] 8021q: adding VLAN 0 to HW filter on device team0
[   29.979786][ T3260] 8021q: adding VLAN 0 to HW filter on device team0
[   29.990942][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.998983][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.006136][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.022699][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.029773][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.039204][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.046336][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.055101][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.062178][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.103354][ T3265] 8021q: adding VLAN 0 to HW filter on device team0
[   30.117362][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.130625][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.141116][ T1652] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.148228][ T1652] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.167579][ T1652] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.174687][ T1652] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.221155][ T3263] 8021q: adding VLAN 0 to HW filter on device team0
[   30.240726][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.255446][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.262554][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.275199][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.285775][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.292954][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.307360][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.350497][ T3261] 8021q: adding VLAN 0 to HW filter on device team0
[   30.367486][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.381175][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.388288][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.397425][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.404494][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.449993][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.460511][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.475602][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.513101][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.560438][ T3260] veth0_vlan: entered promiscuous mode
[   30.593861][ T3260] veth1_vlan: entered promiscuous mode
[   30.621980][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.668267][ T3265] veth0_vlan: entered promiscuous mode
[   30.682695][ T3265] veth1_vlan: entered promiscuous mode
[   30.692711][ T3260] veth0_macvtap: entered promiscuous mode
[   30.700626][ T3260] veth1_macvtap: entered promiscuous mode
[   30.735574][ T3265] veth0_macvtap: entered promiscuous mode
[   30.760823][ T3265] veth1_macvtap: entered promiscuous mode
[   30.778085][ T3263] veth0_vlan: entered promiscuous mode
[   30.793699][ T3261] veth0_vlan: entered promiscuous mode
[   30.801372][ T3263] veth1_vlan: entered promiscuous mode
[   30.807541][ T3266] veth0_vlan: entered promiscuous mode
[   30.814582][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.823245][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.833738][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.844704][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.855622][ T3266] veth1_vlan: entered promiscuous mode
[   30.866759][ T3261] veth1_vlan: entered promiscuous mode
[   30.873379][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.882590][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.893124][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.904221][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.913420][ T3265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.922190][ T3265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.930962][ T3265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.939796][ T3265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.952687][ T3260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.961527][ T3260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.970315][ T3260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.979121][ T3260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.995429][ T3263] veth0_macvtap: entered promiscuous mode
[   31.002956][ T3263] veth1_macvtap: entered promiscuous mode
[   31.025642][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.036297][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.046180][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.056657][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.067903][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.090152][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.100715][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.110606][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.121253][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.134302][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.148654][ T3261] veth0_macvtap: entered promiscuous mode
[   31.158433][ T3266] veth0_macvtap: entered promiscuous mode
[   31.166964][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.175698][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.184554][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.193341][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.206706][ T3261] veth1_macvtap: entered promiscuous mode
[   31.216634][ T3266] veth1_macvtap: entered promiscuous mode
[   31.228517][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.239160][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.249037][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.259502][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.269342][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.279778][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.290891][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.305948][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.316507][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.326372][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.336868][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.346694][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.357150][   T29] kauditd_printk_skb: 31 callbacks suppressed
[   31.357166][   T29] audit: type=1400 audit(1726654206.780:123): avc:  denied  { watch watch_reads } for  pid=3400 comm="syz.1.2" path="/0/control" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.386233][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.398633][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.422549][   T29] audit: type=1400 audit(1726654206.850:124): avc:  denied  { map_create } for  pid=3404 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.443096][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.453662][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.463660][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.474321][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.484481][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.485428][   T29] audit: type=1400 audit(1726654206.850:125): avc:  denied  { map_read map_write } for  pid=3404 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.495024][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.514642][   T29] audit: type=1400 audit(1726654206.890:126): avc:  denied  { open } for  pid=3404 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.524527][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.543303][   T29] audit: type=1400 audit(1726654206.890:127): avc:  denied  { kernel } for  pid=3404 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.573113][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.585669][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.596779][ T3261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.605680][ T3261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.614842][ T3261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.623645][ T3261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.645485][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.656049][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.665899][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.676403][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.686224][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.696675][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.706544][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.717157][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.728973][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.762632][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.771440][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.780202][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.788994][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.803376][   T29] audit: type=1400 audit(1726654207.230:128): avc:  denied  { create } for  pid=3414 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.822672][   T29] audit: type=1400 audit(1726654207.230:129): avc:  denied  { write } for  pid=3414 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.841755][   T29] audit: type=1400 audit(1726654207.230:130): avc:  denied  { setopt } for  pid=3414 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.911852][ T3420] loop4: detected capacity change from 0 to 128
[   31.925192][ T3421] loop3: detected capacity change from 0 to 128
[   31.941068][ T3420] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   31.969606][ T3421] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   31.986550][ T3421] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   31.999298][   T29] audit: type=1400 audit(1726654207.420:131): avc:  denied  { mount } for  pid=3418 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.025075][ T3421] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.049570][   T29] audit: type=1400 audit(1726654207.450:132): avc:  denied  { write } for  pid=3418 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.066308][ T3420] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   32.166727][ T3261] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   32.186151][ T3420] loop4: detected capacity change from 128 to 127
[   32.194181][ T3420] syz.4.5: attempt to access beyond end of device
[   32.194181][ T3420] loop4: rw=34817, sector=127, nr_sectors = 1 limit=127
[   32.247243][ T3420] syz.4.5 (3420) used greatest stack depth: 11136 bytes left
[   32.249309][ T3433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'.
[   32.258678][ T3266] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=992, inode=2, rec_len=1000, size=1024 fake=1
[   32.284868][ T3266] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2978: inode #12: comm syz-executor: corrupted xattr block 18: invalid header
[   32.289570][ T3437] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   32.341682][ T3266] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117)
[   32.377459][ T3266] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2978: inode #13: comm syz-executor: corrupted xattr block 18: invalid header
[   32.396813][ T3266] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117)
[   32.417070][ T3266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   32.540942][ T3451] loop0: detected capacity change from 0 to 512
[   32.579587][ T3451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.606194][ T3451] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.649066][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.696600][ T3456] loop3: detected capacity change from 0 to 4096
[   32.724334][ T3459] team0: Device ipvlan2 failed to register rx_handler
[   32.744804][ T3456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.788147][ T3457] syz.4.16[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   32.788225][ T3457] syz.4.16[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   32.867815][ T3459] syz.0.19 (3459) used greatest stack depth: 11024 bytes left
[   32.953722][ T3456] +}[@ (3456) used greatest stack depth: 10864 bytes left
[   32.961780][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.982624][ T3464] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22'.
[   32.995446][ T3464] netlink: 408 bytes leftover after parsing attributes in process `syz.2.22'.
[   33.127531][ T3478] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   33.348454][ T3482] loop0: detected capacity change from 0 to 1024
[   33.355129][ T3482] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   33.553409][ T3493] netlink: 'syz.4.33': attribute type 4 has an invalid length.
[   33.636028][ T3498] netlink: 'syz.4.33': attribute type 4 has an invalid length.
[   33.954041][ T3514] loop0: detected capacity change from 0 to 512
[   34.471157][ T3530] syzkaller0: entered promiscuous mode
[   34.476720][ T3530] syzkaller0: entered allmulticast mode
[   34.627395][ T3536] capability: warning: `syz.4.49' uses deprecated v2 capabilities in a way that may be insecure
[   34.700248][ T3542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.51'.
[   34.742734][ T3545] delete_channel: no stack
[   34.783466][ T3548] serio: Serial port pts0
[   34.881512][ T3552] pim6reg1: entered promiscuous mode
[   34.886995][ T3552] pim6reg1: entered allmulticast mode
[   34.958079][ T3554] loop2: detected capacity change from 0 to 1024
[   34.968886][ T3554] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   34.983727][ T3554] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   35.000361][ T3554] EXT4-fs (loop2): too many log groups per flexible block group
[   35.008198][ T3554] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   35.017075][ T3554] EXT4-fs (loop2): mount failed
[   35.067278][ T3559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'.
[   35.129507][ T3565] netlink: 'syz.2.60': attribute type 4 has an invalid length.
[   35.217958][    C0] hrtimer: interrupt took 49130 ns
[   35.225629][ T3569] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   35.365497][ T3580] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   35.455601][ T3586] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.517733][ T3593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.632439][ T3598] loop4: detected capacity change from 0 to 1024
[   35.648346][ T3598] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.74: casefold flag without casefold feature
[   35.665558][ T3598] EXT4-fs (loop4): get root inode failed
[   35.671290][ T3598] EXT4-fs (loop4): mount failed
[   35.928589][ T3607] syzkaller0: entered promiscuous mode
[   35.934174][ T3607] syzkaller0: entered allmulticast mode
[   35.934928][ T3613] loop1: detected capacity change from 0 to 2048
[   35.947989][ T3613] EXT4-fs: Ignoring removed mblk_io_submit option
[   35.991206][ T3613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.219582][ T3630] syz.2.83 uses obsolete (PF_INET,SOCK_PACKET)
[   36.270019][ T3613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.79: bg 0: block 234: padding at end of block bitmap is not set
[   36.289070][ T3613] EXT4-fs (loop1): Remounting filesystem read-only
[   36.308521][ T3626] EXT4-fs (loop1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5
[   36.396446][ T3613] syz.1.79 (3613) used greatest stack depth: 10088 bytes left
[   36.425989][   T29] kauditd_printk_skb: 126 callbacks suppressed
[   36.426006][   T29] audit: type=1400 audit(1726654211.850:259): avc:  denied  { write } for  pid=3636 comm="syz.4.85" name="001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   36.475988][   T29] audit: type=1400 audit(1726654211.870:260): avc:  denied  { unmount } for  pid=3265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.538659][ T3640] syzkaller0: entered allmulticast mode
[   36.555506][ T3640] syzkaller0 (unregistering): left allmulticast mode
[   36.613109][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.676905][   T29] audit: type=1400 audit(1726654212.100:261): avc:  denied  { create } for  pid=3644 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   36.773252][   T29] audit: type=1400 audit(1726654212.200:262): avc:  denied  { ioctl } for  pid=3650 comm="syz.1.90" path="socket:[4322]" dev="sockfs" ino=4322 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.863035][   T29] audit: type=1326 audit(1726654212.290:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   36.886413][   T29] audit: type=1326 audit(1726654212.290:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   36.909686][   T29] audit: type=1326 audit(1726654212.290:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   36.933154][   T29] audit: type=1326 audit(1726654212.290:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   36.956583][   T29] audit: type=1326 audit(1726654212.290:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   36.979871][   T29] audit: type=1326 audit(1726654212.290:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   37.352065][ T3669] loop2: detected capacity change from 0 to 512
[   37.360925][ T3668] bridge: RTM_NEWNEIGH with invalid ether address
[   37.392747][ T3669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.421914][ T3669] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.466429][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.536705][ T3682] syz.0.103 (3682) used greatest stack depth: 9952 bytes left
[   37.541891][ T3676] loop4: detected capacity change from 0 to 8192
[   37.555458][ T3676] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   37.668681][ T3691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'.
[   37.677636][ T3691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'.
[   37.686843][ T3691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'.
[   37.696448][ T3691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'.
[   38.205628][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   38.866037][ T3705] syz.4.108 (3705) used greatest stack depth: 6384 bytes left
[   38.956062][ T3718] loop2: detected capacity change from 0 to 256
[   39.067416][ T3718] FAT-fs (loop2): Directory bread(block 64) failed
[   39.117650][ T3718] FAT-fs (loop2): Directory bread(block 65) failed
[   39.237201][ T3718] FAT-fs (loop2): Directory bread(block 66) failed
[   39.243810][ T3718] FAT-fs (loop2): Directory bread(block 67) failed
[   39.262627][ T3718] FAT-fs (loop2): Directory bread(block 68) failed
[   39.278408][ T3718] FAT-fs (loop2): Directory bread(block 69) failed
[   39.285012][ T3718] FAT-fs (loop2): Directory bread(block 70) failed
[   39.291822][ T3718] FAT-fs (loop2): Directory bread(block 71) failed
[   39.300475][ T3718] FAT-fs (loop2): Directory bread(block 72) failed
[   39.308111][ T3718] FAT-fs (loop2): Directory bread(block 73) failed
[   39.345091][ T3735] tipc: Started in network mode
[   39.350074][ T3735] tipc: Node identity ce1d7e3c2263, cluster identity 4711
[   39.357408][ T3735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.373986][ T3735] syzkaller0: MTU too low for tipc bearer
[   39.379813][ T3735] tipc: Disabling bearer <eth:syzkaller0>
[   39.398084][ T3718] syz.2.117: attempt to access beyond end of device
[   39.398084][ T3718] loop2: rw=2049, sector=1224, nr_sectors = 68 limit=256
[   39.453648][ T3745] lo speed is unknown, defaulting to 1000
[   39.460807][ T3745] lo speed is unknown, defaulting to 1000
[   39.484586][ T3745] lo speed is unknown, defaulting to 1000
[   39.501495][ T3745] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   39.522588][ T3745] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   39.574673][ T3745] lo speed is unknown, defaulting to 1000
[   39.581394][ T3749] Zero length message leads to an empty skb
[   39.599645][ T3745] lo speed is unknown, defaulting to 1000
[   39.607276][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   39.620801][ T3749] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   39.629832][ T3749] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   39.638822][ T3749] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   39.647765][ T3749] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   39.656863][ T3749] geneve2: entered promiscuous mode
[   39.662134][ T3749] geneve2: entered allmulticast mode
[   39.676354][ T3745] lo speed is unknown, defaulting to 1000
[   39.683907][ T3752] usb usb8: usbfs: process 3752 (syz.1.129) did not claim interface 0 before use
[   39.696785][ T3745] lo speed is unknown, defaulting to 1000
[   39.709754][ T3745] lo speed is unknown, defaulting to 1000
[   39.927757][ T3767] loop7: detected capacity change from 0 to 16384
[   39.954608][ T3768] lo speed is unknown, defaulting to 1000
[   39.992789][ T3770] pim6reg: entered allmulticast mode
[   40.055965][ T3770] pim6reg: left allmulticast mode
[   40.089203][ T3774] loop1: detected capacity change from 0 to 512
[   40.097539][ T3774] =======================================================
[   40.097539][ T3774] WARNING: The mand mount option has been deprecated and
[   40.097539][ T3774]          and is ignored by this kernel. Remove the mand
[   40.097539][ T3774]          option from the mount to silence this warning.
[   40.097539][ T3774] =======================================================
[   40.135984][ T3771] loop7: detected capacity change from 16384 to 16383
[   40.165627][ T3774] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   40.216757][ T3774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c018, mo2=0002]
[   40.224865][ T3774] System zones: 0-2, 18-18, 34-34
[   40.230365][ T3774] EXT4-fs (loop1): orphan cleanup on readonly fs
[   40.237876][ T3774] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.136: Failed to acquire dquot type 1
[   40.253858][ T3774] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.136: Failed to acquire dquot type 1
[   40.266817][ T3774] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.136: bg 0: block 248: padding at end of block bitmap is not set
[   40.298098][ T3778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.307402][ T3774] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   40.325071][ T3778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.334343][ T3774] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.136: Failed to acquire dquot type 1
[   40.361075][ T3778] lo speed is unknown, defaulting to 1000
[   40.383563][ T3774] EXT4-fs (loop1): 1 orphan inode deleted
[   40.393973][ T3774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.937428][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.032963][ T3795] netlink: 64 bytes leftover after parsing attributes in process `syz.0.143'.
[   41.057629][ T3795] netlink: 408 bytes leftover after parsing attributes in process `syz.0.143'.
[   42.018414][ T3821] loop3: detected capacity change from 0 to 256
[   42.040582][ T3821] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   42.090134][ T3821] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   42.127717][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.184129][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.538386][ T3839] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   42.624835][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.633430][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.740377][ T3851] loop4: detected capacity change from 0 to 1024
[   42.747216][ T3851] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   42.879725][   T29] kauditd_printk_skb: 100 callbacks suppressed
[   42.879742][   T29] audit: type=1400 audit(1726654218.310:363): avc:  denied  { search } for  pid=3001 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.907993][   T29] audit: type=1400 audit(1726654218.320:364): avc:  denied  { read } for  pid=3001 comm="dhcpcd" name="n28" dev="tmpfs" ino=1212 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.929648][   T29] audit: type=1400 audit(1726654218.320:365): avc:  denied  { open } for  pid=3001 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=1212 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.952630][   T29] audit: type=1400 audit(1726654218.320:366): avc:  denied  { getattr } for  pid=3001 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=1212 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.982506][   T29] audit: type=1400 audit(1726654218.380:367): avc:  denied  { read } for  pid=3855 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.005504][   T29] audit: type=1400 audit(1726654218.380:368): avc:  denied  { open } for  pid=3855 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.030443][   T29] audit: type=1400 audit(1726654218.380:369): avc:  denied  { getattr } for  pid=3855 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.141770][   T29] audit: type=1400 audit(1726654218.570:370): avc:  denied  { write } for  pid=3854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.165334][   T29] audit: type=1400 audit(1726654218.570:371): avc:  denied  { add_name } for  pid=3854 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.188540][   T29] audit: type=1400 audit(1726654218.570:372): avc:  denied  { create } for  pid=3854 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   44.341937][ T3898] loop3: detected capacity change from 0 to 2048
[   44.348639][ T3898] ext4: Unknown parameter 'fowner<00000000000000060928'
[   44.390229][ T3902] loop3: detected capacity change from 0 to 1024
[   44.400194][ T3902] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   44.427859][ T3902] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   44.439124][ T3902] EXT4-fs (loop3): too many log groups per flexible block group
[   44.446892][ T3902] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   44.456203][ T3902] EXT4-fs (loop3): mount failed
[   44.506181][ T3916] loop3: detected capacity change from 0 to 1024
[   44.512762][ T3916] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   44.607471][ T3906] loop4: detected capacity change from 0 to 512
[   44.614614][ T3906] ext3: Unknown parameter 'dont_hash'
[   44.648254][ T3916] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   44.795452][ T3936] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   45.776714][ T3975] lo speed is unknown, defaulting to 1000
[   46.675577][ T3993] loop0: detected capacity change from 0 to 2048
[   46.707823][ T3994] netlink: 'syz.3.190': attribute type 8 has an invalid length.
[   46.728828][ T3993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.828066][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.987389][ T4012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.010097][ T4012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.016282][ T4010] syzkaller0: entered promiscuous mode
[   47.023362][ T4010] syzkaller0: entered allmulticast mode
[   47.059709][ T4012] lo speed is unknown, defaulting to 1000
[   47.340885][ T4045] loop3: detected capacity change from 0 to 2048
[   47.357531][ T4045] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00800000)
[   47.367572][ T4045] FAT-fs (loop3): Filesystem has been set read-only
[   47.403883][ T4047] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   47.530452][ T4052] netlink: 268 bytes leftover after parsing attributes in process `+}[@'.
[   47.539210][ T4052] unsupported nla_type 65024
[   47.943288][ T4054] xt_CT: No such helper "syz0"
[   48.044927][   T29] kauditd_printk_skb: 63 callbacks suppressed
[   48.044942][   T29] audit: type=1400 audit(1726654223.470:436): avc:  denied  { ioctl } for  pid=4061 comm="syz.4.223" path="net:[4026532438]" dev="nsfs" ino=4026532438 ioctlcmd=0x2406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   48.163659][   T29] audit: type=1400 audit(1726654223.590:437): avc:  denied  { name_bind } for  pid=4072 comm="syz.4.225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   48.185249][   T29] audit: type=1400 audit(1726654223.590:438): avc:  denied  { map } for  pid=4072 comm="syz.4.225" path="socket:[4984]" dev="sockfs" ino=4984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   48.195740][ T4075] loop4: detected capacity change from 0 to 128
[   48.208010][   T29] audit: type=1400 audit(1726654223.590:439): avc:  denied  { read } for  pid=4072 comm="syz.4.225" path="socket:[4984]" dev="sockfs" ino=4984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   48.239689][ T4075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.253766][ T4075] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   48.288962][   T29] audit: type=1400 audit(1726654223.720:440): avc:  denied  { setattr } for  pid=4074 comm="syz.4.226" path="/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.343266][   T29] audit: type=1400 audit(1726654223.770:441): avc:  denied  { link } for  pid=4074 comm="syz.4.226" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.394985][   T29] audit: type=1400 audit(1726654223.820:442): avc:  denied  { create } for  pid=4074 comm="syz.4.226" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   48.440465][ T3266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.467450][   T29] audit: type=1400 audit(1726654223.900:443): avc:  denied  { append } for  pid=4079 comm="syz.3.228" name="001" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   48.557764][   T29] audit: type=1400 audit(1726654223.970:444): avc:  denied  { read } for  pid=4089 comm="syz.4.233" name="event1" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   48.588621][   T29] audit: type=1400 audit(1726654224.020:445): avc:  denied  { create } for  pid=4093 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.623491][ T4094] loop4: detected capacity change from 0 to 2048
[   48.638825][ T4094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.641526][ T4084] lo speed is unknown, defaulting to 1000
[   48.657371][ T4094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.234: bg 0: block 274: padding at end of block bitmap is not set
[   48.657825][ T4094] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[   48.657853][ T4094] EXT4-fs (loop4): This should not happen!! Data will be lost
[   48.657853][ T4094] 
[   48.777441][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.886498][ T4109] Process accounting resumed
[   49.182046][ T4121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.254709][ T4121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.299452][ T4121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.349622][ T4121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.402403][ T4121] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.413726][ T4121] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.424550][ T4121] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.435470][ T4121] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.674876][ T4128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.245'.
[   49.917703][ T4138] loop0: detected capacity change from 0 to 128
[   50.046222][ T4142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'.
[   50.198418][ T4157] loop2: detected capacity change from 0 to 128
[   50.282610][ T4159] loop3: detected capacity change from 0 to 2048
[   50.289510][ T4159] msdos: Unknown parameter ''
[   50.328645][ T4159] netlink: '+}[@': attribute type 10 has an invalid length.
[   50.391389][ T4159] team0: Device hsr_slave_0 failed to register rx_handler
[   50.438854][ T4165] loop3: detected capacity change from 0 to 512
[   50.470919][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.505533][ T4165] ext4 filesystem being mounted at /60/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.553308][ T4169] lo speed is unknown, defaulting to 1000
[   50.575846][ T4171] batadv0: entered promiscuous mode
[   50.652776][ T4165] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.262: Directory hole found for htree leaf block 0
[   50.693096][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   50.716683][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   50.741067][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   50.764262][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   50.768243][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.787129][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   50.792039][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.815061][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.819596][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.830301][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   50.835343][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.863704][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.863753][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.878653][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.879006][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   50.886117][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.886146][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.921039][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.921065][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.921090][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.921116][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.937933][ T4165] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.262: lblock 23 mapped to illegal pblock 18 (length 1)
[   50.943362][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.962115][ T4165] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 19: comm syz.3.262: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   50.964981][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.000097][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.007594][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.015521][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.023162][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.030607][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.038053][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.045516][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.052988][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.060439][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.067943][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.075376][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.082881][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.082911][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.082936][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.082959][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.112568][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.112648][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.128628][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.136856][ T3407] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   51.141825][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.240352][ T4183] loop0: detected capacity change from 0 to 2048
[   51.257364][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.283028][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.326599][ T4189] SELinux: failed to load policy
[   51.425072][ T4197] loop4: detected capacity change from 0 to 1024
[   51.443114][ T4197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.485364][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.507640][ T4209] serio: Serial port pts0
[   51.781870][ T4240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.793186][ T4240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.796233][ T4236] loop0: detected capacity change from 0 to 2048
[   51.828517][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.843413][ T4240] lo speed is unknown, defaulting to 1000
[   51.900043][ T4236] veth0_vlan: left promiscuous mode
[   51.952918][ T4245] siw: device registration error -23
[   51.979301][ T4247] pim6reg1: entered promiscuous mode
[   51.984529][ T3260] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   51.984879][ T4247] pim6reg1: entered allmulticast mode
[   52.008153][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.078141][ T4253] loop4: detected capacity change from 0 to 128
[   52.085029][ T4253] FAT-fs (loop4): bogus logical sector size 12
[   52.091270][ T4253] FAT-fs (loop4): Can't find a valid FAT filesystem
[   52.137790][ T4257] loop3: detected capacity change from 0 to 512
[   52.157941][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.172236][ T4257] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.199975][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.306377][ T4270] syzkaller0: entered promiscuous mode
[   52.393906][ T4274] program syz.0.302 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.435443][ T4279] loop0: detected capacity change from 0 to 128
[   52.444343][ T4279] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   52.456659][ T4279] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.479334][ T3260] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   52.503537][ T4282] loop0: detected capacity change from 0 to 1024
[   52.510623][ T4282] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   52.521207][ T4282] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   52.532357][ T4282] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #4: comm syz.0.305: blocks 32-33 from inode overlap system zone
[   52.546480][ T4282] EXT4-fs (loop0): failed to initialize system zone (-117)
[   52.553775][ T4282] EXT4-fs (loop0): mount failed
[   52.578859][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'.
[   52.665536][ T4290] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   52.836027][ T4294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.307'.
[   52.845130][ T4294] netlink: 56 bytes leftover after parsing attributes in process `syz.0.307'.
[   52.910276][ T4292] lo speed is unknown, defaulting to 1000
[   52.922187][ T4304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.935095][   T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.945611][ T4304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.012798][   T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.027646][ T4292] chnl_net:caif_netlink_parms(): no params data found
[   53.067579][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.074693][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.082005][ T4292] bridge_slave_0: entered allmulticast mode
[   53.088604][ T4292] bridge_slave_0: entered promiscuous mode
[   53.108383][   T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.124229][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.131456][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.140422][ T4292] bridge_slave_1: entered allmulticast mode
[   53.147167][ T4292] bridge_slave_1: entered promiscuous mode
[   53.157709][ T4311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.311'.
[   53.167162][ T4311] unsupported nlmsg_type 40
[   53.189386][   T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.223126][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.237107][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.264361][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'.
[   53.273283][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.280747][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.296281][ T4292] team0: Port device team_slave_0 added
[   53.302818][ T4292] team0: Port device team_slave_1 added
[   53.324343][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.331394][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.357410][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.386139][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.393138][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.419570][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.458432][   T50] bridge_slave_1: left allmulticast mode
[   53.464135][   T50] bridge_slave_1: left promiscuous mode
[   53.469841][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.487475][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.494973][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.502432][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.509882][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.517315][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.524720][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.532246][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.539682][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.547127][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.554646][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.562134][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.569562][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.576987][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.584457][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.591921][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.599335][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.606761][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.614186][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.621634][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.629059][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.636583][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.636718][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.644106][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.644152][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.667692][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.675413][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.682878][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.690593][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.698053][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.705508][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.713027][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.720507][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.727962][ T3337] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   53.735931][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.736437][ T3337] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   53.758182][   T50] bridge_slave_0: left allmulticast mode
[   53.759551][ T4319] loop2: detected capacity change from 0 to 512
[   53.763903][   T50] bridge_slave_0: left promiscuous mode
[   53.770691][ T4319] journal_path: Lookup failure for './bus'
[   53.776028][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.781694][ T4319] EXT4-fs: error: could not find journal device path
[   53.968595][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.979046][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.989775][   T50] bond0 (unregistering): Released all slaves
[   54.036371][ T4292] hsr_slave_0: entered promiscuous mode
[   54.045405][ T4292] hsr_slave_1: entered promiscuous mode
[   54.058890][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.070697][   T50] IPVS: stopping backup sync thread 3437 ...
[   54.080045][ T4292] Cannot create hsr debugfs directory
[   54.089117][   T50] hsr_slave_0: left promiscuous mode
[   54.098897][   T50] hsr_slave_1: left promiscuous mode
[   54.110150][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.117735][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.135447][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.143016][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.162246][   T50] veth1_macvtap: left promiscuous mode
[   54.167910][   T50] veth0_macvtap: left promiscuous mode
[   54.173478][   T50] veth1_vlan: left promiscuous mode
[   54.178751][   T50] veth0_vlan: left promiscuous mode
[   54.279785][   T50] team0 (unregistering): Port device team_slave_1 removed
[   54.291148][   T50] team0 (unregistering): Port device team_slave_0 removed
[   54.391080][ T4346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.412540][ T4346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.502397][ T4354] loop3: detected capacity change from 0 to 4096
[   54.514661][ T4354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.664863][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.727755][ T4368] loop3: detected capacity change from 0 to 512
[   54.740005][ T4368] EXT4-fs (loop3): 1 truncate cleaned up
[   54.786334][ T4368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.804860][ T4292] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.823379][ T4292] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.832914][ T4368] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.320: Directory hole found for htree leaf block 0
[   54.866823][ T4292] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.876431][ T4292] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.883176][ T4368] EXT4-fs (loop3): Remounting filesystem read-only
[   54.986189][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.069920][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.135292][ T4292] 8021q: adding VLAN 0 to HW filter on device team0
[   55.159447][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.166579][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.179497][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.186645][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.262019][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.282098][ T4416] tipc: Started in network mode
[   55.287257][ T4416] tipc: Node identity b262eb81b3c2, cluster identity 4711
[   55.294623][ T4416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.302720][ T4416] ªªªªªª: renamed from syzkaller0
[   55.309868][ T4416] tipc: Disabling bearer <eth:syzkaller0>
[   55.384258][ T4425] syz.2.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   55.406516][ T4425] xt_hashlimit: size too large, truncated to 1048576
[   55.408199][ T4292] veth0_vlan: entered promiscuous mode
[   55.422812][ T4292] veth1_vlan: entered promiscuous mode
[   55.440806][ T4292] veth0_macvtap: entered promiscuous mode
[   55.449373][ T4292] veth1_macvtap: entered promiscuous mode
[   55.460438][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.471088][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.481005][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.491552][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.501452][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.511998][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.525697][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.538934][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.549532][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.559725][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.570246][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.580097][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.590757][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.603847][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.628828][ T4292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.637722][ T4292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.646488][ T4292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.655238][ T4292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.711366][ T4432] loop1: detected capacity change from 0 to 128
[   55.765102][ T4435] loop1: detected capacity change from 0 to 2048
[   55.787548][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.821409][   T29] kauditd_printk_skb: 118 callbacks suppressed
[   55.821427][   T29] audit: type=1400 audit(1726654231.250:564): avc:  denied  { execute } for  pid=4434 comm="syz.1.332" path="/1/bus/cgroup.stat" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.867534][ T4292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.959648][   T29] audit: type=1400 audit(1726654231.390:565): avc:  denied  { ioctl } for  pid=4440 comm="syz.1.334" path="socket:[7984]" dev="sockfs" ino=7984 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.089938][ T4447] loop1: detected capacity change from 0 to 128
[   56.122047][ T4447] syz.1.337: attempt to access beyond end of device
[   56.122047][ T4447] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128
[   56.167963][ T4447] syz.1.337: attempt to access beyond end of device
[   56.167963][ T4447] loop1: rw=2049, sector=153, nr_sectors = 24 limit=128
[   56.193058][ T4447] syz.1.337: attempt to access beyond end of device
[   56.193058][ T4447] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128
[   56.206596][ T4447] Buffer I/O error on dev loop1, logical block 177, lost async page write
[   56.383318][   T29] audit: type=1400 audit(1726654231.810:566): avc:  denied  { connect } for  pid=4465 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   56.500194][ T4486] loop2: detected capacity change from 0 to 128
[   56.535817][ T4484] syzkaller0: entered promiscuous mode
[   56.541452][ T4484] syzkaller0: entered allmulticast mode
[   56.551710][ T4486] syz.2.349: attempt to access beyond end of device
[   56.551710][ T4486] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128
[   56.802281][ T4528] Driver unsupported XDP return value 0 on prog  (id 323) dev N/A, expect packet loss!
[   56.828121][   T29] audit: type=1400 audit(1726654232.260:567): avc:  denied  { bind } for  pid=4533 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   56.994946][   T29] audit: type=1400 audit(1726654232.420:568): avc:  denied  { write } for  pid=4551 comm="syz.0.358" path="socket:[8242]" dev="sockfs" ino=8242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.098857][   T29] audit: type=1400 audit(1726654232.530:569): avc:  denied  { view } for  pid=4555 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   57.118722][ T4557] netlink: 68 bytes leftover after parsing attributes in process `syz.0.359'.
[   57.141182][ T4557] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[   57.151994][ T4557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.161560][ T4557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.275501][ T4570] sd 0:0:1:0: device reset
[   57.820604][ T4604] hsr_slave_0: left promiscuous mode
[   57.827152][ T4604] hsr_slave_1: left promiscuous mode
[   57.900458][   T29] audit: type=1326 audit(1726654233.330:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbcfdef9 code=0x7ffc0000
[   57.924308][   T29] audit: type=1326 audit(1726654233.330:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f04dbcfdef9 code=0x7ffc0000
[   57.947542][   T29] audit: type=1326 audit(1726654233.330:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbcfdef9 code=0x7ffc0000
[   57.970857][   T29] audit: type=1326 audit(1726654233.330:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbcfdef9 code=0x7ffc0000
[   58.067268][ T4613] loop3: detected capacity change from 0 to 512
[   58.075616][ T4613] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c018, mo2=0002]
[   58.083939][ T4613] System zones: 0-2, 18-18, 34-34
[   58.089622][ T4613] EXT4-fs (loop3): orphan cleanup on readonly fs
[   58.098924][ T4613] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.366: Failed to acquire dquot type 1
[   58.105308][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.119836][ T4613] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.366: Failed to acquire dquot type 1
[   58.131262][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.132281][ T4613] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.366: bg 0: block 248: padding at end of block bitmap is not set
[   58.156890][ T4621] loop2: detected capacity change from 0 to 128
[   58.177145][ T4620] lo speed is unknown, defaulting to 1000
[   58.190257][ T4613] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   58.207961][ T4613] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.366: Failed to acquire dquot type 1
[   58.225608][ T4613] EXT4-fs (loop3): 1 orphan inode deleted
[   58.233716][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   58.289659][ T4624] loop0: detected capacity change from 0 to 512
[   58.298562][ T4624] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   58.310410][ T4624] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   58.319854][ T4624] EXT4-fs (loop0): 1 truncate cleaned up
[   58.327445][ T4624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.388214][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.545479][ T4635] bridge0: port 3(veth0_to_bond) entered blocking state
[   58.552721][ T4635] bridge0: port 3(veth0_to_bond) entered disabled state
[   58.560428][ T4635] veth0_to_bond: entered allmulticast mode
[   58.567058][ T4635] veth0_to_bond: entered promiscuous mode
[   58.573046][ T4635] bridge0: port 3(veth0_to_bond) entered blocking state
[   58.580192][ T4635] bridge0: port 3(veth0_to_bond) entered forwarding state
[   58.612511][ T4639] loop0: detected capacity change from 0 to 128
[   58.638804][ T4641] loop2: detected capacity change from 0 to 512
[   58.657593][ T4641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.670628][ T4641] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.682621][ T4641] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   58.705056][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.952093][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.331787][ T4659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.381'.
[   59.803906][ T4675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   60.072179][ T4681] serio: Serial port pts0
[   60.183721][ T4686] lo speed is unknown, defaulting to 1000
[   60.609940][ T4695] syz.2.395[4695] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.610050][ T4695] syz.2.395[4695] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.646708][ T4697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.396'.
[   60.667519][ T4697] netlink: 'syz.2.396': attribute type 10 has an invalid length.
[   60.684245][ T4697] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   60.865098][   T29] kauditd_printk_skb: 74 callbacks suppressed
[   60.865124][   T29] audit: type=1400 audit(1726654236.290:642): avc:  denied  { execute } for  pid=4703 comm="syz.2.400" path="/88/cpu.stat" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   60.904391][   T29] audit: type=1400 audit(1726654236.290:643): avc:  denied  { listen } for  pid=4703 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   60.938724][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.403'.
[   60.947927][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.403'.
[   60.969822][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.403'.
[   60.990752][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.403'.
[   61.004342][   T29] audit: type=1400 audit(1726654236.440:644): avc:  denied  { name_bind } for  pid=4719 comm="syz.1.405" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   61.030754][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'.
[   61.037190][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.403'.
[   61.046419][ T4724] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[   61.054825][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.403'.
[   61.113465][ T4727] loop0: detected capacity change from 0 to 1024
[   61.135055][ T4732] loop1: detected capacity change from 0 to 256
[   61.146682][ T4727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.174261][ T4732] FAT-fs (loop1): Directory bread(block 64) failed
[   61.193060][ T4732] FAT-fs (loop1): Directory bread(block 65) failed
[   61.223595][   T36] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   61.259724][ T4732] FAT-fs (loop1): Directory bread(block 66) failed
[   61.301696][ T4739] loop2: detected capacity change from 0 to 512
[   61.308449][ T4732] FAT-fs (loop1): Directory bread(block 67) failed
[   61.315763][   T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   61.328071][   T36] EXT4-fs (loop0): This should not happen!! Data will be lost
[   61.328071][   T36] 
[   61.337783][   T36] EXT4-fs (loop0): Total free blocks count 0
[   61.343773][   T36] EXT4-fs (loop0): Free/Dirty block details
[   61.349703][   T36] EXT4-fs (loop0): free_blocks=68451041280
[   61.355592][   T36] EXT4-fs (loop0): dirty_blocks=16
[   61.360730][   T36] EXT4-fs (loop0): Block reservation details
[   61.366739][   T36] EXT4-fs (loop0): i_reserved_data_blocks=1
[   61.375606][ T4732] FAT-fs (loop1): Directory bread(block 68) failed
[   61.383024][ T4732] FAT-fs (loop1): Directory bread(block 69) failed
[   61.399345][ T4732] FAT-fs (loop1): Directory bread(block 70) failed
[   61.410866][ T4732] FAT-fs (loop1): Directory bread(block 71) failed
[   61.422412][ T4732] FAT-fs (loop1): Directory bread(block 72) failed
[   61.430151][ T4732] FAT-fs (loop1): Directory bread(block 73) failed
[   61.443667][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.469239][ T4739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.492659][ T4739] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.514170][ T4732] process 'syz.1.409' launched './file0' with NULL argv: empty string added
[   61.529885][ T4732] syz.1.409: attempt to access beyond end of device
[   61.529885][ T4732] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256
[   61.543838][ T4732] syz.1.409: attempt to access beyond end of device
[   61.543838][ T4732] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256
[   61.561026][ T4743] loop0: detected capacity change from 0 to 128
[   61.571408][ T4743] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.588210][ T4743] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.602963][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.618295][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.618900][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.641028][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.656480][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.669265][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.684599][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.725009][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.740420][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.760142][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.775545][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.788650][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.804395][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.817983][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.833300][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.841998][    T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1)
[   61.845309][   T29] audit: type=1326 audit(1726654237.250:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   61.877188][   T29] audit: type=1326 audit(1726654237.250:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   61.891599][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   61.900502][   T29] audit: type=1326 audit(1726654237.250:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   61.915818][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   61.939043][   T29] audit: type=1326 audit(1726654237.250:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   61.974411][   T29] audit: type=1326 audit(1726654237.250:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   61.997744][   T29] audit: type=1326 audit(1726654237.250:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   61.999368][ T4760] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   62.021018][   T29] audit: type=1326 audit(1726654237.250:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   62.036253][ T4760] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   62.054794][ T4743] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.411: No space for directory leaf checksum. Please run e2fsck -D.
[   62.086780][ T4743] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.411: checksumming directory block 0
[   62.122034][ T3260] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.128250][ T4763] loop3: detected capacity change from 0 to 512
[   62.148528][ T4765] loop0: detected capacity change from 0 to 512
[   62.171549][ T4765] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.421: corrupted in-inode xattr: invalid ea_ino
[   62.185558][ T4765] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.421: couldn't read orphan inode 15 (err -117)
[   62.200121][ T4763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.213005][ T4763] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.236641][ T4765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.328698][ T4765] loop0: detected capacity change from 512 to 0
[   62.350818][ T4765] syz.0.421: attempt to access beyond end of device
[   62.350818][ T4765] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0
[   62.382422][ T4765] syz.0.421: attempt to access beyond end of device
[   62.382422][ T4765] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0
[   62.416428][ T4765] syz.0.421: attempt to access beyond end of device
[   62.416428][ T4765] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0
[   62.473298][ T4765] syz.0.421: attempt to access beyond end of device
[   62.473298][ T4765] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0
[   62.487972][ T4765] syz.0.421: attempt to access beyond end of device
[   62.487972][ T4765] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0
[   62.501956][ T4765] syz.0.421: attempt to access beyond end of device
[   62.501956][ T4765] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0
[   62.515284][ T4765] syz.0.421: attempt to access beyond end of device
[   62.515284][ T4765] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0
[   62.552314][ T4765] syz.0.421: attempt to access beyond end of device
[   62.552314][ T4765] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0
[   62.575984][ T4765] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #12: block 7: comm syz.0.421: unable to read itable block
[   62.578929][ T4779] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #12: block 7: comm syz.0.421: unable to read itable block
[   62.596544][ T4765] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   62.609575][ T4779] EXT4-fs (loop0): previous I/O error to superblock detected
[   62.617524][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.626896][ T4779] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   62.635242][ T4765] EXT4-fs (loop0): I/O error while writing superblock
[   62.642081][ T4779] EXT4-fs (loop0): I/O error while writing superblock
[   62.698002][ T3260] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[   62.729698][   T36] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4556: inode #18: block 9: comm kworker/u8:2: unable to read itable block
[   62.744064][   T36] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   62.753739][   T36] EXT4-fs (loop0): I/O error while writing superblock
[   62.760833][   T36] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4556: inode #12: block 7: comm kworker/u8:2: unable to read itable block
[   62.777601][   T36] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   62.786576][   T36] EXT4-fs (loop0): I/O error while writing superblock
[   62.796126][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.806965][ T3260] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   62.815279][ T3260] EXT4-fs (loop0): I/O error while writing superblock
[   62.858186][ T4789] loop1: detected capacity change from 0 to 128
[   62.867909][ T4789] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.880256][ T4789] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   62.920451][ T4292] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.960438][ T4794] loop3: detected capacity change from 0 to 2048
[   62.988762][ T4794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.005044][ T4794] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.431: bg 0: block 234: padding at end of block bitmap is not set
[   63.035399][ T4794] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[   63.048015][ T4794] EXT4-fs (loop3): This should not happen!! Data will be lost
[   63.048015][ T4794] 
[   63.085452][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.157082][ T4800] lo speed is unknown, defaulting to 1000
[   63.224218][ T4800] chnl_net:caif_netlink_parms(): no params data found
[   63.272511][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.279654][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.297987][ T4800] bridge_slave_0: entered allmulticast mode
[   63.304703][ T4800] bridge_slave_0: entered promiscuous mode
[   63.313358][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.320492][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.330301][ T4800] bridge_slave_1: entered allmulticast mode
[   63.336864][ T4800] bridge_slave_1: entered promiscuous mode
[   63.361989][ T4800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.372755][ T4800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.381974][ T4827] netlink: 'syz.3.440': attribute type 4 has an invalid length.
[   63.398606][ T4827] netlink: 'syz.3.440': attribute type 4 has an invalid length.
[   63.414405][ T4800] team0: Port device team_slave_0 added
[   63.421983][ T4800] team0: Port device team_slave_1 added
[   63.433118][ T4830] syz.3.441[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   63.433198][ T4830] syz.3.441[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   63.446415][ T4830] syz.3.441[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   63.457844][ T4830] syz.3.441[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   63.561900][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.580296][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.606237][ T4800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.678412][ T4834] loop3: detected capacity change from 0 to 2048
[   63.689074][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.696120][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.722169][ T4800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.738374][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.776794][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.814985][ T4800] hsr_slave_0: entered promiscuous mode
[   63.821546][ T4800] hsr_slave_1: entered promiscuous mode
[   63.829062][ T4800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.837285][ T4800] Cannot create hsr debugfs directory
[   63.859852][ T4838] mmap: syz.3.443 (4838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   63.900812][ T4841] loop1: detected capacity change from 0 to 2048
[   63.915237][ T4800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.925711][ T4800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   63.927556][ T4841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.953435][ T4840] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   63.968396][ T4840] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   63.980627][ T4840] EXT4-fs (loop1): This should not happen!! Data will be lost
[   63.980627][ T4840] 
[   63.990310][ T4840] EXT4-fs (loop1): Total free blocks count 0
[   63.996455][ T4840] EXT4-fs (loop1): Free/Dirty block details
[   64.002488][ T4840] EXT4-fs (loop1): free_blocks=2415919104
[   64.008253][ T4840] EXT4-fs (loop1): dirty_blocks=64
[   64.013397][ T4840] EXT4-fs (loop1): Block reservation details
[   64.019459][ T4840] EXT4-fs (loop1): i_reserved_data_blocks=4
[   64.032644][ T1595] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 26 with max blocks 26 with error 28
[   64.048613][ T4800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.059848][ T4800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.100228][ T4800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.110727][ T4800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.173485][ T4851] loop2: detected capacity change from 0 to 512
[   64.182926][ T4851] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[   64.191673][ T4800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.194064][ T4851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   64.202719][ T4800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.216862][ T4851] System zones: 1-12
[   64.225162][ T4851] EXT4-fs (loop2): orphan cleanup on readonly fs
[   64.231651][ T4851] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.448: Inode bitmap for bg 0 marked uninitialized
[   64.244983][ T4851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   64.274978][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.279800][ T4800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.300972][ T4800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.315322][ T4800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.324970][ T4800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.397468][ T4800] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.440170][ T4800] 8021q: adding VLAN 0 to HW filter on device team0
[   64.450813][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.458043][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.470022][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.477417][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.544609][ T4858] lo speed is unknown, defaulting to 1000
[   64.583097][ T4800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.608727][ T3331] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.622533][ T4858] chnl_net:caif_netlink_parms(): no params data found
[   64.668608][ T3331] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.679954][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.687106][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.694675][ T4858] bridge_slave_0: entered allmulticast mode
[   64.701614][ T4858] bridge_slave_0: entered promiscuous mode
[   64.708943][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.716265][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.724838][ T4858] bridge_slave_1: entered allmulticast mode
[   64.731421][ T4858] bridge_slave_1: entered promiscuous mode
[   64.739729][ T3331] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.764146][ T4858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.775657][ T4858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.807721][ T3331] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.820768][ T4858] team0: Port device team_slave_0 added
[   64.827985][ T4858] team0: Port device team_slave_1 added
[   64.865640][ T4800] veth0_vlan: entered promiscuous mode
[   64.872161][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.879182][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.905333][ T4858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.919752][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.926861][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.952904][ T4858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.968205][ T4800] veth1_vlan: entered promiscuous mode
[   65.005264][ T4858] hsr_slave_0: entered promiscuous mode
[   65.011497][ T4858] hsr_slave_1: entered promiscuous mode
[   65.017727][ T4858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.025450][ T4858] Cannot create hsr debugfs directory
[   65.044790][ T3331] bridge_slave_1: left allmulticast mode
[   65.050543][ T3331] bridge_slave_1: left promiscuous mode
[   65.056301][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.070720][ T3331] bridge_slave_0: left allmulticast mode
[   65.076498][ T3331] bridge_slave_0: left promiscuous mode
[   65.082232][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.208773][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.237158][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.251827][ T3331] bond0 (unregistering): Released all slaves
[   65.296059][ T3331] hsr_slave_0: left promiscuous mode
[   65.302384][ T3331] hsr_slave_1: left promiscuous mode
[   65.310003][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.317582][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.330490][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.338043][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.357714][ T3331] veth1_macvtap: left promiscuous mode
[   65.363276][ T3331] veth0_macvtap: left promiscuous mode
[   65.369015][ T3331] veth1_vlan: left promiscuous mode
[   65.374904][ T3331] veth0_vlan: left promiscuous mode
[   65.471908][ T3331] team0 (unregistering): Port device team_slave_1 removed
[   65.482930][ T3331] team0 (unregistering): Port device team_slave_0 removed
[   65.541709][ T4800] veth0_macvtap: entered promiscuous mode
[   65.549227][ T4800] veth1_macvtap: entered promiscuous mode
[   65.577220][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.587821][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.597901][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.608403][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.618270][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.628931][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.639776][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.658544][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.669103][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.679149][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.689604][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.699523][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.709973][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.721064][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.730994][ T4800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.739850][ T4800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.748620][ T4800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.757372][ T4800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.863674][ T4938] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms
[   65.882096][   T29] kauditd_printk_skb: 83 callbacks suppressed
[   65.882111][   T29] audit: type=1326 audit(1726654241.310:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbcfdef9 code=0x7ffc0000
[   65.929012][   T29] audit: type=1326 audit(1726654241.340:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbcfdef9 code=0x7ffc0000
[   66.097097][ T4858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.107456][ T4858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.117816][ T4858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.126922][ T4858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.172214][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.188308][ T4858] 8021q: adding VLAN 0 to HW filter on device team0
[   66.200600][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.207785][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.220794][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.227902][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.307702][ T4858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.434924][ T4858] veth0_vlan: entered promiscuous mode
[   66.443431][ T4858] veth1_vlan: entered promiscuous mode
[   66.459221][ T4858] veth0_macvtap: entered promiscuous mode
[   66.466922][ T4858] veth1_macvtap: entered promiscuous mode
[   66.478350][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.488957][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.498824][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.509288][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.519242][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.529700][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.539555][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.550046][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.560977][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.569147][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.579726][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.589563][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.600030][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.609871][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.620345][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.630215][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.640681][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.651419][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.665478][ T4858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.674305][ T4858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.683115][ T4858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.691912][ T4858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.743242][   T29] audit: type=1400 audit(1726654242.170:737): avc:  denied  { read } for  pid=5015 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   66.762629][   T29] audit: type=1400 audit(1726654242.170:738): avc:  denied  { write } for  pid=5015 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   66.790982][ T5023] loop3: detected capacity change from 0 to 512
[   66.801086][ T5023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   66.824507][ T5023] EXT4-fs (loop3): 1 truncate cleaned up
[   66.831925][ T5023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.846422][   T29] audit: type=1400 audit(1726654242.280:739): avc:  denied  { watch } for  pid=5020 comm="syz.3.474" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.901565][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.641359][ T5032] loop2: detected capacity change from 0 to 2048
[   67.660826][ T5036] netlink: 'syz.4.465': attribute type 10 has an invalid length.
[   67.679844][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.700366][   T29] audit: type=1400 audit(1726654243.130:740): avc:  denied  { accept } for  pid=5025 comm="syz.3.463" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   67.720800][   T29] audit: type=1400 audit(1726654243.130:741): avc:  denied  { write } for  pid=5025 comm="syz.3.463" laddr=::1 lport=56770 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   67.743141][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.748668][ T5036] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.757703][ T5032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.765351][ T5036] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   67.785699][   T29] audit: type=1400 audit(1726654243.210:742): avc:  denied  { bind } for  pid=5030 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   67.804884][   T29] audit: type=1400 audit(1726654243.210:743): avc:  denied  { write } for  pid=5030 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   67.828237][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.867003][   T29] audit: type=1400 audit(1726654243.300:744): avc:  denied  { write } for  pid=5044 comm="syz.2.466" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   67.898000][ T3589] udevd[3589]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory
[   67.899486][ T5047] loop4: detected capacity change from 0 to 128
[   67.914561][ T5047] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   67.939737][ T1595] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   67.951272][ T5049] loop2: detected capacity change from 0 to 1024
[   67.972188][ T5049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.027568][ T5055] loop4: detected capacity change from 0 to 128
[   68.089287][ T5057] loop4: detected capacity change from 0 to 512
[   68.100231][ T5057] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.478: corrupted in-inode xattr: invalid ea_ino
[   68.113809][ T5057] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.478: couldn't read orphan inode 15 (err -117)
[   68.127884][ T5057] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.148950][ T4858] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[   68.222567][ T5063] syz.4.479[5063] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.222715][ T5063] syz.4.479[5063] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.553877][ T5069] loop1: detected capacity change from 0 to 128
[   68.712112][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.790243][ T5079] loop3: detected capacity change from 0 to 8192
[   68.834232][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.856075][ T5086] loop3: detected capacity change from 0 to 1024
[   68.865277][ T5086] EXT4-fs: Ignoring removed i_version option
[   68.878442][ T5086] EXT4-fs (loop3): can't mount with commit=4095, fs mounted w/o journal
[   68.900363][ T5086] SELinux:  Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped).
[   68.919947][ T5091] lo speed is unknown, defaulting to 1000
[   68.950942][ T5096] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   68.981525][ T5090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.091606][    C1] ------------[ cut here ]------------
[   69.097159][    C1] refcount_t: underflow; use-after-free.
[   69.103114][    C1] WARNING: CPU: 1 PID: 23 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230
[   69.107447][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'.
[   69.112390][    C1] Modules linked in:
[   69.125071][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0
[   69.135405][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   69.145529][    C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230
[   69.151787][    C1] Code: 72 ff ff ff e8 9b 9e 72 ff 48 c7 c7 e9 cc b2 86 e8 bf 05 8b ff c6 05 51 97 f5 04 01 90 48 c7 c7 db cf 1a 86 e8 db c1 54 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 6c 9e 72 ff 48 c7 c7 e6 cc b2 86 e8
[   69.171498][    C1] RSP: 0018:ffffc900000cf9e8 EFLAGS: 00010246
[   69.177597][    C1] RAX: d3ad7de5d865ba00 RBX: ffff8881161d62e4 RCX: ffff888100f92100
[   69.185594][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[   69.193605][    C1] RBP: 0000000000000003 R08: ffffffff8111f8e7 R09: 0000000000000000
[   69.201607][    C1] R10: 0001ffffffffffff R11: ffff888100f92100 R12: 0000000000000001
[   69.209702][    C1] R13: ffff888115b06c00 R14: ffff8881161d62e4 R15: 0000000000000000
[   69.217771][    C1] FS:  0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[   69.226786][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.233388][    C1] CR2: 00007fdd57fc8178 CR3: 0000000006632000 CR4: 00000000003506f0
[   69.241518][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.249568][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   69.257566][    C1] Call Trace:
[   69.260860][    C1]  <TASK>
[   69.263801][    C1]  ? __warn+0x141/0x350
[   69.268026][    C1]  ? report_bug+0x315/0x420
[   69.272607][    C1]  ? refcount_warn_saturate+0x1c6/0x230
[   69.278246][    C1]  ? handle_bug+0x60/0x90
[   69.282635][    C1]  ? exc_invalid_op+0x1a/0x50
[   69.287388][    C1]  ? asm_exc_invalid_op+0x1a/0x20
[   69.292438][    C1]  ? __warn_printk+0x167/0x1b0
[   69.297249][    C1]  ? refcount_warn_saturate+0x1c6/0x230
[   69.302855][    C1]  ? refcount_warn_saturate+0x1c5/0x230
[   69.308463][    C1]  sk_skb_reason_drop+0xe9/0x290
[   69.313468][    C1]  j1939_xtp_rx_cts+0x3c4/0x6c0
[   69.318382][    C1]  j1939_tp_recv+0x699/0xa80
[   69.323013][    C1]  j1939_can_recv+0x45f/0x550
[   69.327730][    C1]  ? __pfx_j1939_can_recv+0x10/0x10
[   69.332962][    C1]  can_rcv_filter+0x225/0x4c0
[   69.337698][    C1]  can_receive+0x182/0x1f0
[   69.342140][    C1]  ? __pfx_ip_rcv+0x10/0x10
[   69.346698][    C1]  can_rcv+0xe7/0x180
[   69.350716][    C1]  ? __pfx_can_rcv+0x10/0x10
[   69.355341][    C1]  __netif_receive_skb+0x123/0x280
[   69.360505][    C1]  process_backlog+0x22e/0x440
[   69.365320][    C1]  __napi_poll+0x63/0x3c0
[   69.369699][    C1]  ? net_rx_action+0x376/0x7f0
[   69.374497][    C1]  net_rx_action+0x3a1/0x7f0
[   69.379186][    C1]  handle_softirqs+0xbf/0x280
[   69.383888][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[   69.389050][    C1]  run_ksoftirqd+0x1c/0x30
[   69.393514][    C1]  smpboot_thread_fn+0x31c/0x4c0
[   69.398486][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   69.403980][    C1]  kthread+0x1d1/0x210
[   69.408107][    C1]  ? __pfx_kthread+0x10/0x10
[   69.412743][    C1]  ret_from_fork+0x4b/0x60
[   69.417199][    C1]  ? __pfx_kthread+0x10/0x10
[   69.421819][    C1]  ret_from_fork_asm+0x1a/0x30
[   69.426631][    C1]  </TASK>
[   69.429674][    C1] ---[ end trace 0000000000000000 ]---
[   69.548642][ T5117] loop1: detected capacity change from 0 to 512
[   69.559034][ T5122] loop2: detected capacity change from 0 to 2048
[   69.578223][ T5117] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   69.580018][ T5122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.603023][ T5117] EXT4-fs (loop1): orphan cleanup on readonly fs
[   69.611217][ T5117] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   69.626483][ T5117] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   69.634583][ T5117] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.501: bg 0: block 40: padding at end of block bitmap is not set
[   69.651164][ T5117] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   69.662638][ T5117] EXT4-fs (loop1): 1 truncate cleaned up
[   69.671043][ T5117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.694591][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.724675][ T4292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.855196][ T5147] netlink: 104 bytes leftover after parsing attributes in process `syz.2.514'.
[   69.943587][ T5154] loop2: detected capacity change from 0 to 256
[   69.963585][ T5157] loop1: detected capacity change from 0 to 512
[   69.969270][ T5158] loop3: detected capacity change from 0 to 1024
[   69.978656][ T5158] EXT4-fs: test_dummy_encryption option not supported
[   69.989210][ T5157] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.007637][ T5158] loop3: detected capacity change from 0 to 128
[   70.027979][ T5157] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.042783][ T5158] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   70.075791][ T5158] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   70.107471][ T4292] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   70.112549][ T3261] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.152024][ T5167] loop2: detected capacity change from 0 to 512
[   70.160556][ T5167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   70.179187][ T5167] EXT4-fs (loop2): 1 truncate cleaned up
[   70.187649][ T5167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.195615][ T5174] ALSA: seq fatal error: cannot create timer (-22)
[   70.247750][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.282310][ T5178] loop2: detected capacity change from 0 to 2048
[   70.298375][ T5178] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.526: bad orphan inode 8192
[   70.309189][ T5178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.344843][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'.
[   70.353880][ T5178] veth0_to_bond: left allmulticast mode
[   70.359478][ T5178] veth0_to_bond: left promiscuous mode
[   70.365109][ T5178] bridge0: port 3(veth0_to_bond) entered disabled state
[   70.373356][ T5178] bridge_slave_1: left allmulticast mode
[   70.379159][ T5178] bridge_slave_1: left promiscuous mode
[   70.384878][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.393377][ T5178] bridge_slave_0: left allmulticast mode
[   70.399093][ T5178] bridge_slave_0: left promiscuous mode
[   70.400692][ T5190] loop1: detected capacity change from 0 to 1024
[   70.404747][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.437607][ T5190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.529874][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.732091][ T5201] loop2: detected capacity change from 0 to 2048
[   70.748200][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.761810][ T5201] netlink: 120 bytes leftover after parsing attributes in process `syz.2.532'.
[   70.779393][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.028758][   T29] kauditd_printk_skb: 173 callbacks suppressed
[   71.028774][   T29] audit: type=1400 audit(1726654246.460:916): avc:  denied  { read } for  pid=5213 comm="syz.2.535" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   71.058343][   T29] audit: type=1400 audit(1726654246.460:917): avc:  denied  { open } for  pid=5213 comm="syz.2.535" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   71.100213][   T29] audit: type=1400 audit(1726654246.460:918): avc:  denied  { ioctl } for  pid=5213 comm="syz.2.535" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   71.123275][ T5218] syzkaller0: entered promiscuous mode
[   71.130967][ T5218] syzkaller0: entered allmulticast mode
[   71.277678][ T4292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.315361][ T5227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.540'.
[   71.324495][ T5227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.540'.
[   71.351778][ T5225] syzkaller0: entered promiscuous mode
[   71.357328][ T5225] syzkaller0: entered allmulticast mode
[   71.412292][ T5229] lo speed is unknown, defaulting to 1000
[   71.473230][ T5235] netlink: 'syz.2.545': attribute type 27 has an invalid length.
[   71.495607][ T5229] loop1: detected capacity change from 0 to 764
[   71.507397][ T5229] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   71.516465][   T29] audit: type=1400 audit(1726654246.950:919): avc:  denied  { mount } for  pid=5228 comm="syz.1.542" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   71.553378][   T29] audit: type=1400 audit(1726654246.980:920): avc:  denied  { unmount } for  pid=4292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   71.623674][ T5235] batadv0: left promiscuous mode
[   71.729037][   T29] audit: type=1400 audit(1726654247.070:921): avc:  denied  { execmem } for  pid=5243 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   71.740579][ T5241] loop3: detected capacity change from 0 to 1024
[   71.780859][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.839708][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.853170][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.874338][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.949320][ T5235] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.958487][ T5235] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.967498][ T5235] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.976406][ T5235] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.064681][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.075036][ T5237] 8021q: adding VLAN 0 to HW filter on device team0
[   72.089135][ T5237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.117819][ T5263] lo speed is unknown, defaulting to 1000
[   72.212174][ T5267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.551'.
[   72.227755][ T5256] loop3: detected capacity change from 0 to 128
[   72.247614][ T5256] netlink: 2 bytes leftover after parsing attributes in process `syz.3.549'.
[   72.256681][   T29] audit: type=1400 audit(1726654247.680:922): avc:  denied  { mount } for  pid=5254 comm="syz.3.549" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   72.400896][   T29] audit: type=1400 audit(1726654247.830:923): avc:  denied  { unmount } for  pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   72.434118][   T29] audit: type=1326 audit(1726654247.860:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   72.474620][   T29] audit: type=1326 audit(1726654247.860:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4520ccdef9 code=0x7ffc0000
[   72.533319][ T5280] lo speed is unknown, defaulting to 1000
[   72.669266][ T5294] netlink: 'syz.3.565': attribute type 1 has an invalid length.
[   72.680378][ T5294] netlink: 'syz.3.565': attribute type 9 has an invalid length.
[   72.717972][ T5298] syzkaller0: entered allmulticast mode
[   72.726127][ T5298] syzkaller0 (unregistering): left allmulticast mode
[   72.760078][ T5304] Unknown options in mask 5
[   72.776328][ T5304] loop3: detected capacity change from 0 to 2048
[   72.810856][ T5304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.857519][ T5314] loop2: detected capacity change from 0 to 128
[   72.872000][ T5314] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.890832][ T5314] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   72.928222][ T5314] netlink: 256 bytes leftover after parsing attributes in process `syz.2.572'.
[   72.950008][ T3368] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   72.965171][ T3368] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1438 with error 28
[   72.977901][ T3368] EXT4-fs (loop3): This should not happen!! Data will be lost
[   72.977901][ T3368] 
[   72.987747][ T3368] EXT4-fs (loop3): Total free blocks count 0
[   72.993796][ T3368] EXT4-fs (loop3): Free/Dirty block details
[   72.999771][ T3368] EXT4-fs (loop3): free_blocks=2415919104
[   73.005514][ T3368] EXT4-fs (loop3): dirty_blocks=1440
[   73.010931][ T3368] EXT4-fs (loop3): Block reservation details
[   73.016947][ T3368] EXT4-fs (loop3): i_reserved_data_blocks=90
[   73.025242][ T3263] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.038123][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.076522][ T5326] loop2: detected capacity change from 0 to 1024
[   73.083611][ T5326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   73.094032][ T5326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.141271][ T5331] capability: warning: `syz.3.576' uses 32-bit capabilities (legacy support in use)
[   73.245816][ T5333] ==================================================================
[   73.253968][ T5333] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush
[   73.263372][ T5333] 
[   73.265712][ T5333] read-write to 0xffff888114203818 of 4 bytes by task 5326 on cpu 1:
[   73.273790][ T5333]  __writeback_single_inode+0x1f4/0x850
[   73.279388][ T5333]  writeback_single_inode+0x16c/0x3f0
[   73.284792][ T5333]  sync_inode_metadata+0x5c/0x90
[   73.289771][ T5333]  generic_buffers_fsync_noflush+0xd8/0x120
[   73.295697][ T5333]  ext4_sync_file+0x1ff/0x6c0
[   73.300413][ T5333]  vfs_fsync_range+0x116/0x130
[   73.305212][ T5333]  ext4_buffered_write_iter+0x326/0x370
[   73.310801][ T5333]  ext4_file_write_iter+0x293/0xe10
[   73.316033][ T5333]  iter_file_splice_write+0x5f1/0x980
[   73.321430][ T5333]  direct_splice_actor+0x160/0x2c0
[   73.326582][ T5333]  splice_direct_to_actor+0x302/0x670
[   73.331987][ T5333]  do_splice_direct+0xd7/0x150
[   73.336782][ T5333]  do_sendfile+0x39b/0x970
[   73.341217][ T5333]  __x64_sys_sendfile64+0x110/0x150
[   73.346463][ T5333]  x64_sys_call+0xed5/0x2d60
[   73.351090][ T5333]  do_syscall_64+0xc9/0x1c0
[   73.355621][ T5333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.361555][ T5333] 
[   73.363891][ T5333] read to 0xffff888114203818 of 4 bytes by task 5333 on cpu 0:
[   73.371455][ T5333]  generic_buffers_fsync_noflush+0x83/0x120
[   73.377457][ T5333]  ext4_sync_file+0x1ff/0x6c0
[   73.382198][ T5333]  vfs_fsync_range+0x116/0x130
[   73.387009][ T5333]  ext4_buffered_write_iter+0x326/0x370
[   73.392595][ T5333]  ext4_file_write_iter+0x293/0xe10
[   73.397825][ T5333]  iter_file_splice_write+0x5f1/0x980
[   73.403240][ T5333]  direct_splice_actor+0x160/0x2c0
[   73.408381][ T5333]  splice_direct_to_actor+0x302/0x670
[   73.413799][ T5333]  do_splice_direct+0xd7/0x150
[   73.418601][ T5333]  do_sendfile+0x39b/0x970
[   73.423040][ T5333]  __x64_sys_sendfile64+0x110/0x150
[   73.428268][ T5333]  x64_sys_call+0xed5/0x2d60
[   73.432900][ T5333]  do_syscall_64+0xc9/0x1c0
[   73.437431][ T5333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.443364][ T5333] 
[   73.445702][ T5333] value changed: 0x00000022 -> 0x00000000
[   73.451435][ T5333] 
[   73.453770][ T5333] Reported by Kernel Concurrency Sanitizer on:
[   73.459960][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.2.574 Tainted: G        W          6.11.0-syzkaller-04744-gbdf56c7580d2 #0
[   73.471710][ T5333] Tainted: [W]=WARN
[   73.475523][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   73.485592][ T5333] ==================================================================
[   73.919812][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.