last executing test programs:

18.262362722s ago: executing program 4 (id=1771):
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x200, 0x1}, &(0x7f0000000100), &(0x7f0000000280))
close(0xffffffffffffffff)
io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$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")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:agp_device_t:s0\x00', 0x22)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), 0x4)
bind$packet(r1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x1a100)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x12)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./bus\x00')
r5 = open$dir(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
linkat(r5, &(0x7f0000000000)='./bus\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0)
unlinkat(r4, &(0x7f0000000140)='./bus\x00', 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000ddb2994f00000000000e0000000a58000000060a0b0400000000000000000200f464a5343a46ba302eb9f7e06c20e800002c000480280001800b00010064796e736574000018000235d4b4000000000000090009007368030000000000008fd2e2c5fa08000900020073797a320000005a310014000000110001000000fdffffff00000000000a0000000000000000000000e27f2e25f4c336bb8d6accd6625d9f02000000af3a8512bdbdf7acbbbd32bb8ee2ac08951866b7a2f8e6a7"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@empty, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @empty, @mcast1, @multicast, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

18.005278412s ago: executing program 4 (id=1773):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000018"], 0x30, 0xf7ffff7f}, 0x0)

6.564960242s ago: executing program 3 (id=1894):
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsm_get_self_attr(0x68, &(0x7f0000000240)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000003c0)=0x73, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x1018000, &(0x7f00000001c0), 0xff, 0x5b7, &(0x7f0000000200)="$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")
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000380)=0x20001000, 0x4)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
write$binfmt_script(r3, &(0x7f0000000880)={'#! ', '', [{}], 0xa, "78bdb61b5aea50530555ea4bc606494046b8e11ebac2409329c55b361937798d421deaa332f4b1decf98a385ae7039fe60fd1c86fdcfe6debb7f6225d533c95c0744ae02e1ddb563c9f15b91d46a99d5d569594fe4182d00d3535ba4830b714b14678c640ab15e0b657e981be955162111edee2859e586a5c421cfa77b4488c48496c21335b273c8413cda71c0b7d1e170991f6999de71f9e0b70a08b71c3c47"}, 0xa5)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xa}}, r1, 0x3, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000300), &(0x7f0000000180)=<r9=>0x0, &(0x7f0000000280))
syz_io_uring_submit(r9, r8, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r7, 0x0, 0x0})
io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c01009900000000000000000022000e001c1c000200fffffffffffff4c73cfa00000008021100"/49], 0x4c}}, 0x0)

6.327314222s ago: executing program 3 (id=1897):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000010401040000000000000000000000000a000200000000004d98e46739b93aedad314d8de433cec9f5d03b1131e2de243c75d79c253c74fec39d3a7f3d6edcd7dd1e3c9559b36bd2be09793742f240c2711566919a11616e7a1991f893b40b48e573388afa920650331d495dd7bfd286496fdaf11762e9dca1ee0057076f088406f79e"], 0x20}}, 0x0)

6.299049294s ago: executing program 3 (id=1899):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket(0x3, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x5}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1b1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20044880)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000340)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000180)="0b030600e0ff020002004788aa96", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f0000000200)=0x5, 0x4)
timer_create(0x2, 0x0, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, &(0x7f00000006c0))
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3001015, &(0x7f0000000080), 0x1, 0x52e, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPDvTH52mza70ANUwC5QWNBq7Y23XVW9tHsBoaoSouKAOGxD4o1C7DjETmlCJNK/ASSQOMGfwAGJA1JPHLhxROKAkMoBaYEItEECyWjGk9RNnMY0jg3x5yONZt48+33fW+/Mm3l25gUwtm5ExF5ETEfEGxExX+xPiiVe6SzZ6x7v7y4d7O8uJdFuv/7XJM/P9kXXezJPFmXORsTXvhzxreRk3Ob2ztpirVbdLNLlVn2j3Nzeub1aX1yprlTXK5V7C/fuvHj3hcrA2nq9/vNHX1p99eu/+uUn3/3t3he/l1VrrsjrbscgdZo+dRQnMxkRr15EsBGYKNbTI64HH04aER+JiM/kx/98TOT/OwGAy6zdno/2fHcaALjs0nwMLElLxVjAXKRpqdQZw3smrqS1RrN162Fja325M1Z2NabSh6u16p1rM7//Tn7FMJVk6YU8L8/P05Vj6bsRcS0ifjjzRJ4uLTVqy6O77AGAsfbksf7/HzOd/r8PPb7VAwD+b8yOugIAwNDp/wFg/Oj/AWD89NH/F1/27114XQCA4XD/DwDjR/8PAONH/w8AY+Wrr72WLe2D4vnXy29ub6013ry9XG2ulepbS6WlxuZGaaXRWMmf2VM/q7xao7Gx8HxsvVVuVZutcnN750G9sbXeepA/1/tBdWoorQIAPsi16+/8LomIvZeeyJfomstBXw2XWzrqCgAjMzHqCgAjY7YvGF/93+P/5kLrAYxOz4d5z/bcfL8f/xdB/M4I/qfc/Hj/4//meIbLxfg/jK8PN/7/8sDrAQyf8X8YX+12cnzO/+mjLADgUjrHb/zb3x/URQgwUmdN5j2Q7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkpmLiG9HkpaKucDnIk1LpYinIuJqTCUPV2vVOxHxdFyPiKmZLL0w6koDAOeU/jkp5v+6Of/c3PHc6eSfM/k6Ir77k9d/9NZiq7W5kO3/29H+mcPpwyrvve8c8woCAAOW99+VYt11I/94f3fpcBlmfR7dj38XUxEvHezv5ksnZzIm8/Vsfi1x5e9Jke7MRfpsREwMIP7e2xHxsV7tT/KxkavFzKfd8aOI/dRQ46fvi5/meZ11dvH10QHUBcbNO/cj4pVex18aN/J17+N/Nj9Dnd+j+53CDs99B13xD89/Ez3iZ8f8jX5jPP/rr5zY2Z7v5L0d8exkr/jJUfzklPjP9Rn/D5/41A9ePiWv/dOIm9E7fnescqu+UW5u79xerS+uVFeq65XKvYV7d168+0KlnI9Rlw9Hqk/6y0u3nj6tbln7r5wSf7Zn+6eP3vu5Ptv/s3+98c1Pf0D8L3y29+f/TM/4HVmf+Pk+4y9e+cWp03dn8ZdPaf9Zn/+tPuO/+6ed5T5fCgAMQXN7Z22xVqtunmsjuwsdRDknNrIqDrTAMzb+GMOLdebG1EX9q174xuTRteJgS/5GVuKQm5MOvBXn2ng8rFijPS8BF++9g37UNQEAAAAAAAAAAAAAAE4zjD9dGnUbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLz+EwAA//+2KMyN")

5.715621881s ago: executing program 3 (id=1905):
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11ee, &(0x7f0000001280)="$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")
r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)
sendfile(r1, r1, &(0x7f0000000240), 0x7f06)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r3, 0x12081ff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000003c0)=""/40, 0x28)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000000000000}}, r4, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_clone(0x88000000, &(0x7f00000002c0)="5fcfcccc49a123883703b2aa0a33e646605e860ecc9f820c692b1c5702c9075a9abaa7b504cce0391c58d88fb4ef43fa6f5d1653872c281ca27fef5dcdb247549b2cef520cf7f55ed1f4dac42ae83e22e3c6923517fe404ae466d6725bdab7ed79e40f635afbf1fe78f6910c609b7941be78de7404db6124b585e3696eaa1f11b9e51258d0f78d47", 0x88, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)="9f8e2d5606092e9e54af5edb492402a085e1d87d6c343a7b")
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000040))

4.894812757s ago: executing program 4 (id=1885):
creat(0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x2)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
connect(r3, &(0x7f0000000040)=@isdn, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgid(0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7})
sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

4.85845277s ago: executing program 4 (id=1912):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f00000005c0)=ANY=[], 0x3, 0x70c, &(0x7f0000000f80)="$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")
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=r0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}], 0x1, 0x1000000, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r5], 0x94}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth1_macvtap\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x9, 0x2}})

4.559523664s ago: executing program 3 (id=1914):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000002000000000000000000000d020000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x86, 0xff9, 0xa}, 0x20)
write(r0, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x90)
r1 = socket(0x848000000015, 0x805, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000900)={0x7, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @remote}}}, 0x108)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c)
socket(0x2, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@private2, 0x0, 0xef1}, {0x8000000000000}, {0xfff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0xe8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000000840)=[{{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/62, 0x3e}], 0x1, &(0x7f0000000b00)=""/4096, 0x1000}}, {{&(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/190, 0xbe}], 0x1, &(0x7f0000000740)=""/225, 0xe1}, 0x6}], 0x2, 0x2b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x8, 0xea)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000380)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1c9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x8002, @dev}, {0x0, @random="0f00a85d4ff6"}, 0x59, {0x2, 0x4e26, @loopback}, 'veth0\x00'})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0xfffffff5)

2.635995219s ago: executing program 2 (id=1938):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90)
r3 = socket(0xa, 0x3, 0x6)
getsockopt$bt_BT_SECURITY(r3, 0x29, 0x24, 0x0, 0x2054dfff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', <r6=>0x0, 0x29, 0xe0, 0x7, 0x7, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7800, 0xb1, 0xffffffff}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0xf0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x90}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0xf0}}, 0x80d5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000fcffff"], 0x0}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
r9 = mq_open(&(0x7f0000000400)='$\'\x00', 0x800, 0x100, &(0x7f0000000500)={0x8, 0x2, 0x5, 0x8})
mq_notify(r9, &(0x7f00000008c0)={0x0, 0x31, 0x0, @thr={&(0x7f00000005c0)="5c065602a9882376b9a198996ebcf03d8e9459b64d90aace283f92c6c8ae35a69b86af78c1d3bd554af9235a614653175ab4b04a365c9e0e687351de4c9573f90293b6c21afbbe2350ce25bc49b1821e", &(0x7f00000006c0)}})

1.611392341s ago: executing program 2 (id=1941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x4, 0x801}, 0x14}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000010401040000000000000000000000000a000200000000004d98e46739b93aedad314d8de433cec9f5d03b1131e2de243c75d79c253c74fec39d3a7f3d6edcd7dd1e3c9559b36bd2be09793742f240c2711566919a11616e7a1991f893b40b48e573388afa920650331d495dd7bfd286496fdaf11762e9dca1ee0057076f088406f79e"], 0x20}}, 0x0)

1.540683797s ago: executing program 2 (id=1943):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000600)="7c533121ba56b5b10006000081001a7c7f9660697679f3894445968faec11f2a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r3, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000009c0)={'vcan0\x00', <r5=>0x0})
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r5}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xee}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

1.316691904s ago: executing program 0 (id=1946):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000013c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000070402eeffffffffffffff002100", @ANYRES32=r9], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x44}}, 0x0)

1.141601289s ago: executing program 0 (id=1947):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100, 0x0, {0x0, 0xff03}}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

990.923331ms ago: executing program 0 (id=1949):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10500, 0x0, 0x0, 0x3, 0x0, 0x40000005}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x802, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x5060, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x2b8, 0x188, 0x2b8, 0x0, 0x2b8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'ip6tnl0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
syz_clone(0x18000, &(0x7f0000000000)="e1898e60a822f46cc673ccece7e4e9ffb0be70d3477339b8", 0x18, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000480)="7852d103dd06f4f0d580ad65eda29f373196c4bb162686faeca4fede3be2ff6d79dead3b3f4c2837f679b021d9a9b6d49b8cb1ceee7739b5823fc89e3c7abda477903411c628a3f67e3a0c88efa9f2184886d0b78ac0352ab8cd1ba43c553f799c4f888b9c146164517f81b5bc00c70a1e7f0e485873561e3c63050c4cbecd925d9955e729300b253fa1768d8b74fa7fa6b48d817795ea4677af3ed9dbe74fcb71e88bdac6a5d46ee04e1de0842f4fbb70ce005476c53b539d646f78")
write$binfmt_script(r1, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x12000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x5, 0xfffffffc}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000440)={0x3, 0x80, 0x9, 0x1, 0x6, 0x67, 0x0, 0x80000001, 0x100, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000400), 0x2}, 0x20, 0x0, 0x7, 0x0, 0xd6f, 0x8000, 0x1, 0x0, 0x7, 0x0, 0x401}, r4, 0xd, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000730136000000000095000000000000006d5b1ab6706f710a63b9021c6b2d12aedd81038b4ae61eaef37cfa9bd4454ae0f62b7a59c7e49a4c40d16e2eefc8ff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000fbba31e814062c84113bf75996537c4e04a2e38d7bda1314689daa9f8aa12dfa25bf1e4c207488742910b923f897e57d0da4606ac7209c3d4a656815a2c5fe1f79c9449c89f07f3db9995975de9e4c229724d0b854345eb20398936e0a750afa16ab16be3a53af5c7aead52e2c4852d5ac3e0badb9acbf8e6af822f6c398a5ced3f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r1], 0x0, 0x10, 0x5}, 0x90)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x20, 0x80, 0x0, 0x0, 0x0, 0x20, 0x40, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xb}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, r3, 0xa)

990.334801ms ago: executing program 1 (id=1950):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x20)

983.491311ms ago: executing program 4 (id=1951):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="cd", 0x1}, {&(0x7f0000000480)="34a032113d4115770dc0f7977214a54f9c408500", 0x14}], 0x2, 0x0, 0x0)

888.736239ms ago: executing program 1 (id=1952):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000400), 0xfe, 0x56e, &(0x7f0000000f00)="$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")
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="73ea", 0x2}], 0x1, 0xfffff, 0xfffffffc, 0x2)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

887.449889ms ago: executing program 0 (id=1953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xc3b, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)

774.937278ms ago: executing program 1 (id=1954):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0)
syz_open_procfs(r0, &(0x7f00000000c0)='task\x00')

712.735813ms ago: executing program 2 (id=1955):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3031600000000000003400000000200090040000000e900000000000000020006000000000002"], 0xb0}, 0x1, 0x7}, 0x0)

709.733684ms ago: executing program 1 (id=1956):
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYRES16=0x0], &(0x7f0000001440)=""/226, 0x26, 0xe2, 0x2}, 0x20)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="27050200590200000600002fb96dbcf706e10500000088641100114408000281", 0x20}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c0002800600030081000000080014000000000004001200050016000100000008000c00090000000800150040000000060011004e21906061e8120008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00M'], 0x7c}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x6)
ioctl$TIOCSSOFTCAR(r8, 0x541a, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000c238c19d16400645"], &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003", @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESHEX=r7, @ANYRES64=r9], 0x14}, 0x1, 0x0, 0x0, 0x1e253becd4828330}, 0x24000814)
recvmmsg(r10, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r12, @ANYBLOB="3800308034000180080001"], 0x54}}, 0x0)
syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0)

638.586279ms ago: executing program 2 (id=1957):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

626.25075ms ago: executing program 0 (id=1958):
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB], 0x34}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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")
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20000000)
r2 = socket$inet6(0xa, 0x2, 0x3a)
r3 = dup(r2)
bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2, 0x7a}, 0x6e)
getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
poll(0x0, 0x0, 0x72)

589.637373ms ago: executing program 2 (id=1959):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400ffffffa100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001900f9"], 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050019000000000005387e35f74bb65ff7d665ea5b3d4f7802c086c1837566d2fbbb48140c8b8951581355f4ee1b0566e06a7b03717ca2bf3cb4676c54e89c61"], 0x3c}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="01"], 0x20}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001e00)={'bond0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

479.397742ms ago: executing program 0 (id=1960):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x31e20d5088275d46}], 0x1, 0x0, 0x0, 0x4000010}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x0, 0x9, 0x8001, 0x846, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0xa5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x15, 0x0, &(0x7f0000000300)="14fd54ab72df97", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x4b4b, &(0x7f0000000000))
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x3a0, 0x85}, 0x48)
bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001, r7}, 0x38)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

78.934604ms ago: executing program 4 (id=1961):
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11ee, &(0x7f0000001280)="$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")
r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)
sendfile(r1, r1, &(0x7f0000000240), 0x7f06)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x12081ff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000003c0)=""/40, 0x28)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000000000000}}, r3, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_clone(0x88000000, &(0x7f00000002c0)="5fcfcccc49a123883703b2aa0a33e646605e860ecc9f820c692b1c5702c9075a9abaa7b504cce0391c58d88fb4ef43fa6f5d1653872c281ca27fef5dcdb247549b2cef520cf7f55ed1f4dac42ae83e22e3c6923517fe404ae466d6725bdab7ed79e40f635afbf1fe78f6910c609b7941be78de7404db6124b585e3696eaa1f11b9e51258d0f78d47", 0x88, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)="9f8e2d5606092e9e54af5edb492402a085e1d87d6c343a7b")
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))

77.072664ms ago: executing program 1 (id=1962):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0xf8d, 0xffe4}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

1.185851ms ago: executing program 3 (id=1963):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004400000025000000190004000400ad000d00000060000006040000000000f93132", 0x39}], 0x1)

0s ago: executing program 1 (id=1964):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000000010000000000000000005a79eef78f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x840, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0xaa)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
flistxattr(0xffffffffffffffff, 0x0, 0xfbffffff)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="2020000011002104000000000200000000000000", @ANYRES32=r3], 0x20}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x800c08, &(0x7f0000000000), 0x1, 0x52c, &(0x7f0000000f00)="$eJzs3U1sI1cdAPD/TD7s/WizhR4AFbqUwoJWayfedlXthXKqEKqE6JHDNiTeKFp7HcVOacIeskfuSFTiBCfOHJA4IO2JOxIHeuNSDkgFVqAGCQmjGdtZ58OJlSZ2Gv9+0shv5o39f2+teW/092ZeABPrekRsR8RsRLwbEXPd40l3izc7W3beJ08fLe08fbSURLv9zj+SvD47Fn3vyVzpfmYxIn7wVsSPkn1B/xTR3Nx6sFirVde7h8qt+lq5ubl1a7W+uFJdqT6sVO4s3Jl/4/brlVPr68v133x8KSJ+/7svf/TH7W/9JGvW1W5dfz9OU6frM7txMtMR8b2zCDYGU93+zJ7kzSd6E6cpjYjPRcQr+fU/F1P5t7nX3q/p2yNsHQBwFtrtuWjP9e8DABddmufAkrTUzQVcjTQtlTo5vBfjclprNFs37zc2Hi53cmXXYia9v1qrzndzhddiJrm/Ol1dyMu9/Vq1sm//dkS8EBE/K1zK90tLjdryOG98AGCCXdk3//+70Jn/AYALrvisWBhnOwCA0SmOuwEAwMiZ/wFg8pj/AWDymP8BYPKY/wFg8pj/AWCifP/tt7OtvdN9/vXye5sbDxrv3VquNh+U6htLpaXG+lpppdFYyZ/ZUz/u82qNxtrCa7HxfrlVbbbKzc2te/XGxsPWvfy53veqMyPpFQBwlBdefvJhkj+p71Js372UH+s97//Yufqls24dcJbScTcAGJupcTcAGJuDq30Bk0I+HibX/9rtdvSt3RsRj3dLfQ8DHfhfhD4YKkxq3VA4f2588cmH2bW/ffcE+X/gM03+HybXyfL/7uXhIpD/h8nVbifW/AeACSPHDyTH1Pf//j/f7tsZ7vd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJCu5luSlrprgV+NNC2VIp6LiGsxk9xfrVXnI+L5iPhzYaaQ7S9EhHWDAOCzLP1b0l3/68bcq7NX9tXOFv5TyF8j4se/eOfn7y+2WusLEbPJP3ePtz7oHq+MpQMAwDF683RvHu/55Omjpd42yvZ8/J3O4qJZ3J3u1qmZjun8tZjnGi7/K+nud2T3K1OnEH/7cUR84bD+J3lu5Fp35dP98bPYz400fronfprXdV6zf4vPn0JbYNI8ycafNw+7/tK4nr8efv0X8xHq0+uNfzsHxr90d/ybGjD+XR82xmt/+O6Bg+25Tt3jiC9NR+z0Prxv/OnFTwbEf3XI+H956SuvDKpr/zLiRhzW/2RPrHKrvlZubm7dWq0vrlRXqg8rlTsLd+bfuP16pZznqMu9TPVBf7978/lB8bP+Xx4Qv3hM/78+ZP9/9d93f/jVI+J/82uHf/8vHhE/mxO/MWT8xcu/LQ6qy+IvD+j/cd//zSHjf/TXreUhTwUARqC5ufVgsVarrn/6QvHIc9LTCDFEIYnYPuMQzwqFX//0reNPLoysPScsxKCqqfPSwvNcyG6Fhz65cD7aPERh3CMTcNaeXfTjbgkAAAAAAAAAAAAAADDIKP6caNx9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OL6fwAAAP//DQjUcQ==")

kernel console output (not intermixed with test programs):

c:  denied  { mount } for  pid=9791 comm="syz.3.1438" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  194.995074][ T9819] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:f02:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[  195.042852][ T9821] team0: Device ipvlan2 failed to register rx_handler
[  195.125643][   T29] audit: type=1400 audit(1723640253.629:730): avc:  denied  { nlmsg_write } for  pid=9822 comm="syz.1.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  195.244497][   T29] audit: type=1400 audit(1723640253.749:731): avc:  denied  { watch watch_reads } for  pid=9828 comm="syz.1.1452" path="/117/file1" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  195.323647][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'.
[  195.349761][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  195.479529][   T29] audit: type=1400 audit(1723640253.979:732): avc:  denied  { unmount } for  pid=9258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  195.522399][ T9841] vhci_hcd: default hub control req: 050d v0006 i0000 l0
[  195.524587][ T9845] loop2: detected capacity change from 0 to 512
[  195.532169][ T9841] netlink: 'syz.3.1457': attribute type 4 has an invalid length.
[  195.537383][ T9845] ext4: Unknown parameter 'smackfsdef'
[  195.566553][ T9845] loop2: detected capacity change from 0 to 512
[  195.576169][ T9845] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  195.591878][ T9845] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1458: bg 0: block 264: padding at end of block bitmap is not set
[  195.608103][ T9845] EXT4-fs (loop2): Remounting filesystem read-only
[  195.614798][ T9845] EXT4-fs (loop2): 1 truncate cleaned up
[  195.626254][ T9845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.638399][ T9845] SELinux: (dev loop2, type ext4) getxattr errno 5
[  195.647094][ T9845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.685853][   T29] audit: type=1326 audit(1723640254.189:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9863 comm="syz.3.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faec7af99f9 code=0x0
[  195.715130][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'.
[  195.757369][ T9877] loop2: detected capacity change from 0 to 8192
[  195.887045][ T9890] loop4: detected capacity change from 0 to 512
[  195.905265][ T9890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.917916][ T9890] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.930326][   T29] audit: type=1400 audit(1723640254.429:734): avc:  denied  { setattr } for  pid=9889 comm="syz.4.1476" path="/12/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  195.933089][ T9904] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0
[  195.954764][ T9906] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 1
[  195.976069][ T9908] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 2
[  195.978153][ T9909] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 3
[  196.003057][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.019748][ T9911] loop4: detected capacity change from 0 to 512
[  196.026264][ T9911] ext4: Unknown parameter 'smackfsdef'
[  196.036127][ T9911] loop4: detected capacity change from 0 to 512
[  196.042726][ T9911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  196.054011][ T9911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1480: bg 0: block 264: padding at end of block bitmap is not set
[  196.068911][ T9911] EXT4-fs (loop4): Remounting filesystem read-only
[  196.075466][ T9911] EXT4-fs (loop4): 1 truncate cleaned up
[  196.081368][ T9911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.093451][ T9911] SELinux: (dev loop4, type ext4) getxattr errno 5
[  196.100533][ T9911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.808208][ T9953] siw: device registration error -23
[  196.882628][ T9960] loop2: detected capacity change from 0 to 128
[  196.890921][ T9960] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978)
[  196.901254][ T9960] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.1495: iget: checksum invalid
[  196.914105][ T9960] EXT4-fs (loop2): get root inode failed
[  196.919762][ T9960] EXT4-fs (loop2): mount failed
[  197.427894][ T9990] loop0: detected capacity change from 0 to 512
[  197.434764][ T9990] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  197.465291][ T9990] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1506: bg 0: block 64: padding at end of block bitmap is not set
[  197.480473][ T9990] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1506: Failed to acquire dquot type 0
[  197.492073][ T9990] EXT4-fs (loop0): 1 truncate cleaned up
[  197.498042][ T9990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.519111][ T9990] xt_NFQUEUE: number of total queues is 0
[  197.531052][ T9990] syz.0.1506 (9990) used greatest stack depth: 8784 bytes left
[  197.539467][ T9616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.585705][T10003] loop0: detected capacity change from 0 to 4096
[  197.594311][T10003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.644616][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.653339][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.197952][ T9616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.317024][T10039] loop0: detected capacity change from 0 to 8192
[  198.617129][T10058] loop4: detected capacity change from 0 to 8192
[  198.685032][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'.
[  198.971585][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'.
[  198.975650][T10094] loop3: detected capacity change from 0 to 2048
[  199.296695][T10115] FAULT_INJECTION: forcing a failure.
[  199.296695][T10115] name failslab, interval 1, probability 0, space 0, times 0
[  199.309406][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.3.1545 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  199.320169][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  199.330229][T10115] Call Trace:
[  199.333505][T10115]  <TASK>
[  199.336436][T10115]  dump_stack_lvl+0xf2/0x150
[  199.341034][T10115]  dump_stack+0x15/0x20
[  199.345413][T10115]  should_fail_ex+0x229/0x230
[  199.350163][T10115]  ? __anon_vma_prepare+0x73/0x310
[  199.355290][T10115]  should_failslab+0x8f/0xb0
[  199.359909][T10115]  kmem_cache_alloc_noprof+0x4c/0x290
[  199.365355][T10115]  ? pte_alloc_one+0xbd/0xf0
[  199.369959][T10115]  __anon_vma_prepare+0x73/0x310
[  199.374980][T10115]  ? handle_mm_fault+0x1a80/0x2940
[  199.380089][T10115]  handle_mm_fault+0x1b09/0x2940
[  199.385068][T10115]  exc_page_fault+0x296/0x650
[  199.389740][T10115]  asm_exc_page_fault+0x26/0x30
[  199.394607][T10115] RIP: 0010:__put_user_4+0x11/0x20
[  199.399769][T10115] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  199.419449][T10115] RSP: 0018:ffffc90001453db0 EFLAGS: 00050202
[  199.425516][T10115] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000240
[  199.433475][T10115] RDX: 0000000000000000 RSI: 0000000000000072 RDI: 0000000000000001
[  199.441432][T10115] RBP: 0000000000000072 R08: ffffffff8111e0ac R09: 0000000000000000
[  199.449389][T10115] R10: 0001ffffffffffff R11: 0001c90001453d18 R12: ffffc90001453db8
[  199.457348][T10115] R13: 0000000000000002 R14: 0000000020000240 R15: 0000000000000000
[  199.465330][T10115]  ? kernel_wait4+0x17c/0x1d0
[  199.470065][T10115]  kernel_wait4+0x197/0x1d0
[  199.474563][T10115]  ? __pfx_child_wait_callback+0x10/0x10
[  199.480219][T10115]  __x64_sys_wait4+0x94/0x120
[  199.484924][T10115]  x64_sys_call+0x2529/0x2d60
[  199.489597][T10115]  do_syscall_64+0xc9/0x1c0
[  199.494097][T10115]  ? clear_bhb_loop+0x55/0xb0
[  199.498766][T10115]  ? clear_bhb_loop+0x55/0xb0
[  199.503432][T10115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.509325][T10115] RIP: 0033:0x7faec7af99f9
[  199.513785][T10115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.533388][T10115] RSP: 002b:00007faec6777038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  199.541789][T10115] RAX: ffffffffffffffda RBX: 00007faec7c95f80 RCX: 00007faec7af99f9
[  199.549746][T10115] RDX: 0000000040000000 RSI: 0000000020000240 RDI: 0000000000000000
[  199.557702][T10115] RBP: 00007faec6777090 R08: 0000000000000000 R09: 0000000000000000
[  199.565661][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.573619][T10115] R13: 0000000000000000 R14: 00007faec7c95f80 R15: 00007ffcba5e16f8
[  199.581691][T10115]  </TASK>
[  199.667097][T10128] loop3: detected capacity change from 0 to 2048
[  199.701674][T10128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.848050][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'.
[  199.885386][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.896722][T10139] rdma_rxe: rxe_newlink: failed to add team_slave_1
[  199.912612][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'.
[  199.933961][   T29] kauditd_printk_skb: 37 callbacks suppressed
[  199.934034][   T29] audit: type=1400 audit(1723640258.429:770): avc:  denied  { connect } for  pid=10140 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  199.939971][T10144] loop3: detected capacity change from 0 to 512
[  199.969056][   T29] audit: type=1326 audit(1723640258.479:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10138 comm="syz.2.1553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9c201c09a7 code=0x0
[  200.030418][T10141] loop4: detected capacity change from 0 to 256
[  200.116444][T10153] loop3: detected capacity change from 0 to 256
[  200.217610][T10163] FAULT_INJECTION: forcing a failure.
[  200.217610][T10163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.230770][T10163] CPU: 0 UID: 0 PID: 10163 Comm: syz.3.1559 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  200.241545][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  200.251597][T10163] Call Trace:
[  200.254867][T10163]  <TASK>
[  200.257811][T10163]  dump_stack_lvl+0xf2/0x150
[  200.262419][T10163]  dump_stack+0x15/0x20
[  200.266616][T10163]  should_fail_ex+0x229/0x230
[  200.271350][T10163]  should_fail+0xb/0x10
[  200.275511][T10163]  should_fail_usercopy+0x1a/0x20
[  200.280740][T10163]  _copy_from_user+0x1e/0xd0
[  200.285334][T10163]  copy_msghdr_from_user+0x54/0x2a0
[  200.290639][T10163]  __sys_sendmsg+0x17d/0x280
[  200.295304][T10163]  __x64_sys_sendmsg+0x46/0x50
[  200.300078][T10163]  x64_sys_call+0x2689/0x2d60
[  200.304764][T10163]  do_syscall_64+0xc9/0x1c0
[  200.309330][T10163]  ? clear_bhb_loop+0x55/0xb0
[  200.314030][T10163]  ? clear_bhb_loop+0x55/0xb0
[  200.318710][T10163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.324601][T10163] RIP: 0033:0x7faec7af99f9
[  200.329010][T10163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.348625][T10163] RSP: 002b:00007faec6756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.357039][T10163] RAX: ffffffffffffffda RBX: 00007faec7c96058 RCX: 00007faec7af99f9
[  200.365008][T10163] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006
[  200.373032][T10163] RBP: 00007faec6756090 R08: 0000000000000000 R09: 0000000000000000
[  200.381000][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.388975][T10163] R13: 0000000000000000 R14: 00007faec7c96058 R15: 00007ffcba5e16f8
[  200.397005][T10163]  </TASK>
[  200.529106][T10183] FAULT_INJECTION: forcing a failure.
[  200.529106][T10183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.542194][T10183] CPU: 1 UID: 0 PID: 10183 Comm: syz.4.1564 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  200.552953][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  200.562996][T10183] Call Trace:
[  200.566261][T10183]  <TASK>
[  200.569180][T10183]  dump_stack_lvl+0xf2/0x150
[  200.573787][T10183]  dump_stack+0x15/0x20
[  200.577939][T10183]  should_fail_ex+0x229/0x230
[  200.582614][T10183]  should_fail+0xb/0x10
[  200.586829][T10183]  should_fail_usercopy+0x1a/0x20
[  200.591897][T10183]  _copy_from_iter+0x249/0xb00
[  200.596713][T10183]  ? kernfs_fop_write_iter+0xe7/0x2c0
[  200.602172][T10183]  ? __virt_addr_valid+0x1ed/0x250
[  200.607350][T10183]  ? __check_object_size+0x35b/0x510
[  200.612640][T10183]  kernfs_fop_write_iter+0x137/0x2c0
[  200.617921][T10183]  do_iter_readv_writev+0x3b0/0x470
[  200.623187][T10183]  vfs_writev+0x2e0/0x880
[  200.627510][T10183]  ? mutex_lock+0xd/0x40
[  200.631752][T10183]  do_writev+0xf8/0x220
[  200.635956][T10183]  __x64_sys_writev+0x45/0x50
[  200.640697][T10183]  x64_sys_call+0x1f18/0x2d60
[  200.645467][T10183]  do_syscall_64+0xc9/0x1c0
[  200.650020][T10183]  ? clear_bhb_loop+0x55/0xb0
[  200.654744][T10183]  ? clear_bhb_loop+0x55/0xb0
[  200.659415][T10183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.665358][T10183] RIP: 0033:0x7f64c6ba99f9
[  200.669764][T10183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.689429][T10183] RSP: 002b:00007f64c5827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  200.697831][T10183] RAX: ffffffffffffffda RBX: 00007f64c6d45f80 RCX: 00007f64c6ba99f9
[  200.705794][T10183] RDX: 0000000000000004 RSI: 0000000020000400 RDI: 0000000000000003
[  200.713755][T10183] RBP: 00007f64c5827090 R08: 0000000000000000 R09: 0000000000000000
[  200.721785][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.729745][T10183] R13: 0000000000000000 R14: 00007f64c6d45f80 R15: 00007ffd36082d48
[  200.737711][T10183]  </TASK>
[  200.794195][T10195] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1569'.
[  200.809047][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'.
[  200.957902][T10195] netlink: 'syz.4.1569': attribute type 3 has an invalid length.
[  201.028255][T10204] netlink: 'syz.1.1571': attribute type 3 has an invalid length.
[  201.038326][T10204] mmap: syz.1.1571 (10204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  201.329357][T10208] loop4: detected capacity change from 0 to 512
[  201.336160][T10208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.356819][T10208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.372975][T10208] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.412270][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.628864][   T29] audit: type=1400 audit(1723640260.129:772): avc:  denied  { sys_module } for  pid=10217 comm="syz.3.1576" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  201.680479][T10221] rdma_rxe: rxe_newlink: failed to add team_slave_1
[  201.688225][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1577'.
[  201.722593][   T29] audit: type=1326 audit(1723640260.219:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.3.1577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faec7af99f9 code=0x0
[  202.012741][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88811531be00: rx timeout, send abort
[  202.021127][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811531be00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  202.065932][T10235] loop2: detected capacity change from 0 to 512
[  202.086351][T10235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.099333][T10235] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.115780][T10235] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1582: bg 0: block 145: padding at end of block bitmap is not set
[  202.132267][   T29] audit: type=1400 audit(1723640260.639:774): avc:  denied  { remount } for  pid=10234 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  202.135902][T10235] EXT4-fs error (device loop2): __ext4_remount:6491: comm syz.2.1582: Abort forced by user
[  202.153162][   T29] audit: type=1400 audit(1723640260.639:775): avc:  denied  { unmount } for  pid=8712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  202.164121][T10235] EXT4-fs (loop2): Remounting filesystem read-only
[  202.190575][T10235] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  202.220482][   T29] audit: type=1400 audit(1723640260.719:776): avc:  denied  { map } for  pid=10247 comm="syz.1.1586" path="socket:[40903]" dev="sockfs" ino=40903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  202.229479][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.252644][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.261746][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.270908][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.314428][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.338438][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.389630][ T9350] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[  202.401753][T10257] loop4: detected capacity change from 0 to 512
[  202.546175][T10280] loop3: detected capacity change from 0 to 1024
[  202.553440][T10280] EXT4-fs (loop3): inodes count not valid: 32 vs 19
[  202.692377][T10290] netlink: 'syz.3.1599': attribute type 4 has an invalid length.
[  202.700252][T10290] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1599'.
[  202.782823][T10296] loop3: detected capacity change from 0 to 512
[  202.796758][T10296] /dev/loop3: Can't open blockdev
[  202.803385][T10297] Invalid ELF header magic: != ELF
[  202.879932][T10306] loop4: detected capacity change from 0 to 2048
[  202.895316][T10306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.953228][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.118657][   T29] audit: type=1400 audit(1723640261.619:777): avc:  denied  { ioctl } for  pid=10325 comm="syz.1.1613" path="socket:[43084]" dev="sockfs" ino=43084 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  203.320290][T10336] loop4: detected capacity change from 0 to 512
[  203.327252][T10336] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  203.355209][T10336] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1617: bg 0: block 64: padding at end of block bitmap is not set
[  203.370653][T10336] Quota error (device loop4): write_blk: dquota write failed
[  203.378080][T10336] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  203.389363][T10336] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1617: Failed to acquire dquot type 0
[  203.401045][T10336] EXT4-fs (loop4): 1 truncate cleaned up
[  203.408071][T10336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.430835][T10336] xt_NFQUEUE: number of total queues is 0
[  203.446945][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.479573][ T3273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.517324][ T3273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.586061][ T3273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.655179][ T3273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.746083][ T3273] bridge_slave_1: left allmulticast mode
[  203.751798][ T3273] bridge_slave_1: left promiscuous mode
[  203.757466][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.766275][ T3273] bridge_slave_0: left allmulticast mode
[  203.771958][ T3273] bridge_slave_0: left promiscuous mode
[  203.777822][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.832513][T10372] loop3: detected capacity change from 0 to 512
[  203.862141][T10372] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  203.878857][T10372] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1629: bg 0: block 64: padding at end of block bitmap is not set
[  203.893326][T10372] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1629: Failed to acquire dquot type 0
[  203.904906][T10372] EXT4-fs (loop3): 1 truncate cleaned up
[  203.910966][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.911133][T10372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.943680][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.955729][ T3273] bond0 (unregistering): Released all slaves
[  203.974992][T10372] xt_NFQUEUE: number of total queues is 0
[  203.988919][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.027084][T10381] loop4: detected capacity change from 0 to 1024
[  204.056626][T10381] ext4: Bad value for 'min_batch_time'
[  204.103879][T10381] loop4: detected capacity change from 0 to 512
[  204.128466][ T3273] hsr_slave_0: left promiscuous mode
[  204.141419][ T3273] hsr_slave_1: left promiscuous mode
[  204.149495][T10381] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1631: corrupted in-inode xattr: invalid ea_ino
[  204.167075][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.174555][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.185114][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.192518][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.200195][T10381] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1631: couldn't read orphan inode 15 (err -117)
[  204.216849][ T3273] veth1_macvtap: left promiscuous mode
[  204.222321][ T3273] veth0_macvtap: left promiscuous mode
[  204.227906][ T3273] veth1_vlan: left promiscuous mode
[  204.233157][ T3273] veth0_vlan: left promiscuous mode
[  204.240213][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.350917][ T3273] team0 (unregistering): Port device team_slave_1 removed
[  204.364750][ T3273] team0 (unregistering): Port device team_slave_0 removed
[  204.441384][T10349] chnl_net:caif_netlink_parms(): no params data found
[  204.493128][T10349] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.500455][T10349] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.512494][T10349] bridge_slave_0: entered allmulticast mode
[  204.519491][T10349] bridge_slave_0: entered promiscuous mode
[  204.526536][T10349] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.533750][T10349] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.540956][T10349] bridge_slave_1: entered allmulticast mode
[  204.547294][T10349] bridge_slave_1: entered promiscuous mode
[  204.571786][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.587475][T10414] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1641'.
[  204.600593][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.633215][T10349] team0: Port device team_slave_0 added
[  204.644193][T10349] team0: Port device team_slave_1 added
[  204.675792][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.682746][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.708753][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.720697][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.727688][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.753642][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.786278][T10349] hsr_slave_0: entered promiscuous mode
[  204.792401][T10349] hsr_slave_1: entered promiscuous mode
[  204.802444][T10349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.811095][T10349] Cannot create hsr debugfs directory
[  204.817322][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.836149][T10421] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1643'.
[  204.845133][T10421] tipc: Invalid UDP bearer configuration
[  204.845141][T10421] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  204.906688][T10429] loop4: detected capacity change from 0 to 512
[  204.913354][T10429] ext4: Unknown parameter 'smackfsdef'
[  204.923449][T10429] loop4: detected capacity change from 0 to 512
[  204.933071][T10429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  204.945812][T10429] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1647: bg 0: block 264: padding at end of block bitmap is not set
[  204.962045][T10429] EXT4-fs (loop4): Remounting filesystem read-only
[  204.969032][T10429] EXT4-fs (loop4): 1 truncate cleaned up
[  204.976198][T10429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.005082][T10429] SELinux: (dev loop4, type ext4) getxattr errno 5
[  205.013182][T10429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.157817][T10349] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  205.174175][T10349] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  205.182856][T10349] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  205.194848][T10349] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  205.247531][T10349] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.274239][T10454] loop3: detected capacity change from 0 to 128
[  205.276756][T10349] 8021q: adding VLAN 0 to HW filter on device team0
[  205.285850][T10454] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.1654: iget: checksum invalid
[  205.300393][T10454] EXT4-fs (loop3): get root inode failed
[  205.306084][T10454] EXT4-fs (loop3): mount failed
[  205.311814][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.318936][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.327886][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.335016][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.372757][T10349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.457334][T10466] loop3: detected capacity change from 0 to 512
[  205.475382][T10466] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  205.497771][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.522782][T10466] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1657: bg 0: block 64: padding at end of block bitmap is not set
[  205.542740][   T29] kauditd_printk_skb: 57 callbacks suppressed
[  205.542753][   T29] audit: type=1400 audit(1723640264.039:833): avc:  denied  { execute } for  pid=10471 comm="syz.1.1658" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  205.585263][T10466] Quota error (device loop3): write_blk: dquota write failed
[  205.595150][T10466] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  205.612898][T10466] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1657: Failed to acquire dquot type 0
[  205.636987][T10466] EXT4-fs (loop3): 1 truncate cleaned up
[  205.650602][T10466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.692717][T10349] veth0_vlan: entered promiscuous mode
[  205.698673][T10466] xt_NFQUEUE: number of total queues is 0
[  205.709342][T10349] veth1_vlan: entered promiscuous mode
[  205.737120][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.754575][T10349] veth0_macvtap: entered promiscuous mode
[  205.772033][T10349] veth1_macvtap: entered promiscuous mode
[  205.790088][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.800544][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.810438][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.820869][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.830741][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.841186][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.851080][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.861489][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.871363][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.881889][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.903357][T10480] loop3: detected capacity change from 0 to 512
[  205.911763][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.932922][T10480] ext4: Unknown parameter 'smackfsdef'
[  205.939637][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.950182][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.960080][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.961436][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'.
[  205.970527][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.970546][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.988303][T10480] loop3: detected capacity change from 0 to 512
[  205.989202][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.015648][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.026062][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.035873][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.046350][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.062236][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.072003][T10480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  206.074897][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.090872][T10349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.099756][T10349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.108533][T10349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.109487][T10488] loop4: detected capacity change from 0 to 512
[  206.117285][T10349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.132723][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.140843][T10480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1659: bg 0: block 264: padding at end of block bitmap is not set
[  206.161018][T10480] EXT4-fs (loop3): Remounting filesystem read-only
[  206.172057][T10480] EXT4-fs (loop3): 1 truncate cleaned up
[  206.178741][T10480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.191107][T10480] SELinux: (dev loop3, type ext4) getxattr errno 5
[  206.199179][T10480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.264983][T10499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10499 comm=syz.0.1622
[  206.307032][   T29] audit: type=1400 audit(1723640264.809:834): avc:  denied  { create } for  pid=10498 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  206.363781][   T29] audit: type=1400 audit(1723640264.819:835): avc:  denied  { write } for  pid=10498 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  206.558168][T10513] loop0: detected capacity change from 0 to 8192
[  206.574377][T10519] loop3: detected capacity change from 0 to 1024
[  206.586919][T10519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  206.618392][T10519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.674555][   T29] audit: type=1400 audit(1723640265.169:836): avc:  denied  { rename } for  pid=10517 comm="syz.3.1672" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  206.758910][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.865547][T10531] loop3: detected capacity change from 0 to 256
[  206.955747][T10534] loop3: detected capacity change from 0 to 512
[  206.979457][T10534] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  207.016433][T10534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1677: bg 0: block 64: padding at end of block bitmap is not set
[  207.052683][T10534] Quota error (device loop3): write_blk: dquota write failed
[  207.080953][T10534] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  207.104744][T10534] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1677: Failed to acquire dquot type 0
[  207.123800][T10534] EXT4-fs (loop3): 1 truncate cleaned up
[  207.130254][T10534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.161057][T10534] xt_NFQUEUE: number of total queues is 0
[  207.212090][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.403712][   T29] audit: type=1400 audit(1723640265.899:837): avc:  denied  { setopt } for  pid=10549 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  208.098640][T10569] ieee802154 phy0 wpan0: encryption failed: -22
[  208.161515][T10575] loop4: detected capacity change from 0 to 512
[  208.183137][T10575] EXT4-fs: Ignoring removed i_version option
[  208.216629][T10575] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1691: casefold flag without casefold feature
[  208.233277][T10575] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1691: couldn't read orphan inode 15 (err -117)
[  208.247706][T10575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.288853][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.377514][T10596] loop0: detected capacity change from 0 to 512
[  208.401001][T10596] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  208.440090][T10596] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1694: bg 0: block 64: padding at end of block bitmap is not set
[  208.456509][T10596] Quota error (device loop0): write_blk: dquota write failed
[  208.463987][T10596] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1694: Failed to acquire dquot type 0
[  208.483846][T10596] EXT4-fs (loop0): 1 truncate cleaned up
[  208.504150][T10596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.585098][T10596] xt_NFQUEUE: number of total queues is 0
[  208.622531][T10349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.812423][T10631] loop3: detected capacity change from 0 to 8192
[  208.817423][T10629] loop0: detected capacity change from 0 to 8192
[  208.978356][T10645] loop3: detected capacity change from 0 to 512
[  209.084299][T10653] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  209.126308][T10655] netlink: 'syz.3.1711': attribute type 10 has an invalid length.
[  209.155806][T10655] team0: Port device netdevsim1 added
[  209.194261][T10657] loop3: detected capacity change from 0 to 512
[  209.206103][T10657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.225794][T10657] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.306661][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.471365][T10672] loop4: detected capacity change from 0 to 1024
[  209.501233][T10672] EXT4-fs: Ignoring removed nobh option
[  209.506841][T10672] EXT4-fs: Ignoring removed orlov option
[  209.547059][T10675] netlink: 'syz.1.1719': attribute type 4 has an invalid length.
[  209.569227][T10672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.732072][T10683] loop3: detected capacity change from 0 to 512
[  209.744447][T10683] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  209.802925][T10683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1722: bg 0: block 64: padding at end of block bitmap is not set
[  209.839312][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.853865][T10683] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1722: Failed to acquire dquot type 0
[  209.916576][T10683] EXT4-fs (loop3): 1 truncate cleaned up
[  209.922609][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.937426][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'.
[  210.001660][T10683] xt_NFQUEUE: number of total queues is 0
[  210.050019][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.103504][T10699] loop3: detected capacity change from 0 to 2048
[  210.166383][T10699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.203293][ T9258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.285746][T10706] loop3: detected capacity change from 0 to 256
[  210.320445][T10706] msdos: Bad value for 'errors'
[  210.346618][T10706] loop3: detected capacity change from 0 to 512
[  210.604217][T10722] FAULT_INJECTION: forcing a failure.
[  210.604217][T10722] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  210.617522][T10722] CPU: 1 UID: 0 PID: 10722 Comm: syz.1.1735 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  210.628335][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  210.638390][T10722] Call Trace:
[  210.641671][T10722]  <TASK>
[  210.644589][T10722]  dump_stack_lvl+0xf2/0x150
[  210.649257][T10722]  dump_stack+0x15/0x20
[  210.653406][T10722]  should_fail_ex+0x229/0x230
[  210.658105][T10722]  should_fail_alloc_page+0xfd/0x110
[  210.663419][T10722]  __alloc_pages_noprof+0x109/0x360
[  210.668640][T10722]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  210.674119][T10722]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  210.679497][T10722]  handle_mm_fault+0xd6d/0x2940
[  210.684427][T10722]  exc_page_fault+0x296/0x650
[  210.689194][T10722]  asm_exc_page_fault+0x26/0x30
[  210.694049][T10722] RIP: 0010:__put_user_1+0x11/0x20
[  210.699166][T10722] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  210.718780][T10722] RSP: 0018:ffffc900012a7dc0 EFLAGS: 00050202
[  210.724865][T10722] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000080
[  210.732834][T10722] RDX: 0000000000000499 RSI: 0000000000000000 RDI: ffffffff88bc0cbc
[  210.740825][T10722] RBP: 0000000000000016 R08: 0001ffff866448af R09: 0000000000000000
[  210.748786][T10722] R10: 0001ffffffffffff R11: 0001c900012a7d98 R12: 0000000000000000
[  210.756750][T10722] R13: ffff888133e38800 R14: 0000000000000246 R15: 0000000020000080
[  210.764839][T10722]  vt_do_kdskled+0x183/0x2f0
[  210.769535][T10722]  vt_ioctl+0xafc/0x1810
[  210.773769][T10722]  ? tty_jobctrl_ioctl+0x2ab/0x810
[  210.779014][T10722]  tty_ioctl+0x821/0xbe0
[  210.783253][T10722]  ? __pfx_tty_ioctl+0x10/0x10
[  210.788017][T10722]  __se_sys_ioctl+0xd3/0x150
[  210.792680][T10722]  __x64_sys_ioctl+0x43/0x50
[  210.797341][T10722]  x64_sys_call+0x15cc/0x2d60
[  210.802072][T10722]  do_syscall_64+0xc9/0x1c0
[  210.806607][T10722]  ? clear_bhb_loop+0x55/0xb0
[  210.811293][T10722]  ? clear_bhb_loop+0x55/0xb0
[  210.816038][T10722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.821970][T10722] RIP: 0033:0x7faadeca99f9
[  210.826378][T10722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.846030][T10722] RSP: 002b:00007faadd927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  210.854439][T10722] RAX: ffffffffffffffda RBX: 00007faadee45f80 RCX: 00007faadeca99f9
[  210.862409][T10722] RDX: 0000000020000080 RSI: 0000000000004b64 RDI: 0000000000000003
[  210.870379][T10722] RBP: 00007faadd927090 R08: 0000000000000000 R09: 0000000000000000
[  210.878444][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.886412][T10722] R13: 0000000000000000 R14: 00007faadee45f80 R15: 00007ffed5f26c88
[  210.894404][T10722]  </TASK>
[  210.923419][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'.
[  210.960663][T10730] loop4: detected capacity change from 0 to 512
[  210.983598][T10730] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  211.077638][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  211.077651][   T29] audit: type=1400 audit(1723640269.579:841): avc:  denied  { read } for  pid=10731 comm="syz.1.1740" path="socket:[44148]" dev="sockfs" ino=44148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  211.109726][T10730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1739: bg 0: block 64: padding at end of block bitmap is not set
[  211.149230][T10730] Quota error (device loop4): write_blk: dquota write failed
[  211.174833][T10730] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  211.213648][T10730] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1739: Failed to acquire dquot type 0
[  211.256330][T10730] EXT4-fs (loop4): 1 truncate cleaned up
[  211.273939][T10730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.346201][T10730] xt_NFQUEUE: number of total queues is 0
[  211.394703][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.551534][T10738] chnl_net:caif_netlink_parms(): no params data found
[  211.621110][T10738] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.628213][T10738] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.668209][T10738] bridge_slave_0: entered allmulticast mode
[  211.688365][T10738] bridge_slave_0: entered promiscuous mode
[  211.708624][T10738] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.715910][T10738] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.751172][T10738] bridge_slave_1: entered allmulticast mode
[  211.770426][T10738] bridge_slave_1: entered promiscuous mode
[  211.811198][T10738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.833347][T10738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.873822][T10738] team0: Port device team_slave_0 added
[  211.886854][T10738] team0: Port device team_slave_1 added
[  211.919304][T10738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.926328][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.952227][T10738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.034475][T10738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.041436][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.067367][T10738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.151453][T10738] hsr_slave_0: entered promiscuous mode
[  212.165227][T10738] hsr_slave_1: entered promiscuous mode
[  212.183744][T10738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.191297][T10738] Cannot create hsr debugfs directory
[  212.335994][T10738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.346280][T10761] loop4: detected capacity change from 0 to 2048
[  212.353803][   T29] audit: type=1400 audit(1723640270.859:842): avc:  denied  { map } for  pid=10760 comm="syz.4.1745" path="socket:[45183]" dev="sockfs" ino=45183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  212.377041][   T29] audit: type=1400 audit(1723640270.859:843): avc:  denied  { read } for  pid=10760 comm="syz.4.1745" path="socket:[45183]" dev="sockfs" ino=45183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  212.485190][T10738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.551118][T10738] team0: Port device netdevsim1 removed
[  212.558859][T10738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.619027][T10738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.674591][ T9350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.686538][ T4603] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  212.687732][   T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.696637][ T4603] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  212.768662][T10762] chnl_net:caif_netlink_parms(): no params data found
[  212.818757][   T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.856335][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'.
[  212.878540][   T50] team0: Port device netdevsim1 removed
[  212.885659][   T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.909747][T10790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.930364][T10790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.977832][T10790] bond0 (unregistering): Released all slaves
[  213.002144][T10762] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.009278][T10762] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.033880][T10762] bridge_slave_0: entered allmulticast mode
[  213.044359][T10762] bridge_slave_0: entered promiscuous mode
[  213.061386][T10762] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.068491][T10762] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.085999][T10762] bridge_slave_1: entered allmulticast mode
[  213.103462][T10762] bridge_slave_1: entered promiscuous mode
[  213.121579][T10738] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  213.138330][   T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.173441][T10738] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  213.198800][T10738] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  213.236951][T10762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.272352][T10738] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  213.292441][T10762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.302859][   T50] bridge_slave_1: left allmulticast mode
[  213.308556][   T50] bridge_slave_1: left promiscuous mode
[  213.314273][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.328478][   T50] bridge_slave_0: left allmulticast mode
[  213.334288][   T50] bridge_slave_0: left promiscuous mode
[  213.339962][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.349657][T10808] serio: Serial port pts0
[  213.408254][T10810] loop4: detected capacity change from 0 to 128
[  213.417117][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.427672][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.437412][   T50] bond0 (unregistering): Released all slaves
[  213.458033][T10810] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1754' sets config #0
[  213.472916][T10762] team0: Port device team_slave_0 added
[  213.480405][T10762] team0: Port device team_slave_1 added
[  213.505333][T10762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.512303][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.538316][T10762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.554215][T10762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.561216][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.587212][T10762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.637270][   T50] hsr_slave_0: left promiscuous mode
[  213.643005][   T50] hsr_slave_1: left promiscuous mode
[  213.649450][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.656931][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.664653][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.672174][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.681594][   T50] veth1_macvtap: left promiscuous mode
[  213.687215][   T50] veth0_macvtap: left promiscuous mode
[  213.693018][   T50] veth1_vlan: left promiscuous mode
[  213.694350][   T29] audit: type=1400 audit(1723640272.199:844): avc:  denied  { create } for  pid=10824 comm="syz.1.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  213.698389][   T50] veth0_vlan: left promiscuous mode
[  213.730785][T10825] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  213.738133][T10825] vhci_hcd: invalid port number 209
[  213.743362][T10825] vhci_hcd: invalid port number 209
[  213.808966][   T50] team0 (unregistering): Port device team_slave_1 removed
[  213.818947][   T50] team0 (unregistering): Port device team_slave_0 removed
[  213.860881][T10762] hsr_slave_0: entered promiscuous mode
[  213.868456][T10762] hsr_slave_1: entered promiscuous mode
[  213.874942][T10762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.882535][T10762] Cannot create hsr debugfs directory
[  213.925037][T10738] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.962733][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'.
[  213.986359][T10738] 8021q: adding VLAN 0 to HW filter on device team0
[  214.021705][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.028832][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.038757][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.045852][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.177500][T10738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.192632][T10854] loop4: detected capacity change from 0 to 512
[  214.216883][T10856] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1770'.
[  214.235712][T10854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.267036][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.284295][T10854] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.312711][T10816] chnl_net:caif_netlink_parms(): no params data found
[  214.334919][T10854] SELinux:  Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped).
[  214.365249][T10854] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1771'.
[  214.365341][   T29] audit: type=1400 audit(1723640272.869:845): avc:  denied  { create } for  pid=10853 comm="syz.4.1771" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:agp_device_t:s0"
[  214.375903][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.398807][   T29] audit: type=1400 audit(1723640272.869:846): avc:  denied  { associate } for  pid=10853 comm="syz.4.1771" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:agp_device_t:s0"
[  214.398833][   T29] audit: type=1400 audit(1723640272.869:847): avc:  denied  { link } for  pid=10853 comm="syz.4.1771" name="bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:agp_device_t:s0"
[  214.474117][ T9567] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /99/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  214.534077][T10871] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1774'.
[  214.555003][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.588204][T10762] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  214.629003][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.655353][T10762] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  214.676653][T10762] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  214.698384][T10738] veth0_vlan: entered promiscuous mode
[  214.724626][T10816] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.731758][T10816] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.739054][T10816] bridge_slave_0: entered allmulticast mode
[  214.754584][T10816] bridge_slave_0: entered promiscuous mode
[  214.764196][T10762] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  214.783744][T10816] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.790913][T10816] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.813228][T10816] bridge_slave_1: entered allmulticast mode
[  214.828065][T10816] bridge_slave_1: entered promiscuous mode
[  214.864724][T10880] FAULT_INJECTION: forcing a failure.
[  214.864724][T10880] name failslab, interval 1, probability 0, space 0, times 0
[  214.865678][T10738] veth1_vlan: entered promiscuous mode
[  214.877496][T10880] CPU: 0 UID: 0 PID: 10880 Comm: syz.1.1776 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  214.893585][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  214.900384][T10738] veth0_macvtap: entered promiscuous mode
[  214.903649][T10880] Call Trace:
[  214.903657][T10880]  <TASK>
[  214.915627][T10880]  dump_stack_lvl+0xf2/0x150
[  214.920285][T10880]  dump_stack+0x15/0x20
[  214.924445][T10880]  should_fail_ex+0x229/0x230
[  214.925760][T10738] veth1_macvtap: entered promiscuous mode
[  214.929124][T10880]  ? selinux_key_alloc+0x39/0xe0
[  214.939752][T10880]  should_failslab+0x8f/0xb0
[  214.944359][T10880]  __kmalloc_cache_noprof+0x4b/0x2a0
[  214.947924][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.949678][T10880]  selinux_key_alloc+0x39/0xe0
[  214.960105][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.964820][T10880]  security_key_alloc+0x4a/0x80
[  214.974737][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.979438][T10880]  key_alloc+0x61c/0xa40
[  214.979517][T10880]  __key_create_or_update+0x65b/0x750
[  214.989901][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.994106][T10880]  key_create_or_update+0x42/0x60
[  214.999459][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.009220][T10880]  __se_sys_add_key+0x280/0x320
[  215.014234][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.024603][T10880]  ? fput+0x13b/0x180
[  215.024633][T10880]  __x64_sys_add_key+0x67/0x80
[  215.029514][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.039275][T10880]  x64_sys_call+0x157d/0x2d60
[  215.039301][T10880]  do_syscall_64+0xc9/0x1c0
[  215.043251][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.047983][T10880]  ? clear_bhb_loop+0x55/0xb0
[  215.048036][T10880]  ? clear_bhb_loop+0x55/0xb0
[  215.058456][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.063093][T10880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.067637][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.077388][T10880] RIP: 0033:0x7faadeca99f9
[  215.077405][T10880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.077421][T10880] RSP: 002b:00007faadd927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  215.145541][T10880] RAX: ffffffffffffffda RBX: 00007faadee45f80 RCX: 00007faadeca99f9
[  215.153510][T10880] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 00000000200001c0
[  215.161478][T10880] RBP: 00007faadd927090 R08: 00000000367c7ed1 R09: 0000000000000000
[  215.169468][T10880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.177436][T10880] R13: 0000000000000000 R14: 00007faadee45f80 R15: 00007ffed5f26c88
[  215.185461][T10880]  </TASK>
[  215.225020][T10738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.244709][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.255148][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.264961][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.275397][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.285244][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.295659][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.305458][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.316080][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.326101][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.336592][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.347625][T10738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.365530][T10816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.395322][T10738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.404190][T10738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.412918][T10738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.421690][T10738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.466234][T10816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.486269][   T50] bridge_slave_1: left allmulticast mode
[  215.491921][   T50] bridge_slave_1: left promiscuous mode
[  215.497613][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.524459][   T50] bridge_slave_0: left allmulticast mode
[  215.530117][   T50] bridge_slave_0: left promiscuous mode
[  215.536108][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.657485][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.672754][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.693229][   T50] bond0 (unregistering): Released all slaves
[  215.710245][T10816] team0: Port device team_slave_0 added
[  215.744030][T10888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  215.784587][T10889] 8021q: adding VLAN 0 to HW filter on device batadv1
[  215.824504][T10889] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  215.839328][T10816] team0: Port device team_slave_1 added
[  215.845512][T10890] 8021q: adding VLAN 0 to HW filter on device bond1
[  215.852209][ T3346] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  215.880810][   T50] hsr_slave_0: left promiscuous mode
[  215.890776][   T50] hsr_slave_1: left promiscuous mode
[  215.914388][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.921808][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.930955][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1780'.
[  215.940499][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.947995][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.973749][ T4603] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  215.987557][   T50] veth1_macvtap: left promiscuous mode
[  215.993029][   T50] veth0_macvtap: left promiscuous mode
[  215.998531][   T50] veth1_vlan: left promiscuous mode
[  216.003801][   T50] veth0_vlan: left promiscuous mode
[  216.009882][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1780'.
[  216.142679][   T50] team0 (unregistering): Port device team_slave_1 removed
[  216.167483][   T50] team0 (unregistering): Port device team_slave_0 removed
[  216.243228][T10762] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.263318][T10816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.270332][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.296272][T10816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.313545][T10903] loop3: detected capacity change from 0 to 512
[  216.320473][T10903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  216.336879][T10762] 8021q: adding VLAN 0 to HW filter on device team0
[  216.346807][T10816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.353913][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.356815][T10903] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1751: bg 0: block 264: padding at end of block bitmap is not set
[  216.379958][T10816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.417547][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.423733][T10903] EXT4-fs (loop3): Remounting filesystem read-only
[  216.424600][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.433875][T10903] EXT4-fs (loop3): 1 truncate cleaned up
[  216.444446][T10903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.456578][T10903] SELinux: (dev loop3, type ext4) getxattr errno 5
[  216.466927][T10903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.478159][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.485315][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.511357][T10816] hsr_slave_0: entered promiscuous mode
[  216.519279][T10816] hsr_slave_1: entered promiscuous mode
[  216.522950][T10907] loop3: detected capacity change from 0 to 512
[  216.531154][T10816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.538851][T10816] Cannot create hsr debugfs directory
[  216.546392][T10907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.552646][T10762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  216.566966][T10907] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.569148][T10762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  216.692417][T10762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.701175][T10738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.800409][T10762] veth0_vlan: entered promiscuous mode
[  216.815232][T10762] veth1_vlan: entered promiscuous mode
[  216.839108][T10762] veth0_macvtap: entered promiscuous mode
[  216.848742][T10762] veth1_macvtap: entered promiscuous mode
[  216.858130][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'.
[  216.872670][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.883238][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.893330][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.903813][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.913616][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.924332][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.934190][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.944628][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.954514][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.964978][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.983416][T10762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.993981][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.004501][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.014421][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.024848][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.034784][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.045478][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.055435][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.065935][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.075757][T10762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.086195][T10762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.098069][T10762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.105489][T10926] tipc: Started in network mode
[  217.110389][T10926] tipc: Node identity , cluster identity 4711
[  217.116511][T10926] tipc: Failed to obtain node identity
[  217.121958][T10926] tipc: Enabling of bearer <eth:ip_vti0> rejected, failed to enable media
[  217.147885][T10762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.156707][T10762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.165439][T10762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.174165][T10762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.209256][T10816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.225604][T10816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.245757][T10816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.267937][T10816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  217.281694][T10937] loop3: detected capacity change from 0 to 512
[  217.323633][T10937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  217.354906][T10816] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.361964][T10937] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1791: bg 0: block 264: padding at end of block bitmap is not set
[  217.381124][T10937] EXT4-fs (loop3): Remounting filesystem read-only
[  217.402549][T10816] 8021q: adding VLAN 0 to HW filter on device team0
[  217.409896][T10937] EXT4-fs (loop3): 1 truncate cleaned up
[  217.416125][T10937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.430830][T10937] SELinux: (dev loop3, type ext4) getxattr errno 5
[  217.434661][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.444453][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.457769][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  217.457781][   T29] audit: type=1400 audit(1723640275.959:852): avc:  denied  { setattr } for  pid=10951 comm="syz.1.1795" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  217.493633][T10937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.525774][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.532854][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.553439][T10816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.564089][T10816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.779892][T10816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.045317][T10816] veth0_vlan: entered promiscuous mode
[  218.055703][T10816] veth1_vlan: entered promiscuous mode
[  218.069124][T10816] veth0_macvtap: entered promiscuous mode
[  218.082537][T10816] veth1_macvtap: entered promiscuous mode
[  218.093992][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.104538][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.114500][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.124918][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.134785][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.145200][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.155060][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.165556][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.175375][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.185834][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.195860][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.206392][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.222632][T10816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.232889][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.243414][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.253277][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.263784][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.273582][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.284275][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.294079][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.304609][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.314423][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.324839][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.334646][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.345057][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.360443][T10816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.369592][T10816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.378548][T10816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.387441][T10816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.396155][T10816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.499676][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'.
[  218.561756][T10988] FAULT_INJECTION: forcing a failure.
[  218.561756][T10988] name failslab, interval 1, probability 0, space 0, times 0
[  218.566210][T11005] loop3: detected capacity change from 0 to 164
[  218.574376][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.1.1801 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  218.591362][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  218.601474][T10988] Call Trace:
[  218.604748][T10988]  <TASK>
[  218.607668][T10988]  dump_stack_lvl+0xf2/0x150
[  218.612269][T10988]  dump_stack+0x15/0x20
[  218.616513][T10988]  should_fail_ex+0x229/0x230
[  218.621217][T10988]  ? skb_clone+0x154/0x1f0
[  218.625670][T10988]  should_failslab+0x8f/0xb0
[  218.630264][T10988]  kmem_cache_alloc_noprof+0x4c/0x290
[  218.635723][T10988]  skb_clone+0x154/0x1f0
[  218.639971][T10988]  dev_queue_xmit_nit+0x149/0x620
[  218.645004][T10988]  dev_hard_start_xmit+0xcc/0x3f0
[  218.650024][T10988]  ? validate_xmit_skb+0x658/0x8d0
[  218.655137][T10988]  __dev_queue_xmit+0xfd4/0x1fe0
[  218.660071][T10988]  ? avc_has_perm_noaudit+0x1cc/0x210
[  218.665457][T10988]  ? __dev_queue_xmit+0x161/0x1fe0
[  218.670572][T10988]  ? should_fail_ex+0xd7/0x230
[  218.675354][T10988]  ? __skb_clone+0x2d0/0x2f0
[  218.680040][T10988]  __netlink_deliver_tap+0x39f/0x4c0
[  218.685336][T10988]  netlink_unicast+0x641/0x670
[  218.690105][T10988]  netlink_sendmsg+0x5cc/0x6e0
[  218.694862][T10988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.700260][T10988]  __sock_sendmsg+0x140/0x180
[  218.704937][T10988]  ____sys_sendmsg+0x312/0x410
[  218.709743][T10988]  __sys_sendmsg+0x1e9/0x280
[  218.714395][T10988]  __x64_sys_sendmsg+0x46/0x50
[  218.719231][T10988]  x64_sys_call+0x2689/0x2d60
[  218.723986][T10988]  do_syscall_64+0xc9/0x1c0
[  218.728496][T10988]  ? clear_bhb_loop+0x55/0xb0
[  218.733168][T10988]  ? clear_bhb_loop+0x55/0xb0
[  218.737863][T10988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.743777][T10988] RIP: 0033:0x7faadeca99f9
[  218.748341][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.768039][T10988] RSP: 002b:00007faadd927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.776462][T10988] RAX: ffffffffffffffda RBX: 00007faadee45f80 RCX: 00007faadeca99f9
[  218.784443][T10988] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005
[  218.792402][T10988] RBP: 00007faadd927090 R08: 0000000000000000 R09: 0000000000000000
[  218.800364][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.808341][T10988] R13: 0000000000000000 R14: 00007faadee45f80 R15: 00007ffed5f26c88
[  218.816367][T10988]  </TASK>
[  218.825499][T11004] loop0: detected capacity change from 0 to 512
[  218.842070][T10988] netlink: 'syz.1.1801': attribute type 3 has an invalid length.
[  218.842374][T11004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  218.868701][T11004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1807: bg 0: block 264: padding at end of block bitmap is not set
[  218.885163][T11004] EXT4-fs (loop0): Remounting filesystem read-only
[  218.891750][T11004] EXT4-fs (loop0): 1 truncate cleaned up
[  218.897862][T11004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.911329][T11004] SELinux: (dev loop0, type ext4) getxattr errno 5
[  218.919528][T11004] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.971287][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'.
[  219.069946][   T29] audit: type=1400 audit(1723640277.569:853): avc:  denied  { ioctl } for  pid=11047 comm="syz.1.1819" path="socket:[47304]" dev="sockfs" ino=47304 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  219.099515][T11046] loop0: detected capacity change from 0 to 512
[  219.115386][T11046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.128598][T11046] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.218966][T11053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1819'.
[  219.628750][   T29] audit: type=1400 audit(1723640278.129:854): avc:  denied  { mounton } for  pid=11078 comm="syz.2.1830" path="/14/bus" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  219.658440][T11079] loop2: detected capacity change from 0 to 132
[  219.934356][   T29] audit: type=1400 audit(1723640278.439:855): avc:  denied  { ioctl } for  pid=11092 comm="syz.1.1832" path="/dev/ptp0" dev="devtmpfs" ino=221 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  219.974208][   T29] audit: type=1400 audit(1723640278.469:856): avc:  denied  { bind } for  pid=11092 comm="syz.1.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  220.008152][T10816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.074709][T11099] loop3: detected capacity change from 0 to 512
[  220.081301][T11099] EXT4-fs: test_dummy_encryption option not supported
[  220.090814][T11099] Cannot find add_set index 0 as target
[  220.141732][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'.
[  220.157872][T11100] FAULT_INJECTION: forcing a failure.
[  220.157872][T11100] name failslab, interval 1, probability 0, space 0, times 0
[  220.170630][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.1.1836 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  220.181437][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  220.191481][T11100] Call Trace:
[  220.194779][T11100]  <TASK>
[  220.197712][T11100]  dump_stack_lvl+0xf2/0x150
[  220.202323][T11100]  dump_stack+0x15/0x20
[  220.206614][T11100]  should_fail_ex+0x229/0x230
[  220.211309][T11100]  ? __kvmalloc_node_noprof+0x72/0x170
[  220.216811][T11100]  should_failslab+0x8f/0xb0
[  220.221481][T11100]  __kmalloc_node_noprof+0xa8/0x380
[  220.226689][T11100]  __kvmalloc_node_noprof+0x72/0x170
[  220.231995][T11100]  bpf_test_run_xdp_live+0x10a/0x1000
[  220.237368][T11100]  ? __bpf_prog_run32+0x74/0xa0
[  220.242231][T11100]  ? __rcu_read_unlock+0x4e/0x70
[  220.247167][T11100]  ? __perf_event_task_sched_in+0x7c4/0x7f0
[  220.253066][T11100]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  220.259014][T11100]  ? bpf_prog_test_run_xdp+0x3a7/0x890
[  220.264549][T11100]  bpf_prog_test_run_xdp+0x51d/0x890
[  220.269842][T11100]  ? __fget_files+0x1da/0x210
[  220.274563][T11100]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  220.280371][T11100]  bpf_prog_test_run+0x26d/0x3e0
[  220.285313][T11100]  __sys_bpf+0x400/0x7a0
[  220.289607][T11100]  __x64_sys_bpf+0x43/0x50
[  220.294071][T11100]  x64_sys_call+0x2625/0x2d60
[  220.298864][T11100]  do_syscall_64+0xc9/0x1c0
[  220.303369][T11100]  ? clear_bhb_loop+0x55/0xb0
[  220.308124][T11100]  ? clear_bhb_loop+0x55/0xb0
[  220.312804][T11100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.318693][T11100] RIP: 0033:0x7faadeca99f9
[  220.323128][T11100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.342737][T11100] RSP: 002b:00007faadd927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  220.351144][T11100] RAX: ffffffffffffffda RBX: 00007faadee45f80 RCX: 00007faadeca99f9
[  220.359123][T11100] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  220.367097][T11100] RBP: 00007faadd927090 R08: 0000000000000000 R09: 0000000000000000
[  220.375496][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.383464][T11100] R13: 0000000000000000 R14: 00007faadee45f80 R15: 00007ffed5f26c88
[  220.391442][T11100]  </TASK>
[  220.399172][T11098] rdma_rxe: rxe_newlink: failed to add team_slave_1
[  220.408263][T11098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1835'.
[  220.437706][   T29] audit: type=1326 audit(1723640278.929:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11096 comm="syz.2.1835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ee099f9 code=0x0
[  220.463061][   T29] audit: type=1400 audit(1723640278.939:858): avc:  denied  { bind } for  pid=11107 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  220.726348][T11128] loop0: detected capacity change from 0 to 4096
[  220.774719][T11128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.792835][T11131] loop3: detected capacity change from 0 to 8192
[  220.819460][T11128] syzkaller1: entered promiscuous mode
[  220.825126][   T29] audit: type=1400 audit(1723640279.319:859): avc:  denied  { lock } for  pid=11127 comm="syz.0.1844" path="/15/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  220.851805][T11128] netlink: 'syz.0.1844': attribute type 21 has an invalid length.
[  220.859734][T11128] netlink: 'syz.0.1844': attribute type 1 has an invalid length.
[  220.867486][T11128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1844'.
[  220.943700][   T29] audit: type=1400 audit(1723640279.439:860): avc:  denied  { ioctl } for  pid=11127 comm="syz.0.1844" path="/15/file0/hugetlb.1GB.usage_in_bytes" dev="loop0" ino=18 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  221.025359][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'.
[  221.034334][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  221.052496][T10816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.065112][T11135] ip6_vti0: Master is either lo or non-ether device
[  221.079424][T11113] vcan0: tx drop: invalid da for name 0x00000000000000ec
[  221.385847][T11151] x_tables: duplicate underflow at hook 2
[  221.681059][T11170] netlink: 'syz.1.1850': attribute type 29 has an invalid length.
[  221.894900][   T29] audit: type=1400 audit(1723640280.389:861): avc:  denied  { read } for  pid=11194 comm="syz.3.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  221.946408][T11195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1854'.
[  222.029521][T11202] netlink: 'syz.0.1855': attribute type 2 has an invalid length.
[  222.030092][T11201] rdma_rxe: rxe_newlink: failed to add team_slave_1
[  222.037298][T11202] netlink: 'syz.0.1855': attribute type 8 has an invalid length.
[  222.037312][T11202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1855'.
[  222.347057][T11211] loop0: detected capacity change from 0 to 512
[  222.355555][T11211] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  222.365468][T11211] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent
[  222.411549][T11218] ref_ctr_offset mismatch. inode: 0x83 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0
[  222.505708][T11220] loop0: detected capacity change from 0 to 512
[  222.525321][T11220] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  222.548358][T11220] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1861: bg 0: block 64: padding at end of block bitmap is not set
[  222.571371][T11220] __quota_error: 3 callbacks suppressed
[  222.571386][T11220] Quota error (device loop0): write_blk: dquota write failed
[  222.594368][T11220] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  222.604664][T11220] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1861: Failed to acquire dquot type 0
[  222.620568][T11220] EXT4-fs (loop0): 1 truncate cleaned up
[  222.626997][T11220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.666729][T10816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.738921][T11231] loop0: detected capacity change from 0 to 512
[  222.765485][T11231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  222.797264][T11231] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1865: bg 0: block 264: padding at end of block bitmap is not set
[  222.822952][T11231] EXT4-fs (loop0): Remounting filesystem read-only
[  222.829602][T11231] EXT4-fs (loop0): 1 truncate cleaned up
[  222.838370][T11231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.851495][T11231] SELinux: (dev loop0, type ext4) getxattr errno 5
[  222.861193][ T4603] bridge_slave_1: left allmulticast mode
[  222.866943][ T4603] bridge_slave_1: left promiscuous mode
[  222.872624][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.893655][T11231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.905319][ T4603] bridge_slave_0: left allmulticast mode
[  222.910976][ T4603] bridge_slave_0: left promiscuous mode
[  222.916932][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.927836][T11236] FAULT_INJECTION: forcing a failure.
[  222.927836][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.940902][T11236] CPU: 1 UID: 0 PID: 11236 Comm: syz.3.1866 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  222.951665][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  222.961753][T11236] Call Trace:
[  222.965023][T11236]  <TASK>
[  222.967947][T11236]  dump_stack_lvl+0xf2/0x150
[  222.972546][T11236]  dump_stack+0x15/0x20
[  222.976777][T11236]  should_fail_ex+0x229/0x230
[  222.981541][T11236]  should_fail+0xb/0x10
[  222.985702][T11236]  should_fail_usercopy+0x1a/0x20
[  222.990808][T11236]  _copy_to_user+0x1e/0xa0
[  222.995365][T11236]  simple_read_from_buffer+0xa0/0x110
[  223.000744][T11236]  proc_fail_nth_read+0xfc/0x140
[  223.005708][T11236]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.011296][T11236]  vfs_read+0x1a2/0x6e0
[  223.015460][T11236]  ? __rcu_read_unlock+0x4e/0x70
[  223.020438][T11236]  ? __fget_files+0x1da/0x210
[  223.025123][T11236]  ksys_read+0xeb/0x1b0
[  223.029318][T11236]  __x64_sys_read+0x42/0x50
[  223.033826][T11236]  x64_sys_call+0x27d3/0x2d60
[  223.038588][T11236]  do_syscall_64+0xc9/0x1c0
[  223.043100][T11236]  ? clear_bhb_loop+0x55/0xb0
[  223.047775][T11236]  ? clear_bhb_loop+0x55/0xb0
[  223.052479][T11236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.058444][T11236] RIP: 0033:0x7fc03ce6843c
[  223.062871][T11236] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[  223.082502][T11236] RSP: 002b:00007fc03bae7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  223.090926][T11236] RAX: ffffffffffffffda RBX: 00007fc03d005f80 RCX: 00007fc03ce6843c
[  223.098893][T11236] RDX: 000000000000000f RSI: 00007fc03bae70a0 RDI: 0000000000000004
[  223.106860][T11236] RBP: 00007fc03bae7090 R08: 0000000000000000 R09: 0000000000000000
[  223.114827][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.122794][T11236] R13: 0000000000000000 R14: 00007fc03d005f80 R15: 00007fffe3660b58
[  223.130859][T11236]  </TASK>
[  223.440758][ T4603] hsr_slave_0: left promiscuous mode
[  223.455094][ T4603] hsr_slave_1: left promiscuous mode
[  223.474532][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.481988][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.505752][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.513182][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.546340][ T4603] veth1_macvtap: left promiscuous mode
[  223.551879][ T4603] veth0_macvtap: left promiscuous mode
[  223.557803][ T4603] veth1_vlan: left promiscuous mode
[  223.572792][T11263] loop2: detected capacity change from 0 to 128
[  223.588745][T11263] EXT4-fs: Ignoring removed nobh option
[  223.604341][T11263] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.624074][T11263] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  223.664379][T11263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=228 sclass=netlink_tcpdiag_socket pid=11263 comm=syz.2.1876
[  223.739220][ T4603] team0 (unregistering): Port device team_slave_1 removed
[  223.751667][ T4603] team0 (unregistering): Port device team_slave_0 removed
[  223.820744][T10762] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /23/mnt/lost+found: directory fails checksum at offset 1024
[  223.838080][T10762] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  223.852767][T10762] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /23/mnt/lost+found: directory fails checksum at offset 1024
[  223.885428][T10762] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  223.915386][T10762] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /23/mnt/lost+found: directory fails checksum at offset 1024
[  223.935783][T10762] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  223.949262][T11278] FAULT_INJECTION: forcing a failure.
[  223.949262][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.955405][T10762] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /23/mnt/lost+found: directory fails checksum at offset 1024
[  223.962434][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.1.1881 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  223.987790][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  223.993997][T10762] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  223.997830][T11278] Call Trace:
[  223.997839][T11278]  <TASK>
[  224.016889][T11278]  dump_stack_lvl+0xf2/0x150
[  224.021499][T11278]  dump_stack+0x15/0x20
[  224.025664][T11278]  should_fail_ex+0x229/0x230
[  224.029665][T10762] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /23/mnt/lost+found: directory fails checksum at offset 1024
[  224.030344][T11278]  should_fail+0xb/0x10
[  224.049261][T11278]  should_fail_usercopy+0x1a/0x20
[  224.054329][T11278]  _copy_to_user+0x1e/0xa0
[  224.058748][T11278]  simple_read_from_buffer+0xa0/0x110
[  224.061497][T10762] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  224.064125][T11278]  proc_fail_nth_read+0xfc/0x140
[  224.082044][T11278]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  224.087595][T11278]  vfs_read+0x1a2/0x6e0
[  224.091841][T11278]  ? __rcu_read_unlock+0x4e/0x70
[  224.096785][T11278]  ? __fget_files+0x1da/0x210
[  224.101479][T11278]  ksys_read+0xeb/0x1b0
[  224.105728][T11278]  __x64_sys_read+0x42/0x50
[  224.110243][T11278]  x64_sys_call+0x27d3/0x2d60
[  224.114947][T11278]  do_syscall_64+0xc9/0x1c0
[  224.119450][T11278]  ? clear_bhb_loop+0x55/0xb0
[  224.124125][T11278]  ? clear_bhb_loop+0x55/0xb0
[  224.128815][T11278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.134822][T11278] RIP: 0033:0x7faadeca843c
[  224.139227][T11278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[  224.158896][T11278] RSP: 002b:00007faadd927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  224.167296][T11278] RAX: ffffffffffffffda RBX: 00007faadee45f80 RCX: 00007faadeca843c
[  224.175253][T11278] RDX: 000000000000000f RSI: 00007faadd9270a0 RDI: 0000000000000005
[  224.183238][T11278] RBP: 00007faadd927090 R08: 0000000000000000 R09: 0000000000000000
[  224.191220][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.199215][T11278] R13: 0000000000000000 R14: 00007faadee45f80 R15: 00007ffed5f26c88
[  224.207254][T11278]  </TASK>
[  224.713237][T11274] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.743627][   T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.794735][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.804939][   T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.849064][T11308] loop3: detected capacity change from 0 to 2048
[  224.858993][   T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.870582][T11308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.899239][   T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.912753][T11294] chnl_net:caif_netlink_parms(): no params data found
[  224.956171][T11294] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.963358][T11294] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.978543][T11294] bridge_slave_0: entered allmulticast mode
[  224.985355][T11294] bridge_slave_0: entered promiscuous mode
[  224.993221][T11294] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.000424][T11294] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.007626][T11294] bridge_slave_1: entered allmulticast mode
[  225.015782][T11294] bridge_slave_1: entered promiscuous mode
[  225.048161][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.060205][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.081649][   T40] bridge_slave_1: left allmulticast mode
[  225.087325][   T40] bridge_slave_1: left promiscuous mode
[  225.092950][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.103841][   T40] bridge_slave_0: left allmulticast mode
[  225.109679][   T40] bridge_slave_0: left promiscuous mode
[  225.115407][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.207024][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.217470][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.227702][   T40] bond0 (unregistering): Released all slaves
[  225.243639][T11294] team0: Port device team_slave_0 added
[  225.262303][T11294] team0: Port device team_slave_1 added
[  225.286556][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.293637][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.319667][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.321487][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.338343][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.364358][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.378348][T11304] chnl_net:caif_netlink_parms(): no params data found
[  225.416518][   T40] hsr_slave_0: left promiscuous mode
[  225.422091][   T40] hsr_slave_1: left promiscuous mode
[  225.427985][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.435429][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.436725][T11335] loop0: detected capacity change from 0 to 128
[  225.449223][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.456696][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.465652][   T40] veth1_macvtap: left promiscuous mode
[  225.471102][   T40] veth0_macvtap: left promiscuous mode
[  225.476707][   T40] veth1_vlan: left promiscuous mode
[  225.481903][   T40] veth0_vlan: left promiscuous mode
[  225.553981][   T40] team0 (unregistering): Port device team_slave_1 removed
[  225.563594][   T40] team0 (unregistering): Port device team_slave_0 removed
[  225.603367][T11294] hsr_slave_0: entered promiscuous mode
[  225.610283][T11294] hsr_slave_1: entered promiscuous mode
[  225.616324][T11294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.623895][T11294] Cannot create hsr debugfs directory
[  225.651094][T11304] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.658221][T11304] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.665411][T11304] bridge_slave_0: entered allmulticast mode
[  225.671821][T11304] bridge_slave_0: entered promiscuous mode
[  225.679116][T11304] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.686278][T11304] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.693531][T11304] bridge_slave_1: entered allmulticast mode
[  225.700588][T10738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.702096][T11304] bridge_slave_1: entered promiscuous mode
[  225.736874][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.749108][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.775341][T11304] team0: Port device team_slave_0 added
[  225.788452][T11343] sctp: [Deprecated]: syz.3.1893 (pid 11343) Use of int in max_burst socket option.
[  225.788452][T11343] Use struct sctp_assoc_value instead
[  225.788833][   T29] audit: type=1400 audit(1723640284.289:865): avc:  denied  { getopt } for  pid=11342 comm="syz.3.1893" lport=33319 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  225.831625][T11344] loop3: detected capacity change from 0 to 512
[  225.833988][T11304] team0: Port device team_slave_1 added
[  225.857698][T11348] loop3: detected capacity change from 0 to 512
[  225.862668][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.870961][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.875098][T11348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.896881][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.899561][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.909745][T11348] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  225.919851][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.919890][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.978049][T11294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.979033][T11348] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1894: Directory hole found for htree leaf block 0
[  226.005512][T11348] No such timeout policy "syz0"
[  226.015386][T11348] __nla_validate_parse: 2 callbacks suppressed
[  226.015474][T11348] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1894'.
[  226.036475][T11294] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.044148][T11352] x_tables: duplicate underflow at hook 3
[  226.066427][T11304] hsr_slave_0: entered promiscuous mode
[  226.072689][T11304] hsr_slave_1: entered promiscuous mode
[  226.084776][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.093765][T11304] Cannot create hsr debugfs directory
[  226.102260][T11294] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.116365][T10738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.176575][T11294] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.199742][   T29] audit: type=1400 audit(1723640284.699:866): avc:  denied  { create } for  pid=11361 comm="syz.3.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  226.211844][T11362] loop3: detected capacity change from 0 to 512
[  226.229034][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'.
[  226.248068][   T40] bridge_slave_1: left allmulticast mode
[  226.253818][   T40] bridge_slave_1: left promiscuous mode
[  226.259492][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.267255][   T40] bridge_slave_0: left allmulticast mode
[  226.272899][   T40] bridge_slave_0: left promiscuous mode
[  226.278565][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.471827][T11294] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  226.487068][T11294] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  226.498898][T11294] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  226.509504][T11294] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  226.546620][   T40] IPVS: stopping master sync thread 9909 ...
[  226.560026][   T40] IPVS: stopping master sync thread 9908 ...
[  226.565863][T11294] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.575184][   T40] IPVS: stopping master sync thread 9906 ...
[  226.586598][   T40] IPVS: stopping master sync thread 9904 ...
[  226.597457][T11294] 8021q: adding VLAN 0 to HW filter on device team0
[  226.623636][T11294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.634106][T11294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.667550][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.674646][ T3273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.686028][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.693139][ T3273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.712072][   T40] hsr_slave_0: left promiscuous mode
[  226.720958][   T40] hsr_slave_1: left promiscuous mode
[  226.727750][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.735264][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.742818][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.750330][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.759939][   T40] veth1_macvtap: left promiscuous mode
[  226.765456][   T40] veth0_macvtap: left promiscuous mode
[  226.771056][   T40] veth1_vlan: left promiscuous mode
[  226.776367][   T40] veth0_vlan: left promiscuous mode
[  226.799500][T11392] loop3: detected capacity change from 0 to 8192
[  226.870086][   T40] team0 (unregistering): Port device team_slave_1 removed
[  226.881289][   T40] team0 (unregistering): Port device team_slave_0 removed
[  226.988549][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.225694][T11294] veth0_vlan: entered promiscuous mode
[  227.239877][T11294] veth1_vlan: entered promiscuous mode
[  227.264281][T11294] veth0_macvtap: entered promiscuous mode
[  227.272091][T11294] veth1_macvtap: entered promiscuous mode
[  227.285752][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.296264][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.306181][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.316728][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.326903][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.337428][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.347561][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.358062][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.370230][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.378600][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.389088][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.398945][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.409467][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.419467][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.429921][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.439753][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.450229][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.466952][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.480240][T11294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.489012][T11294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.497844][T11294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.506664][T11294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.522599][T11304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  227.534214][T11304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  227.549270][T11304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  227.582823][T11416] FAULT_INJECTION: forcing a failure.
[  227.582823][T11416] name failslab, interval 1, probability 0, space 0, times 0
[  227.595585][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.1.1909 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  227.596031][T11304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  227.606409][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  227.606422][T11416] Call Trace:
[  227.606429][T11416]  <TASK>
[  227.606436][T11416]  dump_stack_lvl+0xf2/0x150
[  227.633929][T11416]  dump_stack+0x15/0x20
[  227.638087][T11416]  should_fail_ex+0x229/0x230
[  227.642863][T11416]  ? __alloc_skb+0x10b/0x310
[  227.647521][T11416]  should_failslab+0x8f/0xb0
[  227.652106][T11416]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  227.657965][T11416]  ? __rcu_read_unlock+0x4e/0x70
[  227.662954][T11416]  __alloc_skb+0x10b/0x310
[  227.667361][T11416]  netlink_dump+0x162/0x760
[  227.671918][T11416]  ? genl_start+0x11e/0x390
[  227.676418][T11416]  __netlink_dump_start+0x430/0x510
[  227.681604][T11416]  genl_rcv_msg+0x4e5/0x6c0
[  227.686101][T11416]  ? __pfx_nl80211_dump_scan+0x10/0x10
[  227.691614][T11416]  ? __pfx_genl_start+0x10/0x10
[  227.696486][T11416]  ? __pfx_genl_dumpit+0x10/0x10
[  227.701416][T11416]  ? __pfx_genl_done+0x10/0x10
[  227.706174][T11416]  netlink_rcv_skb+0x12c/0x230
[  227.710960][T11416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  227.716105][T11416]  genl_rcv+0x28/0x40
[  227.720146][T11416]  netlink_unicast+0x593/0x670
[  227.724976][T11416]  netlink_sendmsg+0x5cc/0x6e0
[  227.729783][T11416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.735057][T11416]  __sock_sendmsg+0x140/0x180
[  227.739788][T11416]  ____sys_sendmsg+0x312/0x410
[  227.744558][T11416]  __sys_sendmsg+0x1e9/0x280
[  227.749261][T11416]  __x64_sys_sendmsg+0x46/0x50
[  227.754017][T11416]  x64_sys_call+0x2689/0x2d60
[  227.758690][T11416]  do_syscall_64+0xc9/0x1c0
[  227.763189][T11416]  ? clear_bhb_loop+0x55/0xb0
[  227.767939][T11416]  ? clear_bhb_loop+0x55/0xb0
[  227.772606][T11416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.778562][T11416] RIP: 0033:0x7faadeca99f9
[  227.782963][T11416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.802592][T11416] RSP: 002b:00007faadd927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.810994][T11416] RAX: ffffffffffffffda RBX: 00007faadee45f80 RCX: 00007faadeca99f9
[  227.818951][T11416] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005
[  227.826910][T11416] RBP: 00007faadd927090 R08: 0000000000000000 R09: 0000000000000000
[  227.834868][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.842826][T11416] R13: 0000000000000000 R14: 00007faadee45f80 R15: 00007ffed5f26c88
[  227.850789][T11416]  </TASK>
[  227.927437][T11437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1915'.
[  227.951491][T11435] loop4: detected capacity change from 0 to 764
[  227.990299][T11304] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.010741][T11427] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1912'.
[  228.020636][T11427] bridge_slave_1: left allmulticast mode
[  228.026314][T11427] bridge_slave_1: left promiscuous mode
[  228.031968][T11427] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.040499][T11427] bridge_slave_0: left allmulticast mode
[  228.046384][T11427] bridge_slave_0: left promiscuous mode
[  228.052094][T11427] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.076646][   T29] audit: type=1400 audit(1723640286.579:867): avc:  denied  { setopt } for  pid=11446 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  228.125150][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'.
[  228.151826][T11304] 8021q: adding VLAN 0 to HW filter on device team0
[  228.164135][T11451] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1922'.
[  228.175465][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.175502][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.201869][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.201967][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.239445][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'.
[  228.299149][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.430823][T11304] veth0_vlan: entered promiscuous mode
[  228.447295][T11304] veth1_vlan: entered promiscuous mode
[  228.464526][T11304] veth0_macvtap: entered promiscuous mode
[  228.471683][T11304] veth1_macvtap: entered promiscuous mode
[  228.482793][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.493319][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.503184][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.513716][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.523553][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.534101][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.543913][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.554368][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.564236][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.574703][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.590846][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.665197][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.675863][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.685720][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.696149][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.705966][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.716387][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.726189][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.736598][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.746426][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.757104][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.773679][T11479] loop0: detected capacity change from 0 to 512
[  228.774679][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.780467][T11479] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.794325][T11479] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  228.814719][T11304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.823417][T11304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.832193][T11304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.835797][T11479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002]
[  228.840895][T11304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.848763][T11479] System zones: 1-12
[  228.857997][T11479] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1926: corrupted in-inode xattr: e_value size too large
[  228.875836][T11479] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1926: couldn't read orphan inode 15 (err -117)
[  228.888566][T11479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.948302][T11490] loop2: detected capacity change from 0 to 128
[  228.956067][T11490] EXT4-fs: quotafile must be on filesystem root
[  229.157075][T11492] loop2: detected capacity change from 0 to 512
[  229.163638][T11492] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  229.173922][   T29] audit: type=1400 audit(1723640287.649:868): avc:  denied  { listen } for  pid=11489 comm="syz.2.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  229.260909][T10816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.412925][T11497] sctp: [Deprecated]: syz.0.1929 (pid 11497) Use of int in max_burst socket option.
[  229.412925][T11497] Use struct sctp_assoc_value instead
[  229.434739][T11497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1929'.
[  229.582473][   T29] audit: type=1326 audit(1723640288.079:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.1.1934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faadeca99f9 code=0x0
[  230.043863][   T29] audit: type=1400 audit(1723640288.539:870): avc:  denied  { connect } for  pid=11526 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  230.663337][   T29] audit: type=1400 audit(1723640289.159:871): avc:  denied  { connect } for  pid=11530 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  230.687551][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1940'.
[  230.705419][   T29] audit: type=1400 audit(1723640289.189:872): avc:  denied  { write } for  pid=11530 comm="syz.1.1940" path="socket:[48535]" dev="sockfs" ino=48535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  230.729004][   T29] audit: type=1326 audit(1723640289.209:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadeca99f9 code=0x7ffc0000
[  230.752536][   T29] audit: type=1326 audit(1723640289.209:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faadeca99f9 code=0x7ffc0000
[  230.776067][   T29] audit: type=1326 audit(1723640289.209:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadeca99f9 code=0x7ffc0000
[  230.799475][   T29] audit: type=1326 audit(1723640289.209:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faadeca99f9 code=0x7ffc0000
[  231.181901][T11545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1946'.
[  231.408669][T11550] vcan0: tx drop: invalid da for name 0x00000000000000ee
[  231.579012][T11568] loop0: detected capacity change from 0 to 512
[  231.585743][T11568] EXT4-fs: Ignoring removed mblk_io_submit option
[  231.590855][T11565] Invalid ELF header magic: != ELF
[  231.597878][T11568] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  231.617896][T11568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002]
[  231.647892][T11568] System zones: 1-12
[  231.664122][T11568] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1953: corrupted in-inode xattr: e_value size too large
[  231.718773][T11568] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1953: couldn't read orphan inode 15 (err -117)
[  231.758942][T11568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.809705][T11579] ref_ctr_offset mismatch. inode: 0x2d offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0
[  231.826333][T10816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.850681][T11582] loop0: detected capacity change from 0 to 128
[  231.863393][T11582] vfat: Unknown parameter 'ÿÿÿÿ'
[  231.883910][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'.
[  231.900558][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'.
[  231.928981][T11584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.956347][T11584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.971876][T11584] bond0 (unregistering): Released all slaves
[  232.398434][T11595] loop4: detected capacity change from 0 to 8192
[  232.416710][ T3273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.482031][T11595] ==================================================================
[  232.490148][T11595] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode
[  232.498926][T11595] 
[  232.501240][T11595] write to 0xffff8881064f8398 of 8 bytes by task 11598 on cpu 1:
[  232.508955][T11595]  mark_buffer_dirty_inode+0x18d/0x1c0
[  232.514449][T11595]  fat16_ent_put+0x4f/0x60
[  232.518865][T11595]  fat_alloc_clusters+0x4c9/0xa80
[  232.523895][T11595]  fat_get_block+0x25c/0x5e0
[  232.528495][T11595]  __block_write_begin_int+0x417/0xfa0
[  232.533969][T11595]  block_write_begin+0x7b/0x170
[  232.538827][T11595]  cont_write_begin+0x486/0x6b0
[  232.543683][T11595]  fat_write_begin+0x61/0xf0
[  232.548285][T11595]  generic_perform_write+0x1b4/0x580
[  232.553583][T11595]  __generic_file_write_iter+0xa1/0x120
[  232.559135][T11595]  generic_file_write_iter+0x7d/0x1d0
[  232.564528][T11595]  iter_file_splice_write+0x5e6/0x970
[  232.569905][T11595]  direct_splice_actor+0x16c/0x2c0
[  232.575013][T11595]  splice_direct_to_actor+0x305/0x670
[  232.580384][T11595]  do_splice_direct+0xd7/0x150
[  232.585142][T11595]  do_sendfile+0x3ab/0x950
[  232.589551][T11595]  __x64_sys_sendfile64+0xbd/0x150
[  232.594649][T11595]  x64_sys_call+0xed5/0x2d60
[  232.599242][T11595]  do_syscall_64+0xc9/0x1c0
[  232.603741][T11595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.609623][T11595] 
[  232.611930][T11595] read to 0xffff8881064f8398 of 8 bytes by task 11595 on cpu 0:
[  232.619543][T11595]  mark_buffer_dirty_inode+0x96/0x1c0
[  232.624907][T11595]  fat16_ent_put+0x4f/0x60
[  232.629312][T11595]  fat_ent_write+0x66/0xe0
[  232.633719][T11595]  fat_chain_add+0x15f/0x400
[  232.638395][T11595]  fat_get_block+0x46b/0x5e0
[  232.643338][T11595]  __block_write_begin_int+0x417/0xfa0
[  232.648790][T11595]  block_write_begin+0x7b/0x170
[  232.653808][T11595]  cont_write_begin+0x486/0x6b0
[  232.658654][T11595]  fat_write_begin+0x61/0xf0
[  232.663237][T11595]  generic_perform_write+0x1b4/0x580
[  232.668521][T11595]  __generic_file_write_iter+0xa1/0x120
[  232.674064][T11595]  generic_file_write_iter+0x7d/0x1d0
[  232.679434][T11595]  vfs_write+0x78f/0x900
[  232.683672][T11595]  ksys_write+0xeb/0x1b0
[  232.687911][T11595]  __x64_sys_write+0x42/0x50
[  232.692497][T11595]  x64_sys_call+0x27dd/0x2d60
[  232.697167][T11595]  do_syscall_64+0xc9/0x1c0
[  232.701663][T11595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.707546][T11595] 
[  232.709851][T11595] value changed: 0x0000000000000000 -> 0xffff88812786d708
[  232.716939][T11595] 
[  232.719246][T11595] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  232.725375][T11595] CPU: 0 UID: 0 PID: 11595 Comm: syz.4.1961 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[  232.736123][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  232.746164][T11595] ==================================================================
[  232.802188][ T3273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.823924][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.889070][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.944802][ T3273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.017749][ T3273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.175056][ T3273] bridge_slave_1: left allmulticast mode
[  233.180718][ T3273] bridge_slave_1: left promiscuous mode
[  233.186587][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.194411][ T3273] bridge_slave_0: left allmulticast mode
[  233.200043][ T3273] bridge_slave_0: left promiscuous mode
[  233.205857][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.326064][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.336134][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.346167][ T3273] bond0 (unregistering): Released all slaves
[  233.470602][ T3273] hsr_slave_0: left promiscuous mode
[  233.476370][ T3273] hsr_slave_1: left promiscuous mode
[  233.481953][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.489407][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.496856][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.504246][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.512960][ T3273] veth1_macvtap: left promiscuous mode
[  233.518452][ T3273] veth0_macvtap: left promiscuous mode
[  233.523975][ T3273] veth1_vlan: left promiscuous mode
[  233.529199][ T3273] veth0_vlan: left promiscuous mode
[  233.598555][ T3273] team0 (unregistering): Port device team_slave_1 removed
[  233.608553][ T3273] team0 (unregistering): Port device team_slave_0 removed
[  234.049807][ T3273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.096406][ T3273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.166531][ T3273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.226340][ T3273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.334692][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.345098][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.355866][ T3273] bond0 (unregistering): Released all slaves
[  234.468233][ T3273] hsr_slave_0: left promiscuous mode
[  234.473888][ T3273] hsr_slave_1: left promiscuous mode
[  234.479463][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.486862][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.494303][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.501820][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.511154][ T3273] veth1_macvtap: left promiscuous mode
[  234.516838][ T3273] veth0_macvtap: left promiscuous mode
[  234.522358][ T3273] veth1_vlan: left promiscuous mode
[  234.527577][ T3273] veth0_vlan: left promiscuous mode
[  234.599248][ T3273] team0 (unregistering): Port device team_slave_1 removed
[  234.608893][ T3273] team0 (unregistering): Port device team_slave_0 removed
[  235.207770][   T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.257597][   T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.316659][   T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.356653][   T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.434944][   T28] bridge_slave_1: left allmulticast mode
[  235.440577][   T28] bridge_slave_1: left promiscuous mode
[  235.446266][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.453922][   T28] bridge_slave_0: left allmulticast mode
[  235.459566][   T28] bridge_slave_0: left promiscuous mode
[  235.465309][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.706861][   T28] hsr_slave_0: left promiscuous mode
[  235.712475][   T28] hsr_slave_1: left promiscuous mode
[  235.718188][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.725644][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.733105][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.740504][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.749539][   T28] veth1_macvtap: left promiscuous mode
[  235.755011][   T28] veth0_macvtap: left promiscuous mode
[  235.760477][   T28] veth1_vlan: left promiscuous mode
[  235.765680][   T28] veth0_vlan: left promiscuous mode
[  235.834937][   T28] team0 (unregistering): Port device team_slave_1 removed
[  235.845140][   T28] team0 (unregistering): Port device team_slave_0 removed