last executing test programs:

13.520948716s ago: executing program 4 (id=858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="9feb01001800000000000000000c000000020000000000000000000006040000000800000000"], &(0x7f0000002840)=""/114, 0x26, 0x72, 0x1}, 0x1e) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="9feb01001800000000000000000c000000020000000000000000000006040000000800000000"], &(0x7f0000002840)=""/114, 0x26, 0x72, 0x1}, 0x1e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559)
mmap(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
keyctl$join(0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240), 0x8, 0x5fc, &(0x7f00000004c0)="$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") (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240), 0x8, 0x5fc, &(0x7f00000004c0)="$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")
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000200)) (async)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x35, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x10, 0x0, 0x0, @str='\x10\x00\x0f\x00\f\x00-){[#\\\xf6-\\\x00'}]}]}, 0x30}}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x35, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x10, 0x0, 0x0, @str='\x10\x00\x0f\x00\f\x00-){[#\\\xf6-\\\x00'}]}]}, 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x70}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x10, 0x1a001000000}, [@ldst={0x5}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x48)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0)
syz_open_pts(r4, 0x214100)
syz_open_procfs$pagemap(0x0, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

13.342618661s ago: executing program 4 (id=859):
r0 = socket$inet(0x2, 0x800, 0xfffffffe)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007e5, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x141)

8.494625467s ago: executing program 0 (id=884):
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca6012887636086000008"], 0xffdd) (fail_nth: 4)

8.131323787s ago: executing program 0 (id=886):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a0005000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9100000000000056070000000000000700000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9100000000000056070000000000000700000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")

7.903318575s ago: executing program 0 (id=888):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x5, 0x440, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SSlLxKq8ugDCBREeSVNWkoPXEAgcQAJCQ7lGJK0KnUb1ASJVhEEhMoRVeLEBXFE4i/gBBcEnJC4wh1VqlAuLZyM1t5NbMd249SJ2/r3k9ad2R135vPu2LMz2QD61mj6kkTsiog/I2K4mq0vMFr958by4vS/y4vTSZTLb/+TVMpdX16czovm79uZZwYiCp8ncaBJvfMXL52dKpVmL2T58YVzH4zPX7z0/JlzU6dnT8+enzxx4tjRiRePT77QlTjTuK7v/3ju4L7X373y5vTJK+/9+n2Sx98QR5eMtjv4ZLnc5ep6a3dNOhnoYUPoSLHaTWOw0v+HoxirJ284Xvusp40DNlW5XC4/0PrwUhm4iyXR6xYAvZH/0Kf3v/m2RUOP28K1l6s3QGncN7KtemQgClmZwYb7224ajYiTS/99k26xOfMQAAB1fkzHP881G/8VonZe6N5sDWUkIu6LiD0RcTwi9kbE/RGVsg9GxEMd1t+4SLJ2/FO4uqHA1ikd/72UrW3Vj//y0V+MFLPc7kr8g8mpM6XZI9lncjgGt6X5iTZ1/PTqH1+2OlY7/ku3tP58LJi14+rAtvr3zEwtTN1KzLWufRqxf6BZ/MnKSkASEfsiYv8G6zjzzHcHWx27efxtdGGdqfxtxFPV878UDfHnkvbrk+P3RGn2yHh+Vaz12++X32pV/y3F3wXp+d/R9PpfiX8kqV2vne/kf//66fT18l9ftLyn2ej1P5S8U7fvo6mFhQsTEUPJG9VG1+6fbCg3uVo+jf/woeb9f0+sfhIHIiK9iB+OiEci4tGs7Y9FxOMRcajNp/DLK0+8v/H4N1ca/0xH5381MRSNe5onimd//qGu0pFO4k/P/7FK6nC2Zz3ff+tpV6dXMwAAANypChGxK5LC2Eq6UBgbq/4N/97YUSjNzS88e2ruw/Mz1WcERmKwkM90DdfMh05kt/V5frIhfzSbN/6quL2SH5ueK830Onjocztb9P/U38Vetw7YdJ7Xgv6l/0P/0v+hf+n/0L+a9P/tvWgHsPWa/f5/0oN2AFuvof9b9oM+4v4f+tdG+r/vDLg7tO3LQ1vXDmBLzW+Pmz8kLyGxJhGF26IZEpuUWP2OMB8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4PAAD//2dI56U=")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x3, 0xcb}, 'port0\x00', 0x4, 0x20424, 0x0, 0x1ff, 0x1000, 0x8, 0x2, 0x0, 0x2, 0x4e})

7.686434523s ago: executing program 0 (id=889):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
fchown(0xffffffffffffffff, 0x0, 0xee01)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
r3 = syz_io_uring_setup(0x2705, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000001440))
r4 = io_uring_setup(0x407c, &(0x7f0000000900)={0x0, 0xd59a, 0x8})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1c, 0x2000f000, r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000ac0)=0x1fc245da, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000440)=0xfffffbff, 0x4)
recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=ANY=[@ANYRESDEC, @ANYRESDEC=r8, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=0x0], 0x30}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="000a00000098cbc8c4794a4dc529967bfbd7ab8dfa60ad1fdac255fb71b8c914c2bedf93c87ded1c7a0fa7afd51808b7471ab2d34aa2177bd0fa64d35fe07876ac15ee00"/78, @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25190000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)

7.267918857s ago: executing program 0 (id=890):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001000000000000141a00000200003d8cf149fea68bdd8008000100e000460108000200e0000001e90002800000000080000001240002801400f780080001000000000008000200ac1e00010c00028005000100000000000800074000000011"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000001010400000000141a0000020000002c0001801400018008000100e00004e00000010c000280050001000000000006000340000100000000000000"], 0x40}}, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x2da7, 0x0)
ioctl$BLKRESETZONE(r7, 0x40101283, 0x0) (async)
ioctl$BLKRESETZONE(r7, 0x40101283, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000280)={0x1, 0x1, 0x1d, 0x1b, 0x1f, &(0x7f0000000d40)})
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x80000000, 0x4)
close_range(r3, 0xffffffffffffffff, 0x2) (async)
close_range(r3, 0xffffffffffffffff, 0x2)
dup2(r2, r6) (async)
dup2(r2, r6)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0xffffffffffffffe1, 0x220000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b"], 0x34}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="bfe25e0ec61309e40ba22d799034df00000000000000003d000000"], 0x14}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="bfe25e0ec61309e40ba22d799034df00000000000000003d000000"], 0x14}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000))
prctl$PR_GET_SPECULATION_CTRL(0x23, 0xa, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200014, &(0x7f00000001c0)={[{@discard}, {@nobarrier}, {@bsdgroups}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x484, &(0x7f0000000940)="$eJzs3MtvVFUYAPBvptMXD4uIDxC0Ckbio6XlIYluNJq40GiiC4yrOi0EKdTQmgghii4wxoUhcW9cmvgXuNKNUVcmbnFvSIhhA7oac2bupZ3pTOnQ6QPn90sunHPvHc757rln5txzZgigaw2nPwoRWyLiSkQMRUSp8YTh2l83r18o/3P9QrkQlcpbfxfSy+LG9Qvl7J+obsnm2o5KJcv3Nyn30rsRE9PTU2ez/Ojc6Q9GZ8+df/bk6YkTUyemzowfPXro4J6+I+OHOxJniuvGro9ndu989Z3Lr5ePXX7v1+9Tfbdkx/M4Omm4dnWbeqLTha2zrQvShdI6VoS2pHbrzbYrMRQ9MXjr2FC88tm6Vg5YbaVmn8+ZixXgfywN1IFulH/Qp+fffFujcceGcO3F2oRHivtmttWOlKKYndPb8HzbSQMRceziv9+kLVZpHgIAYKEf0/jnmWbjv2I8sOC8e7I1lG0RcW9EbI+I+yJiR0TcH1E998GIeKjN8htXSBaPf4pX67KVnjZLWFoa/72QrW3Vj//y0V9s68lyW6vx9xaOn5yeOpBdk/3R25/yY3UvqffTy3981bjvy2yafXjB+C9tqfz6CItXGyfoJifmJlYeec21TyN2lZrFX7i1DliIiJ0RsesOyzj51He7Wx1rFn8+Fr6tDqwzVb6NeLLW/hejIf5coeX65NhzR8YPjw7E9NSB0fyuWOy33y+92ar8FcXfAan9NzW9/2vxp2fEwkDE7Lnzp6rrtbPtl3Hpz8/LhRbHdtw2/sX3f3lfRF/h7Wq6L9v30cTc3NmxtP+1lB2s2z8+/9o8n5+f4t+/dz7+iZjv/9trj2fVK/FwRKSbeE9EPBIRj2Zt91hEPB4Re5eI/5eX9r3f6ljr9l9iVr6DUvyTS7R/estLqfn2bz/Rc+rnH1qVX1lW+x+qpvZne5bz/rfcCq7k2gEAAMDdolj9DnyhONKfp4vFkZHad/h3xKbi9Mzs3NPHZz48M1n7rvy26C3mM11DC+ZDx7K54Tw/3pA/mM0bf90zWM2PlGemJ9c7eOhym/P+H/X9P/mrs0stwEbk91rQvdru/72rUw9g7WX9/3njfeg+xv/QvfR/6FJ9zXd/stb1ANZF+5//A6tSD2DtGf9D99L/oXvp/9CVWv42vriin/zfrYnSxqhG08TgxqhGnojihqhG5xJvfFHrEhulPnmitOz/zOIOE/1ND633OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBn/BcAAP//gIHexw==")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

6.424660106s ago: executing program 0 (id=894):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000680)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005209000000000000060000000a00000008000100", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
r1 = socket(0x10, 0x4, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xee01, r2)
r3 = getpid()
rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x4)
socket(0x10, 0x3, 0x0)
r4 = getpgid(0x0)
sched_setaffinity(r4, 0x0, 0x0)
prlimit64(r4, 0x8, &(0x7f0000000200)={0xffff, 0x8}, &(0x7f0000000280))
statx(r0, &(0x7f0000009740)='./bus\x00', 0x6000, 0x110, &(0x7f0000009780))
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pipe(0xffffffffffffffff)

6.366657751s ago: executing program 4 (id=860):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000290000000b000000c7"], 0x18}, 0x0)

6.068916875s ago: executing program 4 (id=897):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
fchown(0xffffffffffffffff, 0x0, 0xee01)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
r3 = syz_io_uring_setup(0x2705, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000001440))
r4 = io_uring_setup(0x407c, &(0x7f0000000900)={0x0, 0xd59a, 0x8})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1c, 0x2000f000, r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000ac0)=0x1fc245da, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000440)=0xfffffbff, 0x4)
recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=ANY=[@ANYRESDEC, @ANYRESDEC=r8, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=0x0], 0x30}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="000a00000098cbc8c4794a4dc529967bfbd7ab8dfa60ad1fdac255fb71b8c914c2bedf93c87ded1c7a0fa7afd51808b7471ab2d34aa2177bd0fa64d35fe07876ac15ee00"/78, @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25190000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)

5.88089478s ago: executing program 4 (id=899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0xfff0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x0)

2.914155233s ago: executing program 3 (id=926):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
pipe2(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x880)
write$cgroup_pressure(r3, &(0x7f0000000080)={'full'}, 0x2f)
read$eventfd(r2, &(0x7f0000000480), 0x8)
write$cgroup_pressure(r3, &(0x7f0000000280)={'some'}, 0x2f)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000073907800000000e000050000000000000c907801000000000000000000001c0000000000000000"], 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'veth1_to_batadv\x00', {}, 0x787d})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0))
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e6b923d033620b1fc51dcff96cf42632713be747c401fa1f3f48d4def4b19a0c3ae74eb436a6b1ef4d2c89bb2e2ba141f18fcb79d2396d132794ab50e23bad90edec7243be863926bf20e890e99ffc84565c488646dd9c1c28d4a064f72869b073df1635d73b20bdca1949b038ff9ad620e2345d1336962142a147d0436361e03d442f3f18286756994e20fc90d8277316b5ad5195a81d59e34a465e1c177c4c82521f55045bf69cf3e3fdfced947fa605640de3fd48828537017cd310702bb26978e9a87e"], 0x7c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
ioperm(0x0, 0x2, 0x0)

2.767489244s ago: executing program 4 (id=927):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900030073797a300000000014000480080002400000006408000140000000000900010073797a30"], 0x90}}, 0x0)

2.228116048s ago: executing program 2 (id=934):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0xb00, &(0x7f0000000780)={0x19, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

2.153589474s ago: executing program 2 (id=935):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf251e00000010002f800c0002000000000000000000080003", @ANYRES32, @ANYBLOB="872db37508b37f3750180832c9899f09307d97c398502b742041bff3f46524857549"], 0x2c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0xfdef)

1.992870767s ago: executing program 3 (id=937):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x8a, &(0x7f00000000c0)=0xa000000, 0x4)

1.96282472s ago: executing program 2 (id=939):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x55d, &(0x7f0000000b00)="$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")
socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
lchown(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000048540)={0x0, 0x0, "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", "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"})
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x20c, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
fallocate(r1, 0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x7, 0x1, 0x0, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000418110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_ext_show_extent\x00', r5}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000003c0)={0x3, 0x1, 0x4, 0x2, 0xffffffff})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = socket(0x2, 0x1, 0x40)
ioctl$PPPOEIOCDFWD(r7, 0x80044944, 0x1000000000000)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000140)=[{r6}, {r6}], 0x2, 0x0, 0x0, 0x0)
r8 = syz_open_pts(r6, 0x0)
r9 = dup3(r8, r6, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x3)

1.882377367s ago: executing program 3 (id=940):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x2, 0x9, 0x42}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r2}, &(0x7f0000000000), &(0x7f0000001340)='%pB    \x00'}, 0x20)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f0000000140)=""/192, 0x20000057)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r4, &(0x7f00000004c0), &(0x7f0000000500)=""/198}, 0x20)
ioctl$TCFLSH(r1, 0x541b, 0xf0ff1f00000000)
open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x2d)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r5 = socket(0x1, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x6, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6}, 0x20)
bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000001000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20)
recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad417e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
close(0xffffffffffffffff)
creat(&(0x7f00000002c0)='./file1\x00', 0x120)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf336, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1c, r8, 0xf03, 0x0, 0x0, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250b00000005002d00080000000800340000000080"], 0x24}}, 0x40080)

1.278445796s ago: executing program 1 (id=942):
r0 = socket$unix(0x1, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x0)
dup(r0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno='])

1.22623378s ago: executing program 1 (id=943):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/114, 0x72}], 0x4, &(0x7f0000000280)=""/103, 0x67}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/10, 0xa}], 0x2, &(0x7f0000000440)=""/104, 0x68}, 0x2}, {{&(0x7f00000004c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000580)=""/61, 0x3d}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/200, 0xc8}], 0x4, &(0x7f0000000740)=""/63, 0x3f}, 0x4}], 0x3, 0x10001, &(0x7f0000000840)={0x77359400})
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000880)={0x2004})
r2 = fcntl$dupfd(r1, 0x0, r1)
bind$rds(r2, &(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000900)=0x6dc557c3, 0x4)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000980), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a00)={'sit0\x00', <r5=>0x0, 0x40, 0x7, 0x9, 0x6a, {{0x20, 0x4, 0x0, 0xd, 0x80, 0x64, 0x0, 0x5, 0x2f, 0x0, @remote, @empty, {[@cipso={0x86, 0x32, 0x1, [{0x7, 0x7, "f6648f9125"}, {0x0, 0xf, "a31a89124327ec78beadb60b56"}, {0x7, 0x5, '4\rb'}, {0x1, 0x11, "2878bd8e17adcdb8c1a064a8fb8fac"}]}, @ssrr={0x89, 0xb, 0x55, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}, @ra={0x94, 0x4}, @rr={0x7, 0x23, 0x52, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @generic={0x88, 0x4, "9ea9"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', <r6=>0x0, 0x1, 0x11ba485c44fb62fe, 0x10000, 0x5, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x64, 0x0, 0x7, 0x29, 0x0, @local, @loopback, {[@lsrr={0x83, 0xf, 0xf7, [@broadcast, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000bc0)={@rand_addr, <r7=>0x0}, &(0x7f0000000c00)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0x1, 0x1, 0x2, 0x9, @empty, @mcast1, 0x700, 0x1, 0x1, 0xfffffeff}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6_vti0\x00', <r10=>0x0, 0x4, 0x4, 0x6, 0x11, 0x10, @remote, @private2, 0x7800, 0x40, 0xad37, 0x5}})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000e00)={<r11=>0x0, @initdev, @broadcast}, &(0x7f0000000e40)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000f00)={'tunl0\x00', &(0x7f0000000e80)={'syztnl2\x00', <r12=>0x0, 0x20, 0x8, 0x7, 0xf988, {{0xe, 0x4, 0x3, 0x8, 0x38, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @multicast2, {[@end, @timestamp_prespec={0x44, 0x1c, 0x7c, 0x3, 0x3, [{@remote, 0x5}, {@rand_addr=0x64010102, 0x3ff}, {@private=0xa010100, 0x5}]}, @generic={0x88, 0x4, "6cac"}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001400)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000f40)={0x478, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r6}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x9, 0xaa, 0xe554}, {0x1, 0x1, 0x4, 0x7}]}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x800, 0x33, 0x30, 0xc}, {0x81, 0xa, 0x9, 0x1}, {0xfff, 0x5, 0xfe, 0x4080000}, {0x800, 0x1, 0x80, 0x10}, {0xfff, 0x3, 0x9, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40844}, 0xc000)
ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000001440)={0x3ff})
getsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000001480), &(0x7f00000014c0)=0x4)
ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000001500)=0x3)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000016c0)={r13, &(0x7f0000001580)="66485cd35ab2315276b0b916e6ca48e49cdf05122bcdf0b9f8abc96d596de4934fd3d8d781738f8fdd5499497392cd1267a76c6e122236b99dff6e26282ca9f23839d52a42897914c2a178886caf79223b63a222fcc7ce5a8cfad9242909232fe8f3cbe29537535e31d59360d66a0896c4bd152d3c98a1b7cff3c31f6735192b626777d000b4c0ab77abccc2d19957aadfd1cd3096272f3bae443c36a666d273a591465bcf9ecd5c99a19a982e0b", &(0x7f0000001640)=""/68}, 0x20)
r14 = dup(r1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000001700)={&(0x7f0000002000), 0x0, 0x1}, 0x1)
r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r15, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x20000004)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000001900)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x70, r16, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1)

1.119553589s ago: executing program 1 (id=944):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
read(r0, &(0x7f0000000040)=""/49, 0x31)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc891)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x541b, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0xfffffffc}})
getsockopt$sock_buf(r0, 0x1, 0x24, 0x0, &(0x7f0000000180))
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount(0x0, 0x0, 0x0, 0x204000, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.085384131s ago: executing program 2 (id=945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'some'}, 0x2f)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full'}, 0x2f)
read$eventfd(0xffffffffffffffff, &(0x7f0000000480), 0x8)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'some'}, 0x2f)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000073907800000000e000050000000000000c907801000000000000000000001c0000000000000000"], 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'veth1_to_batadv\x00', {}, 0x787d})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0))
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e6b923d033620b1fc51dcff96cf42632713be747c401fa1f3f48d4def4b19a0c3ae74eb436a6b1ef4d2c89bb2e2ba141f18fcb79d2396d132794ab50e23bad90edec7243be863926bf20e890e99ffc84565c488646dd9c1c28d4a064f72869b073df1635d73b20bdca1949b038ff9ad620e2345d1336962142a147d0436361e03d442f3f18286756994e20fc90d8277316b5ad5195a81d59e34a465e1c177c4c82521f55045bf69cf3e3fdfced947fa605640de3fd48828537017cd310702bb26978e9a87e"], 0x7c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
ioperm(0x0, 0x2, 0x0)

978.656331ms ago: executing program 3 (id=946):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/46, 0x2e}], 0x1) (fail_nth: 3)

634.495178ms ago: executing program 3 (id=947):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf251e00000010002f800c0002000000000000000000080003", @ANYRES32, @ANYBLOB="872db37508b37f3750180832c9899f09307d97c398502b742041bff3f46524857549"], 0x2c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0xfdef)

199.607734ms ago: executing program 1 (id=948):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001487190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)

172.239116ms ago: executing program 1 (id=949):
socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$eJzs3MtvG8UfAPDv2kn7Sx+/hKo8mhYaKIiIR9KkpfTABQQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJe6IIxJ/ASe4IOCExBUkjqhShXJp4WS09m5iO44b5+UUfz7SJjO7Y898vTv2zE6cALrWUPojiTgQEb9FRH81W19gqPrrztLC5N9LC5NJlMtv/pVUyt1eWpjMi+aP259neiIKnyZxtEm9c1evXZwolaavZPnR+Uvvjc5dvfbszKWJC9MXpi+Pnz17+tTY82fGn9uSONO4bg9+OHvsyKtv33h98tyNd376Jsnjb4ijhT/aqHKo1cEnyuU2nmr3O1iTTno62BDaUqx20+it9P/+KMbKyeuPVz7paOOAbVUul8sPrH14sQz8hyXR6RYAnZF/0Kfz33zboaHHrnDrxeoEKI37TrZVj/REISvT2zC/3UpDEXFu8Z8v0y3Wfx8CAGDDvkvHP880G/8Vova+0P+zNZSBiLgvIg5FxJmIOBwR90dUyj4YEQ+1WX/jIsnq8U/hZl32jTYruIt0/PdCtrZVP/7LR38xUMxyByvx9ybnZ0rTJ7PXZDh696b5sRZ1fP/yr5+vdax2/Jduaf35WDBrx82evfWPmZqYn9hMzLVufRwx2NMs/mR5JSCJiCMRMbjeJ204qTNPfX2sVdHW8bewBetM5a8inqye/8VoiD+XtF6fHP1flKZPjuZXxWo//3J9zat2U/FvgfT872t6/S/HP5DUrtfOtV/H9d8/W3NOs9Hrf0/yVt2+Dybm56+MRexJXqs2unb/eEO58ZXyafzDJ5r3/0Ox8kocjYj0In44Ih6JiONZ2x+NiMci4kSL+H986fF3Nx7/9krjn2rr/K8k9kTjnuaJ4sUfvq2rdKCd+NPzf7qSGs72rOf9bz3t2tjVDAAAAPeeQkQciKQwspwuFEZGqn/Dfzj2FUqzc/NPn599//JU9TsCA9FbyO909dfcDx3LpvV5frwhfyq7b/xFsa+SH5mcLU11OnjocvvX6P+pP4udbh2w7XxfC7qX/g/dS/+H7qX/Q/dq0v/7OtEOYOc1+/z/aF2PTBr/XRhwj2no/02W/RZ3rC3AzjL/h+6l/0P30v+hK831xd2/JC8hsSoRhV3RjN2WOL47mrH5RKffmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbGvwEAAP//dtjoWw==")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

135.385189ms ago: executing program 3 (id=950):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB="7362736563746f723d3078303830303030303030303030303030322c696f636861727365743d69736f383835392d35227362736563746f723d3078303030303030303030303030303030322c73657373696f6e3d3078303030303030303030303030303034652c6d6f64653d3078303030303030303030303030303030312c6e6f636b2c636865636b3d7374726963742c6d6f64653d3078303030303030303030303030303130312c6e6f726f636b2c2c6357f88c18a00e590311a8cb4f72e5786143c5098495f43ad671040000"], 0x0, 0x9a9, &(0x7f0000001900)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socket$key(0xf, 0x3, 0x2)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)=0x8001, 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r9=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012918000e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0)

99.037802ms ago: executing program 2 (id=951):
r0 = socket$unix(0x1, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x0)
dup(r0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno='])

23.592568ms ago: executing program 1 (id=952):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xf}, {0x8, 0x4}, {0x8, 0x1}]}}]}]}, 0x44}}, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='nolazytime\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f0000000040)='uid_map\x00')

0s ago: executing program 2 (id=953):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000003c00048038000180080001006c6f67002c000280060001400000000008000376000000000d000240672b2d2c2f282c270000000006000440300100000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000002d40)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002c00)=[@zcopy_cookie={0x18}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x4e}}], 0x60}, 0x0)
r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9)
sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fbdbdf251100000008001500c0000000080001"], 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

_failslab+0x9/0x20
[   88.977227][ T6443]  kmem_cache_alloc_noprof+0x4c/0x290
[   88.982660][ T6443]  security_inode_alloc+0x32/0xd0
[   88.987724][ T6443]  inode_init_always+0x428/0x470
[   88.992691][ T6443]  ? __pfx_ext4_alloc_inode+0x10/0x10
[   88.998182][ T6443]  alloc_inode+0x7d/0x160
[   89.003269][ T6443]  new_inode+0x1d/0x130
[   89.007463][ T6443]  __ext4_new_inode+0x13f/0x2270
[   89.012414][ T6443]  ? __crc32c_le_base+0x21a/0x520
[   89.017471][ T6443]  ext4_xattr_inode_lookup_create+0x575/0xf10
[   89.023562][ T6443]  ext4_xattr_block_set+0x127/0x1ca0
[   89.028903][ T6443]  ? percpu_counter_add_batch+0x115/0x140
[   89.034640][ T6443]  ? kfree+0xd5/0x290
[   89.038660][ T6443]  ? __ext4_journal_get_write_access+0x1d1/0x3f0
[   89.045117][ T6443]  ext4_xattr_set_handle+0x8ac/0xbf0
[   89.050493][ T6443]  ? sidtab_sid2str_get+0x3e/0x140
[   89.055701][ T6443]  ext4_initxattrs+0x60/0xb0
[   89.060791][ T6443]  security_inode_init_security+0x19d/0x290
[   89.066771][ T6443]  ? __pfx_ext4_initxattrs+0x10/0x10
[   89.072091][ T6443]  ext4_init_security+0x34/0x40
[   89.077020][ T6443]  __ext4_new_inode+0x2009/0x2270
[   89.082127][ T6443]  ext4_mkdir+0x27f/0x740
[   89.086491][ T6443]  vfs_mkdir+0x1f4/0x320
[   89.090780][ T6443]  do_mkdirat+0x12f/0x2a0
[   89.095227][ T6443]  __x64_sys_mkdirat+0x50/0x60
[   89.100016][ T6443]  x64_sys_call+0x2ce5/0x2d70
[   89.104709][ T6443]  do_syscall_64+0xc9/0x1c0
[   89.109242][ T6443]  ? clear_bhb_loop+0x55/0xb0
[   89.113937][ T6443]  ? clear_bhb_loop+0x55/0xb0
[   89.118634][ T6443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.124541][ T6443] RIP: 0033:0x7f8f8bdebbd9
[   89.128964][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.148658][ T6443] RSP: 002b:00007f8f8b06d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   89.157156][ T6443] RAX: ffffffffffffffda RBX: 00007f8f8bf79f60 RCX: 00007f8f8bdebbd9
[   89.165150][ T6443] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c
[   89.173126][ T6443] RBP: 00007f8f8b06d0a0 R08: 0000000000000000 R09: 0000000000000000
[   89.181229][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   89.189253][ T6443] R13: 000000000000000b R14: 00007f8f8bf79f60 R15: 00007ffc3e23a458
[   89.197370][ T6443]  </TASK>
[   89.206930][ T6427] sit0: entered promiscuous mode
[   89.236750][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.342646][ T6469] loop4: detected capacity change from 0 to 2048
[   89.375604][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.382953][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.400081][ T6354] bridge_slave_0: entered allmulticast mode
[   89.406833][ T6354] bridge_slave_0: entered promiscuous mode
[   89.409555][ T6469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.438454][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.446167][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.456024][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.476884][ T6354] bridge_slave_1: entered allmulticast mode
[   89.486083][ T6354] bridge_slave_1: entered promiscuous mode
[   89.525657][ T6495] loop4: detected capacity change from 0 to 512
[   89.544305][ T6495] EXT4-fs: Ignoring removed nobh option
[   89.551214][ T6466] __nla_validate_parse: 3 callbacks suppressed
[   89.551289][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'.
[   89.571679][ T6495] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   89.586931][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #13: comm syz.4.672: casefold flag without casefold feature
[   89.602240][ T6483] loop3: detected capacity change from 0 to 128
[   89.610744][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.624559][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.672: couldn't read orphan inode 13 (err -117)
[   89.640880][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.657144][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'.
[   89.683186][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.725164][ T6500] netlink: 'syz.0.673': attribute type 1 has an invalid length.
[   89.729656][ T6354] team0: Port device team_slave_0 added
[   89.739888][ T6354] team0: Port device team_slave_1 added
[   89.800424][ T6500] 9pnet: Could not find request transport: fV
[   89.809576][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.816571][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.842865][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.872471][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.893610][ T6516] FAULT_INJECTION: forcing a failure.
[   89.893610][ T6516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.906777][ T6516] CPU: 1 PID: 6516 Comm: syz.1.676 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[   89.916815][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   89.926975][ T6516] Call Trace:
[   89.930272][ T6516]  <TASK>
[   89.933221][ T6516]  dump_stack_lvl+0xf2/0x150
[   89.938011][ T6516]  dump_stack+0x15/0x20
[   89.942258][ T6516]  should_fail_ex+0x229/0x230
[   89.947102][ T6516]  should_fail+0xb/0x10
[   89.951305][ T6516]  should_fail_usercopy+0x1a/0x20
[   89.956362][ T6516]  _copy_from_user+0x1e/0xd0
[   89.961009][ T6516]  restore_altstack+0x48/0xd0
[   89.965714][ T6516]  __do_sys_rt_sigreturn+0xd3/0x150
[   89.971319][ T6516]  x64_sys_call+0x28f3/0x2d70
[   89.976033][ T6516]  do_syscall_64+0xc9/0x1c0
[   89.979916][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.980610][ T6516]  ? clear_bhb_loop+0x55/0xb0
[   89.987549][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.992212][ T6516]  ? clear_bhb_loop+0x55/0xb0
[   89.992316][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.992353][ T6516] RIP: 0033:0x7f6a57175bd9
[   89.992371][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.018273][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.022883][ T6516] RSP: 002b:00007f6a563f7048 EFLAGS: 00000246
[   90.022902][ T6516] RAX: fffffffffffffff2 RBX: 00007f6a57303f60 RCX: 00007f6a57175bd9
[   90.022917][ T6516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[   90.022959][ T6516] RBP: 00007f6a563f70a0 R08: 0000000020003700 R09: 0000000000000000
[   90.022974][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   90.023015][ T6516] R13: 000000000000000b R14: 00007f6a57303f60 R15: 00007ffda9d56b08
[   90.023036][ T6516]  </TASK>
[   90.112848][ T6518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'.
[   90.175494][ T6354] hsr_slave_0: entered promiscuous mode
[   90.188043][ T6354] hsr_slave_1: entered promiscuous mode
[   90.198938][ T6354] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.209020][ T6354] Cannot create hsr debugfs directory
[   90.466437][ T6565] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   90.483255][ T6565] macsec1: entered promiscuous mode
[   90.488651][ T6565] macsec1: entered allmulticast mode
[   90.494071][ T6565] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   90.502351][ T6569] xt_TCPMSS: Only works on TCP SYN packets
[   90.514403][ T6565] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[   90.522236][ T6565] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[   90.535973][ T6572] loop1: detected capacity change from 0 to 1024
[   90.549672][ T6572] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   90.565190][ T6572] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   90.573799][ T6572] EXT4-fs (loop1): orphan cleanup on readonly fs
[   90.581351][ T6572] __quota_error: 17 callbacks suppressed
[   90.581365][ T6572] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=2
[   90.597018][ T6572] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   90.611708][ T6572] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   90.618820][ T6572] EXT4-fs (loop1): 1 truncate cleaned up
[   90.626852][ T6572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   90.640705][ T6571] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 16: comm syz.1.688: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   90.642554][ T6569] vlan2: entered allmulticast mode
[   90.750490][ T5752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.787347][ T6354] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.804370][   T29] audit: type=1400 audit(1720692888.661:527): avc:  denied  { connect } for  pid=6594 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   90.821194][ T6597] loop3: detected capacity change from 0 to 1024
[   90.832406][ T6354] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.863635][   T29] audit: type=1400 audit(1720692888.661:528): avc:  denied  { write } for  pid=6594 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   90.863872][ T6354] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.905777][ T4667] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   90.923264][   T29] audit: type=1400 audit(1720692888.761:529): avc:  denied  { bind } for  pid=6594 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   90.951732][ T6354] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.973330][ T6605] netlink: 'syz.0.694': attribute type 8 has an invalid length.
[   91.014912][ T6622] loop1: detected capacity change from 0 to 128
[   91.038771][ T6612] loop3: detected capacity change from 0 to 1024
[   91.093470][ T6612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.104263][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.126858][ T6636] xt_TCPMSS: Only works on TCP SYN packets
[   91.153474][ T6354] 8021q: adding VLAN 0 to HW filter on device team0
[   91.179541][   T29] audit: type=1400 audit(1720692889.031:530): avc:  denied  { create } for  pid=6630 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=atmpvc_socket permissive=1
[   91.197482][ T6354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.199923][   T29] audit: type=1400 audit(1720692889.031:531): avc:  denied  { create } for  pid=6630 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[   91.210182][ T6354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.244844][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.251179][   T29] audit: type=1400 audit(1720692889.091:532): avc:  denied  { setopt } for  pid=6630 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[   91.251937][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.271738][   T29] audit: type=1400 audit(1720692889.091:533): avc:  denied  { create } for  pid=6630 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[   91.303206][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.310319][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.376215][ T6636] vlan2: entered allmulticast mode
[   91.404801][ T6670] loop4: detected capacity change from 0 to 512
[   91.424938][ T6670] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   91.442505][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.536845][   T29] audit: type=1400 audit(1720692889.391:534): avc:  denied  { read } for  pid=6685 comm="syz.4.708" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   91.541623][ T6686] netlink: 432 bytes leftover after parsing attributes in process `syz.4.708'.
[   91.560838][   T29] audit: type=1400 audit(1720692889.391:535): avc:  denied  { open } for  pid=6685 comm="syz.4.708" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   91.623078][ T6354] veth0_vlan: entered promiscuous mode
[   91.652460][ T6354] veth1_vlan: entered promiscuous mode
[   91.674642][ T6354] veth0_macvtap: entered promiscuous mode
[   91.682995][ T6354] veth1_macvtap: entered promiscuous mode
[   91.695106][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.705635][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.715558][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.726164][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.736098][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.746968][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.756908][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.767407][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.777366][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.787852][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.797754][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.808217][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.820558][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.831740][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.842397][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.852340][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.863001][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.873092][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.883591][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.893434][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.903941][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.913773][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.924287][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.934321][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.944749][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.956066][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.968357][ T6720] loop4: detected capacity change from 0 to 1024
[   91.979600][ T6354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.981999][ T6720] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[   91.988431][ T6354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.006797][ T6354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.015584][ T6354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.018224][ T6720] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   92.039644][ T6720] EXT4-fs (loop4): invalid journal inode
[   92.047793][ T6720] EXT4-fs (loop4): can't get journal size
[   92.048255][ T5355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.069627][ T6720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.094530][ T6720] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.712: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   92.118246][ T6730] veth0_vlan: entered allmulticast mode
[   92.158781][ T6734] bridge3: entered promiscuous mode
[   92.164144][ T6734] bridge3: entered allmulticast mode
[   92.185068][ T6738] FAULT_INJECTION: forcing a failure.
[   92.185068][ T6738] name failslab, interval 1, probability 0, space 0, times 0
[   92.197917][ T6738] CPU: 1 PID: 6738 Comm: syz.3.715 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[   92.207907][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   92.218084][ T6738] Call Trace:
[   92.221379][ T6738]  <TASK>
[   92.224326][ T6738]  dump_stack_lvl+0xf2/0x150
[   92.228958][ T6738]  dump_stack+0x15/0x20
[   92.233210][ T6738]  should_fail_ex+0x229/0x230
[   92.238045][ T6738]  ? vm_area_dup+0x2c/0x130
[   92.242632][ T6738]  __should_failslab+0x92/0xa0
[   92.247427][ T6738]  should_failslab+0x9/0x20
[   92.251974][ T6738]  kmem_cache_alloc_noprof+0x4c/0x290
[   92.257425][ T6738]  vm_area_dup+0x2c/0x130
[   92.261796][ T6738]  __split_vma+0xf7/0x690
[   92.266142][ T6738]  do_vmi_align_munmap+0x1a5/0xa60
[   92.271375][ T6738]  do_vmi_munmap+0x1fb/0x250
[   92.275984][ T6738]  do_munmap+0x7a/0xb0
[   92.280192][ T6738]  __se_sys_mremap+0xabc/0xf20
[   92.284970][ T6738]  ? fput+0x13b/0x180
[   92.288955][ T6738]  __x64_sys_mremap+0x67/0x80
[   92.293792][ T6738]  x64_sys_call+0x1029/0x2d70
[   92.298515][ T6738]  do_syscall_64+0xc9/0x1c0
[   92.303038][ T6738]  ? clear_bhb_loop+0x55/0xb0
[   92.307851][ T6738]  ? clear_bhb_loop+0x55/0xb0
[   92.312572][ T6738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.318487][ T6738] RIP: 0033:0x7f7c09b13bd9
[   92.322921][ T6738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.342739][ T6738] RSP: 002b:00007f7c08d95048 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   92.351148][ T6738] RAX: ffffffffffffffda RBX: 00007f7c09ca1f60 RCX: 00007f7c09b13bd9
[   92.359172][ T6738] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000000020ffb000
[   92.367150][ T6738] RBP: 00007f7c08d950a0 R08: 0000000020ff3000 R09: 0000000000000000
[   92.375122][ T6738] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[   92.383085][ T6738] R13: 000000000000000b R14: 00007f7c09ca1f60 R15: 00007ffda802aa78
[   92.391056][ T6738]  </TASK>
[   92.440806][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'.
[   92.450265][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'.
[   92.467080][ T6748] veth0_vlan: left promiscuous mode
[   92.473046][ T6748] veth0_vlan: entered promiscuous mode
[   92.490496][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'.
[   92.499462][ T6755] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   92.580766][ T6766] FAULT_INJECTION: forcing a failure.
[   92.580766][ T6766] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   92.594163][ T6766] CPU: 0 PID: 6766 Comm: syz.3.725 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[   92.604233][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   92.614383][ T6766] Call Trace:
[   92.617729][ T6766]  <TASK>
[   92.620662][ T6766]  dump_stack_lvl+0xf2/0x150
[   92.625273][ T6766]  dump_stack+0x15/0x20
[   92.629473][ T6766]  should_fail_ex+0x229/0x230
[   92.634159][ T6766]  __should_fail_alloc_page+0xfd/0x110
[   92.639759][ T6766]  __alloc_pages_noprof+0x109/0x360
[   92.644992][ T6766]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   92.650385][ T6766]  vma_alloc_folio_noprof+0x176/0x2d0
[   92.655898][ T6766]  do_wp_page+0x62b/0x22b0
[   92.660406][ T6766]  ? __rcu_read_lock+0x36/0x50
[   92.665190][ T6766]  ? __rcu_read_lock+0x36/0x50
[   92.670099][ T6766]  handle_mm_fault+0xc4c/0x2ac0
[   92.674977][ T6766]  exc_page_fault+0x3b9/0x650
[   92.679739][ T6766]  asm_exc_page_fault+0x26/0x30
[   92.684672][ T6766] RIP: 0033:0x7f7c099d9453
[   92.689166][ T6766] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   92.708792][ T6766] RSP: 002b:00007f7c08d944b0 EFLAGS: 00010202
[   92.714861][ T6766] RAX: 0000000000000400 RBX: 00007f7c08d94550 RCX: 00007f7c00975000
[   92.722833][ T6766] RDX: 00007f7c08d946f0 RSI: 0000000000000011 RDI: 00007f7c08d945f0
[   92.730808][ T6766] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a0
[   92.738784][ T6766] R10: 00000000000001c4 R11: 00007f7c08d94550 R12: 0000000000000001
[   92.746760][ T6766] R13: 00007f7c09b93f80 R14: 0000000000000020 R15: 00007f7c08d945f0
[   92.754776][ T6766]  </TASK>
[   92.757940][ T6766] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   92.772108][ T6766] loop3: detected capacity change from 0 to 512
[   92.778789][ T6766] ext4: Unknown parameter 'appraise_type'
[   92.807426][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.871260][ T6775] loop4: detected capacity change from 0 to 512
[   92.891429][ T6775] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.930096][ T6775] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.727: casefold flag without casefold feature
[   92.943518][ T6775] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.727: couldn't read orphan inode 15 (err -117)
[   92.968172][ T6775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.070606][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.101357][ T6797] loop3: detected capacity change from 0 to 128
[   93.108090][ T6797] FAT-fs (loop3): Unrecognized mount option "/dev/snd/timer" or missing value
[   93.171683][ T6801] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   93.172632][ T4667] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   93.210250][ T6800] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[   93.221787][ T6803] xt_l2tp: v2 sid > 0xffff: 262144
[   93.237694][ T6805] xt_l2tp: v2 sid > 0xffff: 262144
[   93.363566][ T6809] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   93.381616][ T6810] FAULT_INJECTION: forcing a failure.
[   93.381616][ T6810] name failslab, interval 1, probability 0, space 0, times 0
[   93.394283][ T6810] CPU: 1 PID: 6810 Comm: syz.2.740 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[   93.404288][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   93.414362][ T6810] Call Trace:
[   93.417800][ T6810]  <TASK>
[   93.420736][ T6810]  dump_stack_lvl+0xf2/0x150
[   93.425440][ T6810]  dump_stack+0x15/0x20
[   93.429622][ T6810]  should_fail_ex+0x229/0x230
[   93.434319][ T6810]  ? rtnl_newlink+0x5d/0x1690
[   93.439087][ T6810]  __should_failslab+0x92/0xa0
[   93.443946][ T6810]  should_failslab+0x9/0x20
[   93.448484][ T6810]  kmalloc_trace_noprof+0x4b/0x2a0
[   93.453637][ T6810]  rtnl_newlink+0x5d/0x1690
[   93.458158][ T6810]  ? __rcu_read_unlock+0x4e/0x70
[   93.463246][ T6810]  ? __perf_event_task_sched_in+0x7c4/0x7f0
[   93.469184][ T6810]  ? __perf_event_task_sched_out+0x111/0xfe0
[   93.475231][ T6810]  ? _raw_spin_unlock+0x26/0x50
[   93.480094][ T6810]  ? finish_task_switch+0xb5/0x2b0
[   93.485220][ T6810]  ? __schedule+0x5fa/0x950
[   93.489849][ T6810]  ? __list_del_entry_valid_or_report+0x5f/0xf0
[   93.496168][ T6810]  ? _raw_spin_unlock+0x26/0x50
[   93.501035][ T6810]  ? __mutex_lock+0x221/0x8e0
[   93.505807][ T6810]  ? __pfx_rtnl_newlink+0x10/0x10
[   93.510841][ T6810]  rtnetlink_rcv_msg+0x85e/0x910
[   93.515836][ T6810]  ? __rcu_read_unlock+0x34/0x70
[   93.520819][ T6810]  ? bpf_trace_run3+0x12b/0x1d0
[   93.525677][ T6810]  ? __memcg_slab_free_hook+0xc9/0x1e0
[   93.531229][ T6810]  ? kmem_cache_free+0xd8/0x280
[   93.536151][ T6810]  ? nlmon_xmit+0x51/0x60
[   93.540494][ T6810]  ? __kfree_skb+0x102/0x150
[   93.545186][ T6810]  ? consume_skb+0x57/0x180
[   93.549700][ T6810]  ? nlmon_xmit+0x51/0x60
[   93.554033][ T6810]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   93.559337][ T6810]  ? __dev_queue_xmit+0xb21/0x1e50
[   93.564500][ T6810]  ? ref_tracker_free+0x3a5/0x410
[   93.569529][ T6810]  netlink_rcv_skb+0x12c/0x230
[   93.574333][ T6810]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.579856][ T6810]  rtnetlink_rcv+0x1c/0x30
[   93.584313][ T6810]  netlink_unicast+0x58d/0x660
[   93.589175][ T6810]  netlink_sendmsg+0x5ca/0x6e0
[   93.594013][ T6810]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.599372][ T6810]  __sock_sendmsg+0x140/0x180
[   93.604057][ T6810]  ____sys_sendmsg+0x312/0x410
[   93.608837][ T6810]  __sys_sendmsg+0x1e9/0x280
[   93.613485][ T6810]  __x64_sys_sendmsg+0x46/0x50
[   93.618263][ T6810]  x64_sys_call+0xb25/0x2d70
[   93.622869][ T6810]  do_syscall_64+0xc9/0x1c0
[   93.627426][ T6810]  ? clear_bhb_loop+0x55/0xb0
[   93.632121][ T6810]  ? clear_bhb_loop+0x55/0xb0
[   93.636837][ T6810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.642810][ T6810] RIP: 0033:0x7f0846d06bd9
[   93.647234][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.666941][ T6810] RSP: 002b:00007f0845f67048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.675466][ T6810] RAX: ffffffffffffffda RBX: 00007f0846e95038 RCX: 00007f0846d06bd9
[   93.683573][ T6810] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005
[   93.691570][ T6810] RBP: 00007f0845f670a0 R08: 0000000000000000 R09: 0000000000000000
[   93.699605][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.707648][ T6810] R13: 000000000000006e R14: 00007f0846e95038 R15: 00007ffe3511a218
[   93.715744][ T6810]  </TASK>
[   93.887960][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'.
[   94.068514][ T6828] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   94.099782][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.746'.
[   94.203717][ T6837] loop1: detected capacity change from 0 to 512
[   94.239230][ T6837] EXT4-fs: Ignoring removed orlov option
[   94.270959][ T6837] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.748: inode #13: comm syz.1.748: iget: illegal inode #
[   94.303227][ T6837] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.748: couldn't read orphan inode 13 (err -117)
[   94.305935][ T6848] loop3: detected capacity change from 0 to 128
[   94.337696][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.354968][ T6837] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.748: Logical block already allocated
[   94.382228][ T6848] loop3: detected capacity change from 0 to 2048
[   94.413353][ T5752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.430060][ T6848]  loop3: p1 < > p4
[   94.435047][ T6848] loop3: p4 size 8388608 extends beyond EOD, truncated
[   94.494937][ T6853] smc: net device ip6_vti0 applied user defined pnetid SYZ0
[   94.509540][ T6853] team0: entered promiscuous mode
[   94.514659][ T6853] team_slave_0: entered promiscuous mode
[   94.520556][ T6853] team_slave_1: entered promiscuous mode
[   94.531027][ T6853] dummy0: entered promiscuous mode
[   94.622856][ T6862] netlink: 96 bytes leftover after parsing attributes in process `syz.1.758'.
[   94.910340][ T6873] loop1: detected capacity change from 0 to 4096
[   95.020319][ T6880] loop2: detected capacity change from 0 to 1024
[   95.052390][ T6880] netlink: 'syz.2.763': attribute type 10 has an invalid length.
[   95.071879][ T6880] xt_NFQUEUE: number of total queues is 0
[   95.080539][ T6880] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2786: inode #12: comm syz.2.763: corrupted in-inode xattr: bad magic number in in-inode xattr
[   95.097740][ T6880] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   95.172734][ T6889] team0: entered promiscuous mode
[   95.177807][ T6889] team_slave_0: entered promiscuous mode
[   95.183845][ T6889] team_slave_1: entered promiscuous mode
[   95.192184][ T6889] dummy0: entered promiscuous mode
[   95.197714][ T6889] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   95.205613][ T6889] Cannot create hsr debugfs directory
[   95.335904][ T6907] loop4: detected capacity change from 0 to 4096
[   95.453621][ T6915] 9pnet_fd: Insufficient options for proto=fd
[   95.482769][ T6917] vlan3: entered promiscuous mode
[   95.487950][ T6917] bridge0: entered promiscuous mode
[   95.494959][ T6917] bridge0: port 3(vlan3) entered blocking state
[   95.501375][ T6917] bridge0: port 3(vlan3) entered disabled state
[   95.507736][ T6917] vlan3: entered allmulticast mode
[   95.512940][ T6917] bridge0: entered allmulticast mode
[   95.518677][ T6917] vlan3: left allmulticast mode
[   95.523691][ T6917] bridge0: left allmulticast mode
[   95.530234][ T6917] bridge0: left promiscuous mode
[   95.605403][ T6924] loop3: detected capacity change from 0 to 256
[   95.633590][ T6925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   95.719315][ T6933] loop4: detected capacity change from 0 to 1024
[   95.794874][ T6938] loop4: detected capacity change from 0 to 512
[   95.819922][   T29] kauditd_printk_skb: 15 callbacks suppressed
[   95.819939][   T29] audit: type=1400 audit(1720692893.681:551): avc:  denied  { read write } for  pid=6939 comm="syz.3.783" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.820840][ T6938] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.826404][   T29] audit: type=1400 audit(1720692893.681:552): avc:  denied  { open } for  pid=6939 comm="syz.3.783" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.892880][ T6946] loop3: detected capacity change from 0 to 736
[   95.900503][ T6946] iso9660: Bad value for 'mode'
[   95.914801][ T6949] 9pnet_fd: Insufficient options for proto=fd
[   95.942964][ T5873] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   96.054602][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.795'.
[   96.095058][ T6984] 9pnet_fd: Insufficient options for proto=fd
[   96.106501][ T6986] loop2: detected capacity change from 0 to 1024
[   96.176767][ T6997] loop4: detected capacity change from 0 to 1024
[   96.196090][ T6986] netlink: 'syz.2.798': attribute type 10 has an invalid length.
[   96.250095][ T7003] xt_NFQUEUE: number of total queues is 0
[   96.267840][ T6999] loop3: detected capacity change from 0 to 736
[   96.283980][ T6986] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2786: inode #12: comm syz.2.798: corrupted in-inode xattr: bad magic number in in-inode xattr
[   96.301848][ T6999] iso9660: Bad value for 'mode'
[   96.339804][ T4667] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   96.423163][   T29] audit: type=1400 audit(1720692894.281:553): avc:  denied  { setattr } for  pid=7007 comm="syz.3.804" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   96.471142][   T29] audit: type=1400 audit(1720692894.331:554): avc:  denied  { audit_write } for  pid=7009 comm="syz.4.805" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   96.492302][   T29] audit: type=1107 audit(1720692894.331:555): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   96.524619][   T29] audit: type=1400 audit(1720692894.381:556): avc:  denied  { module_load } for  pid=7009 comm="syz.4.805" path=2F6D656D66643A2CEA202864656C6574656429 dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[   96.620219][ T7018] loop3: detected capacity change from 0 to 1024
[   96.648215][ T7018] EXT4-fs: Ignoring removed orlov option
[   96.663458][ T7010] Invalid ELF header magic: != ELF
[   96.680301][ T7018] EXT4-fs mount: 13 callbacks suppressed
[   96.680317][ T7018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.723315][   T29] audit: type=1400 audit(1720692894.571:557): avc:  denied  { getopt } for  pid=7017 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.782453][ T7024] 9pnet_fd: Insufficient options for proto=fd
[   96.803312][ T5355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.956745][ T7047] loop4: detected capacity change from 0 to 1764
[   96.993604][ T6354] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.018363][   T29] audit: type=1400 audit(1720692894.871:558): avc:  denied  { write } for  pid=7051 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   97.054918][   T29] audit: type=1400 audit(1720692894.901:559): avc:  denied  { create } for  pid=7051 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   97.074314][   T29] audit: type=1400 audit(1720692894.901:560): avc:  denied  { ioctl } for  pid=7051 comm="syz.1.811" path="socket:[22634]" dev="sockfs" ino=22634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   97.094701][ T7065] netlink: 96 bytes leftover after parsing attributes in process `syz.3.819'.
[   97.176843][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.820'.
[   97.254802][ T7095] loop2: detected capacity change from 0 to 512
[   97.270873][ T7095] EXT4-fs: Ignoring removed orlov option
[   97.303019][ T7095] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.825: inode #13: comm syz.2.825: iget: illegal inode #
[   97.332681][ T7101] loop1: detected capacity change from 0 to 4096
[   97.335065][ T7106] loop4: detected capacity change from 0 to 1024
[   97.346184][ T7095] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.825: couldn't read orphan inode 13 (err -117)
[   97.359881][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.393351][ T7106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.412342][ T7119] loop3: detected capacity change from 0 to 1024
[   97.421437][ T7095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.441383][ T7095] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.825: Logical block already allocated
[   97.460635][ T7101] loop1: detected capacity change from 4096 to 0
[   97.469346][ T7119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.487615][ T7106] netlink: 'syz.4.829': attribute type 10 has an invalid length.
[   97.495734][ T7122] bio_check_eod: 48 callbacks suppressed
[   97.495760][ T7122] syz.1.827: attempt to access beyond end of device
[   97.495760][ T7122] loop1: rw=524288, sector=32, nr_sectors = 8 limit=0
[   97.516833][ T7119] FAULT_INJECTION: forcing a failure.
[   97.516833][ T7119] name failslab, interval 1, probability 0, space 0, times 0
[   97.529520][ T7119] CPU: 0 PID: 7119 Comm: syz.3.832 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[   97.539525][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   97.545024][ T7122] syz.1.827: attempt to access beyond end of device
[   97.545024][ T7122] loop1: rw=12288, sector=40, nr_sectors = 8 limit=0
[   97.549646][ T7119] Call Trace:
[   97.549658][ T7119]  <TASK>
[   97.549668][ T7119]  dump_stack_lvl+0xf2/0x150
[   97.565472][ T7122] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.1.827: unable to read itable block
[   97.566046][ T7119]  dump_stack+0x15/0x20
[   97.569059][ T7122] syz.1.827: attempt to access beyond end of device
[   97.569059][ T7122] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0
[   97.573546][ T7119]  should_fail_ex+0x229/0x230
[   97.573577][ T7119]  ? dquot_alloc+0x26/0x30
[   97.586184][ T7122] buffer_io_error: 23 callbacks suppressed
[   97.586197][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   97.586286][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   97.590345][ T7119]  __should_failslab+0x92/0xa0
[   97.590380][ T7119]  should_failslab+0x9/0x20
[   97.605246][ T7122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure
[   97.608153][ T7119]  kmem_cache_alloc_noprof+0x4c/0x290
[   97.615452][ T7122] syz.1.827: attempt to access beyond end of device
[   97.615452][ T7122] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0
[   97.618348][ T7119]  dquot_alloc+0x26/0x30
[   97.626631][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   97.633323][ T7119]  dqget+0x2a8/0x8b0
[   97.633353][ T7119]  dquot_set_dqblk+0x2b/0x8f0
[   97.638179][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   97.642579][ T7119]  ? make_kuid+0x114/0x300
[   97.642612][ T7119]  quota_setquota+0x32c/0x370
[   97.651294][ T7122] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #18: comm syz.1.827: mark_inode_dirty error
[   97.656678][ T7119]  do_quotactl+0x5de/0x6d0
[   97.678477][ T7126] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2786: inode #12: comm syz.4.829: corrupted in-inode xattr: bad magic number in in-inode xattr
[   97.682321][ T7119]  __se_sys_quotactl+0x204/0x670
[   97.682394][ T7119]  __x64_sys_quotactl+0x55/0x70
[   97.682432][ T7119]  x64_sys_call+0x1da4/0x2d70
[   97.682465][ T7119]  do_syscall_64+0xc9/0x1c0
[   97.716674][ T7122] syz.1.827: attempt to access beyond end of device
[   97.716674][ T7122] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0
[   97.718036][ T7119]  ? clear_bhb_loop+0x55/0xb0
[   97.722472][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   97.737802][ T7119]  ? clear_bhb_loop+0x55/0xb0
[   97.737840][ T7119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.794073][ T7119] RIP: 0033:0x7f7c09b13bd9
[   97.798505][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.818184][ T7119] RSP: 002b:00007f7c08d95048 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[   97.826624][ T7119] RAX: ffffffffffffffda RBX: 00007f7c09ca1f60 RCX: 00007f7c09b13bd9
[   97.834600][ T7119] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffff80000800
[   97.842636][ T7119] RBP: 00007f7c08d950a0 R08: 0000000000000000 R09: 0000000000000000
[   97.850627][ T7119] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001
[   97.858677][ T7119] R13: 000000000000000b R14: 00007f7c09ca1f60 R15: 00007ffda802aa78
[   97.866657][ T7119]  </TASK>
[   97.890117][ T6354] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.893024][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   97.913630][ T7106] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   97.922993][ T7122] syz.1.827: attempt to access beyond end of device
[   97.922993][ T7122] loop1: rw=524288, sector=32, nr_sectors = 8 limit=0
[   97.944463][ T5355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.945356][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'.
[   97.956411][ T7122] syz.1.827: attempt to access beyond end of device
[   97.956411][ T7122] loop1: rw=12288, sector=40, nr_sectors = 8 limit=0
[   97.991714][ T7122] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.1.827: unable to read itable block
[   98.008026][ T7122] syz.1.827: attempt to access beyond end of device
[   98.008026][ T7122] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0
[   98.021276][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.033908][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   98.040814][ T7122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure
[   98.057309][ T7122] syz.1.827: attempt to access beyond end of device
[   98.057309][ T7122] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0
[   98.070700][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.092650][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   98.099512][ T7122] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #18: comm syz.1.827: mark_inode_dirty error
[   98.133021][ T7143] __vm_enough_memory: pid: 7143, comm: syz.3.836, bytes: 549759979520 not enough memory for the allocation
[   98.159544][ T7122] syz.1.827: attempt to access beyond end of device
[   98.159544][ T7122] loop1: rw=145409, sector=0, nr_sectors = 8 limit=0
[   98.172920][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.220382][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   98.227312][ T7122] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.1.827: unable to read itable block
[   98.260941][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.285677][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.310640][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   98.317596][ T7122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure
[   98.370291][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.390613][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   98.397856][ T7122] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #18: comm syz.1.827: mark_inode_dirty error
[   98.450684][ T7122] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.471162][ T7122] EXT4-fs (loop1): I/O error while writing superblock
[   98.474152][ T7156] loop4: detected capacity change from 0 to 2048
[   98.502016][ T5752] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 4: comm syz-executor: unable to read itable block
[   98.519637][ T5752] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[   98.532647][ T7153] syzkaller0: entered promiscuous mode
[   98.538207][ T7153] syzkaller0: entered allmulticast mode
[   98.556366][ T7156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.571381][ T7160] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (32)
[   98.583785][ T7159] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (32)
[   98.595827][ T7156] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   98.651857][ T7156] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[   98.664377][ T7156] EXT4-fs (loop4): This should not happen!! Data will be lost
[   98.664377][ T7156] 
[   98.674101][ T7156] EXT4-fs (loop4): Total free blocks count 0
[   98.680214][ T7156] EXT4-fs (loop4): Free/Dirty block details
[   98.686128][ T7156] EXT4-fs (loop4): free_blocks=2415919104
[   98.691918][ T7156] EXT4-fs (loop4): dirty_blocks=16
[   98.697047][ T7156] EXT4-fs (loop4): Block reservation details
[   98.703076][ T7156] EXT4-fs (loop4): i_reserved_data_blocks=1
[   98.734421][ T7171] loop3: detected capacity change from 0 to 512
[   98.748263][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.761356][ T7171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.774396][ T7171] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.803717][ T7171] SELinux:  Context system_u:object_r:dmesg_exec_t:s0 is not valid (left unmapped).
[   98.826339][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.840355][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.854178][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.887779][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.902794][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.921103][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.937992][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   98.993211][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   99.035889][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.050627][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   99.067941][ T7188] loop4: detected capacity change from 0 to 4096
[   99.080165][ T5355] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block
[   99.129630][ T7188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.186043][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.208935][ T7188] loop4: detected capacity change from 4096 to 0
[   99.217057][ T7188] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.4.852: unable to read itable block
[   99.233567][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.240550][ T7188] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure
[   99.249830][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.256695][ T7188] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #18: comm syz.4.852: mark_inode_dirty error
[   99.268697][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.277601][ T7188] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.4.852: unable to read itable block
[   99.279454][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.290608][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.307704][ T7188] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure
[   99.316745][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.323562][ T7188] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm syz.4.852: mark_inode_dirty error
[   99.326060][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'.
[   99.334857][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.352028][ T7188] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.4.852: unable to read itable block
[   99.357617][ T5355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.365672][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.380598][ T7188] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure
[   99.391548][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.398368][ T7188] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm syz.4.852: mark_inode_dirty error
[   99.411394][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.419343][ T7188] EXT4-fs (loop4): I/O error while writing superblock
[   99.445999][ T5838] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 4: comm syz-executor: unable to read itable block
[   99.461575][ T7190] chnl_net:caif_netlink_parms(): no params data found
[   99.514994][ T5838] bond0: (slave syz_tun): Releasing backup interface
[   99.561977][   T36] bridge_slave_1: left allmulticast mode
[   99.567760][   T36] bridge_slave_1: left promiscuous mode
[   99.573576][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.583051][   T36] bridge_slave_0: left allmulticast mode
[   99.588779][   T36] bridge_slave_0: left promiscuous mode
[   99.594662][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.703471][ T7226] loop2: detected capacity change from 0 to 8192
[   99.711035][ T7226] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.751641][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.762493][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.775510][   T36] bond0 (unregistering): Released all slaves
[   99.785349][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.792898][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.797853][ T7228] loop2: detected capacity change from 0 to 128
[   99.802515][ T7190] bridge_slave_0: entered allmulticast mode
[   99.813141][ T7190] bridge_slave_0: entered promiscuous mode
[   99.822142][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.829318][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.837779][ T7190] bridge_slave_1: entered allmulticast mode
[   99.839589][ T4667] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   99.846262][ T7190] bridge_slave_1: entered promiscuous mode
[   99.900279][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.905541][ T7235] loop2: detected capacity change from 0 to 512
[   99.912058][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.928243][ T7235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   99.938508][   T36] team0: left promiscuous mode
[   99.943500][   T36] team_slave_0: left promiscuous mode
[   99.949019][   T36] team_slave_1: left promiscuous mode
[   99.956825][   T36] dummy0: left promiscuous mode
[   99.960528][ T7235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[   99.969719][ T7235] System zones: 1-12
[   99.973984][ T7235] EXT4-fs (loop2): 1 truncate cleaned up
[   99.980235][ T7235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.993339][   T36] hsr_slave_0: left promiscuous mode
[  100.001471][   T36] hsr_slave_1: left promiscuous mode
[  100.007425][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.014895][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.024446][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.032007][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.044567][   T36] veth1_macvtap: left promiscuous mode
[  100.050095][   T36] veth0_macvtap: left promiscuous mode
[  100.055718][   T36] veth1_vlan: left promiscuous mode
[  100.061116][   T36] veth0_vlan: left promiscuous mode
[  100.144126][ T6354] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.200606][   T36] team0 (unregistering): Port device team_slave_1 removed
[  100.213590][   T36] team0 (unregistering): Port device team_slave_0 removed
[  100.282263][ T7190] team0: Port device team_slave_0 added
[  100.320379][ T7190] team0: Port device team_slave_1 added
[  100.358053][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.365074][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.391517][ T7190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.423388][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'.
[  100.435370][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.442603][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.468615][ T7190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.537752][ T7190] hsr_slave_0: entered promiscuous mode
[  100.544285][ T7190] hsr_slave_1: entered promiscuous mode
[  100.551653][ T7190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.559376][ T7190] Cannot create hsr debugfs directory
[  100.649175][ T7211] chnl_net:caif_netlink_parms(): no params data found
[  100.671199][ T7222] chnl_net:caif_netlink_parms(): no params data found
[  100.763158][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.787343][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.794488][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.804097][ T7211] bridge_slave_0: entered allmulticast mode
[  100.812460][ T7211] bridge_slave_0: entered promiscuous mode
[  100.820305][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.827521][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.836845][ T7211] bridge_slave_1: entered allmulticast mode
[  100.843873][ T7211] bridge_slave_1: entered promiscuous mode
[  100.861369][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.868585][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.876145][ T7222] bridge_slave_0: entered allmulticast mode
[  100.882708][ T7222] bridge_slave_0: entered promiscuous mode
[  100.893821][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.919595][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.926700][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.934230][ T7222] bridge_slave_1: entered allmulticast mode
[  100.940909][ T7222] bridge_slave_1: entered promiscuous mode
[  100.961340][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.973933][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.989152][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.999911][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.014452][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.055160][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.067532][ T7211] team0: Port device team_slave_0 added
[  101.074453][ T7211] team0: Port device team_slave_1 added
[  101.086536][ T7222] team0: Port device team_slave_0 added
[  101.111784][ T7222] team0: Port device team_slave_1 added
[  101.131294][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.138288][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.164497][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.184200][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.191343][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.217462][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.232585][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  101.234328][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.248640][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.274633][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.287262][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.294271][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.320226][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.358769][ T7302] loop2: detected capacity change from 0 to 512
[  101.366384][ T7302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  101.383230][ T7302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[  101.394833][ T7302] System zones: 1-12
[  101.405616][ T7302] EXT4-fs (loop2): 1 truncate cleaned up
[  101.411973][ T7302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.426863][ T7211] hsr_slave_0: entered promiscuous mode
[  101.433300][ T7211] hsr_slave_1: entered promiscuous mode
[  101.450450][ T7211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.458871][ T7211] Cannot create hsr debugfs directory
[  101.549862][   T36] bridge_slave_1: left allmulticast mode
[  101.555569][   T36] bridge_slave_1: left promiscuous mode
[  101.561273][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.579635][   T36] bridge_slave_0: left allmulticast mode
[  101.585310][   T36] bridge_slave_0: left promiscuous mode
[  101.591103][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.691487][ T6354] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.741986][ T7313] loop2: detected capacity change from 0 to 4096
[  101.750980][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.818963][ T7313] loop2: detected capacity change from 4096 to 0
[  101.825905][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.826434][ T7313] EXT4-fs error (device loop2): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.2.874: unable to read itable block
[  101.847261][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  101.854222][ T7313] EXT4-fs error (device loop2): ext4_get_inode_loc:4495: inode #18: block 5: comm syz.2.874: unable to read itable block
[  101.867014][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  101.867371][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.873805][ T7313] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: IO failure
[  101.873876][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  101.897915][ T7313] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #18: comm syz.2.874: mark_inode_dirty error
[  101.909224][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  101.916167][ T7313] __quota_error: 8 callbacks suppressed
[  101.916181][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  101.918094][   T36] bond0 (unregistering): Released all slaves
[  101.921800][ T7313] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.874: Failed to commit dquot type 0
[  101.921884][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  101.953902][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  101.962077][ T7313] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.874: Failed to commit dquot type 1
[  101.973075][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  101.979956][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  101.988074][ T7313] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.874: Failed to commit dquot type 0
[  102.001470][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  102.006013][ T7222] hsr_slave_0: entered promiscuous mode
[  102.008353][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.022087][ T7313] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.874: Failed to commit dquot type 1
[  102.033065][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  102.040726][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.041169][ T7222] hsr_slave_1: entered promiscuous mode
[  102.048933][ T7313] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.874: Failed to commit dquot type 0
[  102.048997][ T7313] EXT4-fs (loop2): I/O error while writing superblock
[  102.072488][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.072612][ T7222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.080652][ T7313] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.874: Failed to commit dquot type 1
[  102.080719][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.080788][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.080825][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.080935][ T7313] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  102.132416][ T7222] Cannot create hsr debugfs directory
[  102.137890][ T7309] netlink: 56 bytes leftover after parsing attributes in process `syz.0.873'.
[  102.151582][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.874'.
[  102.179294][   T36] team0: left promiscuous mode
[  102.184158][   T36] team_slave_0: left promiscuous mode
[  102.189758][   T36] team_slave_1: left promiscuous mode
[  102.196714][   T36] dummy0: left promiscuous mode
[  102.204687][   T36] hsr_slave_0: left promiscuous mode
[  102.211189][   T36] hsr_slave_1: left promiscuous mode
[  102.216923][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.224452][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.232289][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.239767][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.251614][   T36] veth1_macvtap: left promiscuous mode
[  102.257125][   T36] veth0_macvtap: left promiscuous mode
[  102.262737][   T36] veth1_vlan: left promiscuous mode
[  102.267996][   T36] veth0_vlan: left promiscuous mode
[  102.381884][   T36] team0 (unregistering): Port device team_slave_1 removed
[  102.389603][ T7322] xt_NFQUEUE: number of total queues is 0
[  102.395906][   T36] team0 (unregistering): Port device team_slave_0 removed
[  102.459424][ T7321] netlink: 'syz.0.876': attribute type 10 has an invalid length.
[  102.474886][ T7321] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  102.502403][ T7190] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.520928][ T7190] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.555474][ T7190] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.600892][ T7190] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.688036][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.722471][ T7190] 8021q: adding VLAN 0 to HW filter on device team0
[  102.740937][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.748232][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.780758][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.787892][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.854166][ T7190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.882370][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.932123][ T7333] chnl_net:caif_netlink_parms(): no params data found
[  102.947077][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.969736][ T7211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.991077][ T7222] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.004829][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.023476][ T7222] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.044300][ T7222] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.053260][ T7222] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.070841][ T7211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.089871][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.097022][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.104431][ T7333] bridge_slave_0: entered allmulticast mode
[  103.111214][ T7333] bridge_slave_0: entered promiscuous mode
[  103.118581][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.125760][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.133108][ T7333] bridge_slave_1: entered allmulticast mode
[  103.139709][ T7333] bridge_slave_1: entered promiscuous mode
[  103.160732][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.180530][ T7211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.203033][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.217652][ T7190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.232537][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.267004][ T7333] team0: Port device team_slave_0 added
[  103.281769][ T7211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.309524][ T7333] team0: Port device team_slave_1 added
[  103.346617][   T36] bridge_slave_1: left allmulticast mode
[  103.352619][   T36] bridge_slave_1: left promiscuous mode
[  103.358445][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.371870][   T36] bridge_slave_0: left allmulticast mode
[  103.377670][   T36] bridge_slave_0: left promiscuous mode
[  103.383418][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.512321][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.523421][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.534598][   T36] bond0 (unregistering): Released all slaves
[  103.544329][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.551392][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.577406][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.604610][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.611653][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.637674][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.663545][   T36] hsr_slave_0: left promiscuous mode
[  103.669420][   T36] hsr_slave_1: left promiscuous mode
[  103.675502][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.683124][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.691201][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.698772][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.710434][   T36] veth1_macvtap: left promiscuous mode
[  103.716002][   T36] veth0_macvtap: left promiscuous mode
[  103.721594][   T36] veth1_vlan: left promiscuous mode
[  103.726879][   T36] veth0_vlan: left promiscuous mode
[  103.829877][   T36] team0 (unregistering): Port device team_slave_1 removed
[  103.840884][   T36] team0 (unregistering): Port device team_slave_0 removed
[  103.893659][ T7211] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.904813][ T7211] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.928692][ T7211] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.940368][ T7211] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.963519][ T7333] hsr_slave_0: entered promiscuous mode
[  103.971097][ T7333] hsr_slave_1: entered promiscuous mode
[  103.977354][ T7333] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.985946][ T7333] Cannot create hsr debugfs directory
[  103.995523][ T7190] veth0_vlan: entered promiscuous mode
[  104.016149][ T7190] veth1_vlan: entered promiscuous mode
[  104.033290][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.065763][ T7222] 8021q: adding VLAN 0 to HW filter on device team0
[  104.079869][ T7190] veth0_macvtap: entered promiscuous mode
[  104.088679][ T7190] veth1_macvtap: entered promiscuous mode
[  104.136245][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.146251][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.153430][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.165704][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.172911][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.194011][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.204530][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.214416][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.225036][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.234971][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.245578][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.255468][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.265933][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.277545][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.288621][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.299165][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.309041][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.319514][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.329447][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.339957][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.349858][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.360415][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.371541][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.382556][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'.
[  104.407801][ T7211] 8021q: adding VLAN 0 to HW filter on device team0
[  104.440847][ T7190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.449682][ T7190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.458539][ T7190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.467342][ T7190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.495759][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.502885][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.513359][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.520479][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.548687][ T7222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.730510][ T7432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7432 comm=syz.1.854
[  104.731908][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.796122][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.816924][ T7438] netlink: 'syz.0.886': attribute type 5 has an invalid length.
[  104.824692][ T7438] netlink: 168 bytes leftover after parsing attributes in process `syz.0.886'.
[  104.947935][ T7333] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.990832][ T7333] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.029552][ T7333] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.054604][ T7211] veth0_vlan: entered promiscuous mode
[  105.065443][ T7333] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.084261][ T7211] veth1_vlan: entered promiscuous mode
[  105.096822][ T7474] loop0: detected capacity change from 0 to 512
[  105.104622][ T7474] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  105.141356][ T7474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[  105.143199][ T7211] veth0_macvtap: entered promiscuous mode
[  105.167686][ T7474] System zones: 1-12
[  105.177852][ T7474] EXT4-fs (loop0): 1 truncate cleaned up
[  105.178428][ T7211] veth1_macvtap: entered promiscuous mode
[  105.184268][ T7474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.221992][ T7333] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.239629][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.250141][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.257026][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.260070][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.279665][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.289657][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.300164][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.310147][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.320883][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.330814][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.341327][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.354791][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.371795][ T7222] veth0_vlan: entered promiscuous mode
[  105.379191][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.389866][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.399851][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.412048][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.421976][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.432647][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.438257][ T7492] loop0: detected capacity change from 0 to 1024
[  105.442612][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.461968][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.471838][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.485120][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.496576][ T7492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.498749][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.538176][ T7222] veth1_vlan: entered promiscuous mode
[  105.549092][ T7333] 8021q: adding VLAN 0 to HW filter on device team0
[  105.556024][ T7492] loop0: detected capacity change from 1024 to 0
[  105.587016][ T7211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.595872][ T7211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.604826][ T7211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.613627][ T7211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.631098][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'.
[  105.672627][ T7333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.683210][ T7333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.696737][ T5775] bio_check_eod: 113 callbacks suppressed
[  105.696754][ T5775] syz-executor: attempt to access beyond end of device
[  105.696754][ T5775] loop0: rw=12288, sector=96, nr_sectors = 2 limit=0
[  105.733483][ T7222] veth0_macvtap: entered promiscuous mode
[  105.742934][ T5775] syz-executor: attempt to access beyond end of device
[  105.742934][ T5775] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0
[  105.759606][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.760846][ T5775] syz-executor: attempt to access beyond end of device
[  105.760846][ T5775] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0
[  105.766742][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.798293][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.800581][ T5775] syz-executor: attempt to access beyond end of device
[  105.800581][ T5775] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0
[  105.805512][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.822106][ T5775] syz-executor: attempt to access beyond end of device
[  105.822106][ T5775] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0
[  105.855753][ T7222] veth1_macvtap: entered promiscuous mode
[  105.864658][ T5775] syz-executor: attempt to access beyond end of device
[  105.864658][ T5775] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0
[  105.880658][ T5775] syz-executor: attempt to access beyond end of device
[  105.880658][ T5775] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0
[  105.891704][ T7333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.901446][ T5775] syz-executor: attempt to access beyond end of device
[  105.901446][ T5775] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0
[  105.955963][ T5775] syz-executor: attempt to access beyond end of device
[  105.955963][ T5775] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0
[  105.974914][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.984550][ T5775] syz-executor: attempt to access beyond end of device
[  105.984550][ T5775] loop0: rw=524288, sector=28, nr_sectors = 2 limit=0
[  105.985496][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.008790][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.009022][ T5775] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #2: block 6: comm syz-executor: unable to read itable block
[  106.019314][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.036087][ T5775] buffer_io_error: 54 callbacks suppressed
[  106.036106][ T5775] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  106.042069][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.048318][ T5775] EXT4-fs (loop0): I/O error while writing superblock
[  106.056099][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.066566][ T5775] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure
[  106.073282][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.090736][ T5775] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  106.091925][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.102570][ T5775] EXT4-fs (loop0): I/O error while writing superblock
[  106.110706][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.120525][ T5775] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error
[  106.127270][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.138670][ T5775] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  106.149259][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.164787][ T5775] EXT4-fs (loop0): I/O error while writing superblock
[  106.167372][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.178351][   T36] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #2: block 6: comm kworker/u8:2: unable to read itable block
[  106.199061][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.260023][   T36] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  106.271678][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.273803][   T36] EXT4-fs (loop0): I/O error while writing superblock
[  106.282262][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.282281][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.282299][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.282315][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.282331][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.282349][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.282365][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.282381][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.282396][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.282414][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.372875][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.380752][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.393202][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.418122][ T5775] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  106.429251][ T5775] EXT4-fs (loop0): I/O error while writing superblock
[  106.438663][ T7222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.447716][ T7222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.456635][ T7222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.465409][ T7222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.482688][ T5775] bond0: (slave syz_tun): Releasing backup interface
[  106.496349][ T7333] veth0_vlan: entered promiscuous mode
[  106.508039][ T7333] veth1_vlan: entered promiscuous mode
[  106.533872][ T7333] veth0_macvtap: entered promiscuous mode
[  106.542782][ T7333] veth1_macvtap: entered promiscuous mode
[  106.557056][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.567804][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.577801][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.588337][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.598284][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.608859][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.618753][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.629258][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.639133][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.649590][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.660377][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.670809][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.680727][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.691229][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.703053][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.714739][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.725323][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.735176][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.745740][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.755757][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.766230][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.776083][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.786558][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.796430][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.806900][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.816756][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.827334][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.837543][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.848147][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.860695][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.878409][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.898094][ T7569] loop3: detected capacity change from 0 to 512
[  106.912664][ T7571] loop4: detected capacity change from 0 to 1024
[  106.918316][ T7569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.942225][ T7571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.948302][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.967243][ T7569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[  106.976089][ T7569] System zones: 1-12
[  106.977421][ T7333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.988760][ T7333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.997657][ T7333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.003736][ T7569] EXT4-fs (loop3): 1 truncate cleaned up
[  107.006472][ T7333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.021525][ T7569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.036010][ T7571] loop4: detected capacity change from 1024 to 0
[  107.049148][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'.
[  107.064664][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.104475][ T7222] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 6: comm syz-executor: unable to read itable block
[  107.133007][ T7222] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  107.143964][ T7211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.159721][ T7222] EXT4-fs (loop4): I/O error while writing superblock
[  107.166524][ T7222] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure
[  107.179883][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.193640][ T7222] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  107.203707][ T7222] EXT4-fs (loop4): I/O error while writing superblock
[  107.210705][ T7222] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error
[  107.222454][ T7222] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  107.238366][ T7222] EXT4-fs (loop4): I/O error while writing superblock
[  107.261596][   T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 6: comm kworker/u8:1: unable to read itable block
[  107.285898][   T28] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  107.300917][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  107.300933][   T29] audit: type=1400 audit(1720692905.141:571): avc:  denied  { map } for  pid=7592 comm="syz.3.898" path="socket:[24351]" dev="sockfs" ino=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  107.330080][   T29] audit: type=1400 audit(1720692905.141:572): avc:  denied  { read } for  pid=7592 comm="syz.3.898" path="socket:[24351]" dev="sockfs" ino=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  107.369752][ T7595] loop1: detected capacity change from 0 to 512
[  107.390128][   T28] EXT4-fs (loop4): I/O error while writing superblock
[  107.396770][ T7598] FAULT_INJECTION: forcing a failure.
[  107.396770][ T7598] name failslab, interval 1, probability 0, space 0, times 0
[  107.399306][ T7222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.410454][ T7598] CPU: 0 PID: 7598 Comm: syz.2.904 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[  107.429277][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  107.439348][ T7598] Call Trace:
[  107.442650][ T7598]  <TASK>
[  107.445620][ T7598]  dump_stack_lvl+0xf2/0x150
[  107.450252][ T7598]  dump_stack+0x15/0x20
[  107.454528][ T7598]  should_fail_ex+0x229/0x230
[  107.459267][ T7598]  ? security_prepare_creds+0x4c/0x100
[  107.462708][ T7595] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.903: casefold flag without casefold feature
[  107.464736][ T7598]  __should_failslab+0x92/0xa0
[  107.477559][ T7595] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.903: couldn't read orphan inode 15 (err -117)
[  107.481988][ T7598]  should_failslab+0x9/0x20
[  107.498118][ T7595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.498220][ T7598]  __kmalloc_noprof+0xa5/0x370
[  107.515026][ T7598]  security_prepare_creds+0x4c/0x100
[  107.520344][ T7598]  prepare_creds+0x346/0x480
[  107.525090][ T7598]  copy_creds+0x90/0x3f0
[  107.529370][ T7598]  copy_process+0x64b/0x1f90
[  107.532106][ T7563] chnl_net:caif_netlink_parms(): no params data found
[  107.533993][ T7598]  ? _copy_from_user+0x9a/0xd0
[  107.545964][ T7598]  kernel_clone+0x167/0x5e0
[  107.550490][ T7598]  __se_sys_clone3+0x1b5/0x1f0
[  107.555378][ T7598]  __x64_sys_clone3+0x31/0x40
[  107.560081][ T7598]  x64_sys_call+0x28df/0x2d70
[  107.563111][   T29] audit: type=1400 audit(1720692905.421:573): avc:  denied  { create } for  pid=7588 comm="syz.1.903" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[  107.564776][ T7598]  do_syscall_64+0xc9/0x1c0
[  107.589683][ T7598]  ? clear_bhb_loop+0x55/0xb0
[  107.594381][ T7598]  ? clear_bhb_loop+0x55/0xb0
[  107.599074][ T7598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.605011][ T7598] RIP: 0033:0x7f4e56229bd9
[  107.609459][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.629186][ T7598] RSP: 002b:00007f4e554aaf18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  107.637605][ T7598] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4e56229bd9
[  107.645601][ T7598] RDX: 00007f4e554aaf30 RSI: 0000000000000058 RDI: 00007f4e554aaf30
[  107.653588][ T7598] RBP: 00007f4e554ab0a0 R08: 0000000000000000 R09: 0000000000000058
[  107.661566][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.669814][ T7598] R13: 000000000000000b R14: 00007f4e563b7f60 R15: 00007ffea2983e58
[  107.677834][ T7598]  </TASK>
[  107.697064][ T7222] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  107.714358][ T7222] EXT4-fs (loop4): I/O error while writing superblock
[  107.729727][ T7604] macsec0: entered promiscuous mode
[  107.735312][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.905'.
[  107.744250][ T7604] team0: entered promiscuous mode
[  107.749487][ T7604] team_slave_0: entered promiscuous mode
[  107.755472][ T7604] team_slave_1: entered promiscuous mode
[  107.761556][ T7604] team0: entered allmulticast mode
[  107.766683][ T7604] team_slave_0: entered allmulticast mode
[  107.772585][ T7604] team_slave_1: entered allmulticast mode
[  107.780056][ T7604] team0: Cannot enslave team device to itself
[  107.860277][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.867416][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.877639][ T7563] bridge_slave_0: entered allmulticast mode
[  107.885502][ T7563] bridge_slave_0: entered promiscuous mode
[  107.903036][ T7603] macsec0: left promiscuous mode
[  107.908787][   T36] bridge_slave_1: left allmulticast mode
[  107.914489][   T36] bridge_slave_1: left promiscuous mode
[  107.920253][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.958325][   T36] bridge_slave_0: left allmulticast mode
[  107.964078][   T36] bridge_slave_0: left promiscuous mode
[  107.969803][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.179735][   T29] audit: type=1400 audit(1720692906.031:574): avc:  denied  { unmount } for  pid=7211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  108.228812][ T7190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.307266][ T7619] loop3: detected capacity change from 0 to 8192
[  108.333999][ T7621] loop1: detected capacity change from 0 to 512
[  108.347370][ T7621] EXT4-fs: Ignoring removed orlov option
[  108.356948][ T7621] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.909: Attempting to read directory block (0) that is past i_size (256)
[  108.373454][ T7621] EXT4-fs (loop1): Remounting filesystem read-only
[  108.380137][ T7621] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  108.389614][ T7621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.405186][ T7621] SELinux: (dev loop1, type ext4) getxattr errno 5
[  108.412353][ T7621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.432342][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.443669][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.464430][   T36] bond0 (unregistering): Released all slaves
[  108.544670][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.552227][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.581285][ T7563] bridge_slave_1: entered allmulticast mode
[  108.588018][ T7563] bridge_slave_1: entered promiscuous mode
[  108.646665][ T7563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.662956][   T36] hsr_slave_0: left promiscuous mode
[  108.668668][   T36] hsr_slave_1: left promiscuous mode
[  108.679425][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.686934][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.707267][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.714761][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.734607][   T36] veth1_macvtap: left promiscuous mode
[  108.740194][   T36] veth0_macvtap: left promiscuous mode
[  108.745831][   T36] veth1_vlan: left promiscuous mode
[  108.751145][   T36] veth0_vlan: left promiscuous mode
[  108.832859][ T7637] loop3: detected capacity change from 0 to 512
[  108.894457][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.918784][ T7637] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.000397][ T7211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.011336][   T36] team0 (unregistering): Port device team_slave_1 removed
[  109.025380][   T36] team0 (unregistering): Port device team_slave_0 removed
[  109.102087][ T7563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.131567][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'.
[  109.165931][ T7563] team0: Port device team_slave_0 added
[  109.173696][ T7563] team0: Port device team_slave_1 added
[  109.207035][ T7563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.214085][ T7563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.240272][ T7563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.264742][ T7563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.272135][ T7563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.298122][ T7563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.342314][ T7563] hsr_slave_0: entered promiscuous mode
[  109.354499][ T7563] hsr_slave_1: entered promiscuous mode
[  109.368009][ T7563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.383326][ T7563] Cannot create hsr debugfs directory
[  109.580693][ T7680] loop2: detected capacity change from 0 to 256
[  109.626662][ T7684] FAULT_INJECTION: forcing a failure.
[  109.626662][ T7684] name failslab, interval 1, probability 0, space 0, times 0
[  109.639458][ T7684] CPU: 0 PID: 7684 Comm: syz.2.920 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[  109.649521][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  109.659585][ T7684] Call Trace:
[  109.662945][ T7684]  <TASK>
[  109.666072][ T7684]  dump_stack_lvl+0xf2/0x150
[  109.670688][ T7684]  dump_stack+0x15/0x20
[  109.674888][ T7684]  should_fail_ex+0x229/0x230
[  109.679702][ T7684]  ? skb_clone+0x154/0x1f0
[  109.684145][ T7684]  __should_failslab+0x92/0xa0
[  109.689028][ T7684]  should_failslab+0x9/0x20
[  109.693553][ T7684]  kmem_cache_alloc_noprof+0x4c/0x290
[  109.699125][ T7684]  skb_clone+0x154/0x1f0
[  109.703440][ T7684]  nfnetlink_rcv+0x2de/0x15b0
[  109.708186][ T7684]  ? xas_load+0x3ae/0x3d0
[  109.712535][ T7684]  ? skb_release_data+0x583/0x5a0
[  109.717576][ T7684]  ? kmem_cache_free+0xd8/0x280
[  109.722508][ T7684]  ? nlmon_xmit+0x51/0x60
[  109.726841][ T7684]  ? __kfree_skb+0x102/0x150
[  109.731443][ T7684]  ? consume_skb+0x57/0x180
[  109.736053][ T7684]  ? nlmon_xmit+0x51/0x60
[  109.740415][ T7684]  ? __dev_queue_xmit+0xb21/0x1e50
[  109.745538][ T7684]  ? ref_tracker_free+0x3a5/0x410
[  109.750626][ T7684]  netlink_unicast+0x58d/0x660
[  109.755479][ T7684]  netlink_sendmsg+0x5ca/0x6e0
[  109.760275][ T7684]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.765581][ T7684]  __sock_sendmsg+0x140/0x180
[  109.770355][ T7684]  ____sys_sendmsg+0x312/0x410
[  109.775175][ T7684]  __sys_sendmsg+0x1e9/0x280
[  109.779808][ T7684]  __x64_sys_sendmsg+0x46/0x50
[  109.784717][ T7684]  x64_sys_call+0xb25/0x2d70
[  109.789413][ T7684]  do_syscall_64+0xc9/0x1c0
[  109.794012][ T7684]  ? clear_bhb_loop+0x55/0xb0
[  109.798710][ T7684]  ? clear_bhb_loop+0x55/0xb0
[  109.803430][ T7684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.809343][ T7684] RIP: 0033:0x7f4e56229bd9
[  109.813762][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.833476][ T7684] RSP: 002b:00007f4e554ab048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.842005][ T7684] RAX: ffffffffffffffda RBX: 00007f4e563b7f60 RCX: 00007f4e56229bd9
[  109.849988][ T7684] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  109.857967][ T7684] RBP: 00007f4e554ab0a0 R08: 0000000000000000 R09: 0000000000000000
[  109.865947][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.874013][ T7684] R13: 000000000000000b R14: 00007f4e563b7f60 R15: 00007ffea2983e58
[  109.882000][ T7684]  </TASK>
[  109.996786][ T7696] loop2: detected capacity change from 0 to 512
[  110.004684][ T7696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  110.011642][ T7563] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  110.023256][ T7696] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.925: invalid indirect mapped block 512 (level 0)
[  110.044438][ T7696] EXT4-fs (loop2): Remounting filesystem read-only
[  110.051303][ T7696] EXT4-fs (loop2): 1 orphan inode deleted
[  110.057210][ T7696] EXT4-fs (loop2): 1 truncate cleaned up
[  110.062823][ T7563] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  110.063316][ T7696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.082896][ T7696] SELinux: (dev loop2, type ext4) getxattr errno 5
[  110.092830][ T7696] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.154016][ T7563] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.176171][ T7563] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.222825][   T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.416586][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.570139][ T7563] 8021q: adding VLAN 0 to HW filter on device team0
[  110.640080][   T24] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.647199][   T24] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.656191][   T24] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.663323][   T24] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.683890][   T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.756223][   T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.817143][   T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.852745][ T7769] loop1: detected capacity change from 0 to 128
[  110.879539][ T7563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.900701][ T4667] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  110.923821][   T29] audit: type=1400 audit(1720692908.771:575): avc:  denied  { listen } for  pid=7767 comm="syz.1.936" lport=55759 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  110.946265][   T29] audit: type=1400 audit(1720692908.771:576): avc:  denied  { accept } for  pid=7767 comm="syz.1.936" lport=55759 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  111.015957][   T28] bridge_slave_1: left allmulticast mode
[  111.021810][   T28] bridge_slave_1: left promiscuous mode
[  111.027732][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.045004][   T28] bridge_slave_0: left allmulticast mode
[  111.045508][ T7785] loop2: detected capacity change from 0 to 164
[  111.050822][   T28] bridge_slave_0: left promiscuous mode
[  111.063006][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.080800][ T7785] Unsupported NM flag settings (8)
[  111.092714][ T7785] Unsupported NM flag settings (8)
[  111.192130][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.204323][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.215364][   T28] bond0 (unregistering): Released all slaves
[  111.234621][ T7793] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  111.263225][ T7795] netlink: 1 bytes leftover after parsing attributes in process `syz.1.938'.
[  111.304570][   T28] hsr_slave_0: left promiscuous mode
[  111.312754][   T28] hsr_slave_1: left promiscuous mode
[  111.319317][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.327211][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.337117][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.344613][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.356513][   T28] veth1_macvtap: left promiscuous mode
[  111.362519][   T28] veth0_macvtap: left promiscuous mode
[  111.368061][   T28] veth1_vlan: left promiscuous mode
[  111.373374][   T28] veth0_vlan: left promiscuous mode
[  111.493924][   T28] team0 (unregistering): Port device team_slave_1 removed
[  111.505048][   T28] team0 (unregistering): Port device team_slave_0 removed
[  111.559824][ T7798] bond1: entered allmulticast mode
[  111.576858][ T7719] chnl_net:caif_netlink_parms(): no params data found
[  111.663864][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.671064][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.687234][ T7719] bridge_slave_0: entered allmulticast mode
[  111.695771][ T7719] bridge_slave_0: entered promiscuous mode
[  111.703605][ T7834] 9pnet_fd: Insufficient options for proto=fd
[  111.710446][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.717573][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.726868][ T7719] bridge_slave_1: entered allmulticast mode
[  111.733712][ T7719] bridge_slave_1: entered promiscuous mode
[  111.751869][   T29] audit: type=1400 audit(1720692909.601:577): avc:  denied  { read } for  pid=7838 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  111.778191][ T7563] veth0_vlan: entered promiscuous mode
[  111.797800][ T7563] veth1_vlan: entered promiscuous mode
[  111.825358][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.836183][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.867075][ T7719] team0: Port device team_slave_0 added
[  111.874541][ T7719] team0: Port device team_slave_1 added
[  111.895189][ T7563] veth0_macvtap: entered promiscuous mode
[  111.903427][ T7563] veth1_macvtap: entered promiscuous mode
[  111.913644][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.920737][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.947125][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.970963][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.977989][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.004463][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.019360][ T7851] FAULT_INJECTION: forcing a failure.
[  112.019360][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.032578][ T7851] CPU: 0 PID: 7851 Comm: syz.3.946 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[  112.042701][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  112.052785][ T7851] Call Trace:
[  112.056087][ T7851]  <TASK>
[  112.059039][ T7851]  dump_stack_lvl+0xf2/0x150
[  112.064058][ T7851]  dump_stack+0x15/0x20
[  112.068256][ T7851]  should_fail_ex+0x229/0x230
[  112.073051][ T7851]  should_fail+0xb/0x10
[  112.077237][ T7851]  should_fail_usercopy+0x1a/0x20
[  112.082290][ T7851]  _copy_from_user+0x1e/0xd0
[  112.086913][ T7851]  restore_sigcontext+0x64/0x220
[  112.091904][ T7851]  __do_sys_rt_sigreturn+0xc5/0x150
[  112.098152][ T7851]  x64_sys_call+0x28f3/0x2d70
[  112.102913][ T7851]  do_syscall_64+0xc9/0x1c0
[  112.107580][ T7851]  ? clear_bhb_loop+0x55/0xb0
[  112.112369][ T7851]  ? clear_bhb_loop+0x55/0xb0
[  112.117178][ T7851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.123184][ T7851] RIP: 0033:0x7f8f06cb85f9
[  112.127612][ T7851] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  112.147316][ T7851] RSP: 002b:00007f8f05f9dac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  112.155969][ T7851] RAX: ffffffffffffffda RBX: 00007f8f06eaaf60 RCX: 00007f8f06cb85f9
[  112.163961][ T7851] RDX: 00007f8f05f9dac0 RSI: 00007f8f05f9dbf0 RDI: 0000000000000021
[  112.172026][ T7851] RBP: 00007f8f05f9e0a0 R08: 0000000000000000 R09: 0000000000000000
[  112.180028][ T7851] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  112.188004][ T7851] R13: 000000000000000b R14: 00007f8f06eaaf60 R15: 00007fff0f8b85a8
[  112.196147][ T7851]  </TASK>
[  112.378817][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.389528][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.399364][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.409849][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.419684][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.430433][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.440361][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.450812][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.460656][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.471449][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.481386][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.491850][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.504786][   T29] audit: type=1400 audit(1720692910.201:578): avc:  denied  { module_request } for  pid=7867 comm="syz.3.947" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  112.604754][ T7563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.632123][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.643142][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.653284][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.663839][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.673701][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.684302][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.694147][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.704629][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.714561][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.725310][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.735389][ T7563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.746102][ T7563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.760479][ T7563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.774573][ T7887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34580 sclass=netlink_route_socket pid=7887 comm=syz.1.948
[  112.775196][ T7719] hsr_slave_0: entered promiscuous mode
[  112.803254][ T7889] loop1: detected capacity change from 0 to 512
[  112.813998][ T7719] hsr_slave_1: entered promiscuous mode
[  112.821507][ T7889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  112.831691][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.839843][ T7719] Cannot create hsr debugfs directory
[  112.853510][ T7889] EXT4-fs (loop1): 1 truncate cleaned up
[  112.879508][ T7889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.882415][ T7892] loop3: detected capacity change from 0 to 1764
[  112.897635][ T7894] 9pnet_fd: Insufficient options for proto=fd
[  112.898519][ T7892] iso9660: Bad value for 'sbsector'
[  112.920108][ T7563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.928883][ T7563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.937650][ T7563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.946398][ T7563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.958292][ T7190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.985488][ T7892] skb len=10633 headroom=136 headlen=10633 tailroom=5295
[  112.985488][ T7892] mac=(136,0) mac_len=0 net=(136,20) trans=156
[  112.985488][ T7892] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0))
[  112.985488][ T7892] csum(0x350e00a0 start=160 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0)
[  112.985488][ T7892] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0
[  112.985488][ T7892] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0
[  112.985488][ T7892] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212)
[  113.035064][ T7892] dev name=veth0 feat=0x000061164fdd19e9
[  113.040746][ T7892] skb linear:   00000000: 45 02 29 89 b7 a6 00 00 0f 2f 2a 6e ac 14 14 18
[  113.049301][ T7892] skb linear:   00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52
[  113.057818][ T7892] skb linear:   00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e
[  113.066804][ T7892] skb linear:   00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76
[  113.075349][ T7892] skb linear:   00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05
[  113.084056][ T7892] skb linear:   00000050: c9 3a 19 49 46 bc 62 83 f4 32 00 00 4c 80 14 00
[  113.092598][ T7892] skb linear:   00000060: 00 00 11 00 01 00 00 00 00 00 00 00 00 00 00 00
[  113.101136][ T7892] skb linear:   00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.109675][ T7892] skb linear:   00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.118186][ T7892] skb linear:   00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.126720][ T7892] skb linear:   000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.135261][ T7892] skb linear:   000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.141048][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  113.143779][ T7892] skb linear:   000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.161075][ T7892] skb linear:   000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.169594][ T7892] skb linear:   000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.178298][ T7892] skb linear:   000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.186821][ T7892] skb linear:   00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  113.195342][ T7892] ------------[ cut here ]------------
[  113.200808][ T7892] offset+2 (13608) > skb_headlen() (10633)
[  113.206932][ T7892] WARNING: CPU: 1 PID: 7892 at net/core/dev.c:3334 skb_checksum_help+0x43b/0x450
[  113.216095][ T7892] Modules linked in:
[  113.220033][ T7892] CPU: 1 PID: 7892 Comm: syz.3.950 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[  113.230043][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  113.240141][ T7892] RIP: 0010:skb_checksum_help+0x43b/0x450
[  113.245869][ T7892] Code: 90 4c 89 ff e8 d6 f1 5e fd 41 8b 1f 4c 89 e7 e8 cb f1 5e fd 41 2b 1c 24 48 c7 c7 57 67 e1 85 48 89 ee 89 da e8 16 94 29 fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 45 fe ff ff 0f 1f 80 00 00 00 00 90
[  113.265506][ T7892] RSP: 0018:ffffc900013a7410 EFLAGS: 00010246
[  113.271602][ T7892] RAX: 627ff2df45522c00 RBX: 0000000000002989 RCX: 0000000000040000
[  113.279596][ T7892] RDX: ffffc9000f0b8000 RSI: 000000000003375d RDI: 000000000003375e
[  113.287678][ T7892] RBP: 0000000000003528 R08: ffffffff8110fcb7 R09: 0000000000000000
[  113.295682][ T7892] R10: 0001ffffffffffff R11: 0001c900013a724f R12: ffff888136bfdc74
[  113.303780][ T7892] R13: 0000000055fb430e R14: ffff888136bfdc00 R15: ffff888136bfdc70
[  113.311780][ T7892] FS:  00007f8f05f9e6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[  113.320740][ T7892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.327321][ T7892] CR2: 000000002000e000 CR3: 0000000136bf8000 CR4: 00000000003506f0
[  113.336553][ T7892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  113.344556][ T7892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  113.352566][ T7892] Call Trace:
[  113.355876][ T7892]  <TASK>
[  113.358818][ T7892]  ? __warn+0x13c/0x350
[  113.363046][ T7892]  ? report_bug+0x315/0x420
[  113.367553][ T7892]  ? skb_checksum_help+0x43b/0x450
[  113.372707][ T7892]  ? handle_bug+0x3e/0x70
[  113.377071][ T7892]  ? exc_invalid_op+0x1a/0x50
[  113.381786][ T7892]  ? asm_exc_invalid_op+0x1a/0x20
[  113.386847][ T7892]  ? __warn_printk+0x167/0x1b0
[  113.391734][ T7892]  ? skb_checksum_help+0x43b/0x450
[  113.396861][ T7892]  ip_do_fragment+0xdb/0xd00
[  113.401505][ T7892]  ? __folio_put+0x114/0x150
[  113.406114][ T7892]  ? free_large_kmalloc+0x8c/0xb0
[  113.411181][ T7892]  ? __slab_free+0x67/0x2b0
[  113.415707][ T7892]  ? __pfx_ip_finish_output2+0x10/0x10
[  113.421223][ T7892]  ip_fragment+0xd2/0x140
[  113.425579][ T7892]  ip_finish_output+0x1c4/0x2a0
[  113.430484][ T7892]  ip_output+0xab/0x170
[  113.434755][ T7892]  ? __pfx_ip_finish_output+0x10/0x10
[  113.440166][ T7892]  ? __pfx_ip_output+0x10/0x10
[  113.444953][ T7892]  ip_local_out+0xab/0xd0
[  113.449324][ T7892]  iptunnel_xmit+0x33f/0x460
[  113.453954][ T7892]  ip_tunnel_xmit+0x1685/0x1740
[  113.458874][ T7892]  ipgre_xmit+0x5f4/0x6d0
[  113.463218][ T7892]  dev_hard_start_xmit+0x119/0x3f0
[  113.468337][ T7892]  __dev_queue_xmit+0xf83/0x1e50
[  113.473312][ T7892]  ? __dev_queue_xmit+0x161/0x1e50
[  113.478441][ T7892]  packet_xmit+0x4b/0x1e0
[  113.482819][ T7892]  packet_sendmsg+0x2ae1/0x3320
[  113.487693][ T7892]  ? selinux_socket_sendmsg+0x182/0x1b0
[  113.493294][ T7892]  ? __pfx_packet_sendmsg+0x10/0x10
[  113.498518][ T7892]  __sock_sendmsg+0x140/0x180
[  113.503246][ T7892]  ____sys_sendmsg+0x312/0x410
[  113.508029][ T7892]  __sys_sendmsg+0x1e9/0x280
[  113.512653][ T7892]  ? futex_wait+0x18e/0x1c0
[  113.517200][ T7892]  __x64_sys_sendmsg+0x46/0x50
[  113.522019][ T7892]  x64_sys_call+0xb25/0x2d70
[  113.526636][ T7892]  do_syscall_64+0xc9/0x1c0
[  113.531194][ T7892]  ? clear_bhb_loop+0x55/0xb0
[  113.535903][ T7892]  ? clear_bhb_loop+0x55/0xb0
[  113.540616][ T7892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.546543][ T7892] RIP: 0033:0x7f8f06d1cbd9
[  113.551005][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.570798][ T7892] RSP: 002b:00007f8f05f9e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.579275][ T7892] RAX: ffffffffffffffda RBX: 00007f8f06eaaf60 RCX: 00007f8f06d1cbd9
[  113.587270][ T7892] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000005
[  113.595286][ T7892] RBP: 00007f8f06d8be60 R08: 0000000000000000 R09: 0000000000000000
[  113.603285][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.611290][ T7892] R13: 000000000000000b R14: 00007f8f06eaaf60 R15: 00007fff0f8b85a8
[  113.621816][ T7892]  </TASK>
[  113.624830][ T7892] ---[ end trace 0000000000000000 ]---
[  113.650255][ T7190] ==================================================================
[  113.658404][ T7190] BUG: KCSAN: data-race in fsnotify_event_needs_parent / fsnotify_put_mark
[  113.667060][ T7190] 
[  113.669482][ T7190] write to 0xffff888101229764 of 4 bytes by task 4667 on cpu 1:
[  113.677216][ T7190]  fsnotify_put_mark+0x2d8/0x5d0
[  113.682187][ T7190]  __se_sys_inotify_rm_watch+0x105/0x180
[  113.687862][ T7190]  __x64_sys_inotify_rm_watch+0x31/0x40
[  113.693439][ T7190]  x64_sys_call+0x1b06/0x2d70
[  113.698141][ T7190]  do_syscall_64+0xc9/0x1c0
[  113.702679][ T7190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.708611][ T7190] 
[  113.710944][ T7190] read to 0xffff888101229764 of 4 bytes by task 7190 on cpu 0:
[  113.718504][ T7190]  fsnotify_event_needs_parent+0x47/0x100
[  113.724256][ T7190]  __fsnotify_parent+0x178/0x370
[  113.730093][ T7190]  __fput+0x5ca/0x6f0
[  113.734099][ T7190]  __fput_sync+0x44/0x60
[  113.738363][ T7190]  __se_sys_close+0x101/0x1b0
[  113.743067][ T7190]  __x64_sys_close+0x1f/0x30
[  113.747675][ T7190]  x64_sys_call+0x25f1/0x2d70
[  113.752382][ T7190]  do_syscall_64+0xc9/0x1c0
[  113.756912][ T7190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.762840][ T7190] 
[  113.765173][ T7190] value changed: 0x00002008 -> 0x00000000
[  113.770993][ T7190] 
[  113.773324][ T7190] Reported by Kernel Concurrency Sanitizer on:
[  113.779480][ T7190] CPU: 0 PID: 7190 Comm: syz-executor Tainted: G        W          6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0
[  113.791214][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  113.801377][ T7190] ==================================================================
[  114.066870][ T7719] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  114.075559][ T7719] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  114.084570][ T7719] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  114.094010][ T7719] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  114.140809][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.155864][ T7719] 8021q: adding VLAN 0 to HW filter on device team0
[  114.166480][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.173602][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.190071][ T3232] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.197180][ T3232] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.222286][ T7719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  114.232717][ T7719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.308814][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.460737][ T7719] veth0_vlan: entered promiscuous mode
[  114.470612][ T7719] veth1_vlan: entered promiscuous mode
[  114.492287][ T7719] veth0_macvtap: entered promiscuous mode
[  114.500929][ T7719] veth1_macvtap: entered promiscuous mode
[  114.515717][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.526350][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.536373][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.546847][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.556745][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.567397][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.577278][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.588483][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.598447][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.609001][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.618894][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.629365][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.639290][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.649758][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.667238][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.682421][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.693206][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.703145][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.713683][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.723808][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.734542][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.744426][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.755068][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.764913][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.775389][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.785253][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.795742][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.805641][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.816075][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.827432][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.837770][ T7719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.846768][ T7719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.855752][ T7719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.868221][ T7719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0