last executing test programs:

9.095184035s ago: executing program 3 (id=1396):
creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x11, &(0x7f0000000180)={[{@norecovery}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {}, {@nombcache}]}, 0x6, 0x5fa, &(0x7f00000004c0)="$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")

4.146464478s ago: executing program 4 (id=1422):
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0)
close(0xffffffffffffffff)
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x11, &(0x7f0000000180)={[{@norecovery}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {}, {@nombcache}]}, 0x6, 0x5fa, &(0x7f00000004c0)="$eJzs3c1vVFUbAPDn3k4/aN/XFmJUXEgTYyBRWlrAEGMi7AnBj52rSgtBCiW0RosklgQ3JsaNCxNXLsT/QkncunDrwo0rQ0KMYSGGyJg7vVOn05nSTjsfzPx+yaXn3Mvc89zC03Pn9Jw7AfSs8eyPNGJ/RFxNIkYrjhUiPzi++vfu/3njXLYlUSy+/UcSNz5JVirPleRfR/IX/zMayc9pxL6+je0uLl+/NDM/P3ctr08uXb46ubh8/fDFyzMX5i7MXZl+dfrE8WPHT0wd2dH1FSrKp2+9/+HoZ2fe/fbrh8nUd7+eSeJkPMpjy66r+rWDO2o5+56NR3HVg+qYTuzw3J3ir9H13+NMUr2DjnU+///YHxHPxmj0Vfxrjsanb7Y1OKCpikmU+yig5yQN5f/Q7gcCtFj5PqD83r7W++CN0ibflQCtcO/U6gDAau73R0Q5/wurY4MxVBobGL6frBvnSSJiZyNzq7I2fvrxzK1sizrjcEBzrNwsj3JX9/9JKTfHYqhUG76frsv/tGLL9r/VYPvjVXX5D62zcjMinsv7/4HYVv6PV+T/ew22L/8BAAAAAABg99w5FRGv1Jr/l67N/xmoMf9nJCJO7kL7j//9X3o3LyS70BxQ4d6piNdrzv9dm+M71pfX/l+aD9CfnL84P3ckIp6KiEPRP5jVp6rOWzlD+PDn+76q137l/L9sy9ovzwXMz3S3ULUQd3ZmaWan1w1E3LsZ8Xxp/u+BfM/6+T9Z/5/U6P+z/L66xTb2vXT7bL1jj89/oFmK30QcrNn//3e7nWz+fI7J0v3AZPmuYKMXPv7i+3rty39on6z/H948/weTyuf1LG7v/AMRcXS5UKx3vNH7/4Hknb7y+TMfzSwtXZuKGEhOb9w/vb2YoVuV86GcL1n+H3px8/G/tfv/ijzcExErW2zzmUcjv9U7pv+H9snyf3bz/n9sff+//cL07bEf6rV/dkv9/7FSn34o32P8DyptfB7HVhO0LeECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBMujYj/RZJOrJXTdGIiYiQino7hdH5hcenl8wsfXJnNjpU+/z8tf9Lv6Go9KX/+/1hFfbqqfjQi9kbEl317SvWJcwvzs+2+eAAAAAAAAAAAAAAAAAAAAOgQI6U1/8XB6vX/md/72h0d0HSF/Kt8h95TaPiVxcFdDQRoucbzH3jSbT3/+5saB9B69fP/wcNiSUvDAVrI/T/0rgbz368LoAvo/6FXbXFMb6jZcQDtoP8HAAAAAICusvfAnV+SiFh5bU9pywzkx0z2h+6WtjsAoG3M4YXeVVhodwRAu3iPDyRrpb9rLvavP/s/aU5AAAAAAAAAAAAAAMAGB/db/w+9avP1/+b2QzfbZP1/reT3uADoIvU/+kPfD93Oe3zgcb299f8AAAAAAAAAAAAA0AGGrl+amZ+fu7a4/OQV3uiMMLZXWJnpiDB2tfCoOWfuj4jOuMBWF8qP4GhjGG3+uQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz5NwAA//+Ysid/")

3.700123557s ago: executing program 4 (id=1423):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)

3.679584478s ago: executing program 4 (id=1424):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b702000014fa0000b70300000000080085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x30, 0x0, 0x0, 0xee01}, {}, {}, 0x4}}, 0xb8}}, 0x8004)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0)

3.65613217s ago: executing program 4 (id=1425):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000780)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@nodiscard}]}, 0x8, 0x61f, &(0x7f00000008c0)="$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")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x2a0809a, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32], 0xd, 0x2be, &(0x7f0000000f00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x60, 0x0)

3.561243049s ago: executing program 4 (id=1426):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)

2.906685386s ago: executing program 3 (id=1397):
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x11, &(0x7f0000000180)={[{@norecovery}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {}, {@nombcache}]}, 0x6, 0x5fa, &(0x7f00000004c0)="$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")

1.932103891s ago: executing program 3 (id=1442):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
syz_open_dev$usbfs(&(0x7f00000013c0), 0x40, 0x20000)
socket$phonet_pipe(0x23, 0x5, 0x2)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
mount$9p_fd(0x0, 0x0, 0x0, 0x140000, &(0x7f0000001640)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_cancel(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
unlink(&(0x7f0000000100)='./file1\x00')

1.83356611s ago: executing program 1 (id=1405):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
close(r0)

1.742494998s ago: executing program 3 (id=1443):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
unshare(0x68040200)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000940)={0x1, 0x0, 0x1a, 0x14, 0x1c0, &(0x7f0000000540)})
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
getpid()
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r6, 0x209, 0x70bd25, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}}, 0x0)

1.661632175s ago: executing program 3 (id=1444):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000780)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@nodiscard}]}, 0x8, 0x61f, &(0x7f00000008c0)="$eJzs3c9vE1ceAPDv2PlFsrsJaLW77GGJtFqBtEtCAqxQValwR4j+uPWUkoAogaAkVRuK1CDRS6Wqlx4q9dRD6X/RIvXaQ6899NJThYQqlEOpUHE147FxHDtxjB2H5PMRg+fNs+e9SfLNe355bxzAvjWe/leIOBwRN5OI0Zq8vsgzx8vPW3t0+9Lao/RYqfT6L0nc/iBZrT1Xkj+O5C/+fTSS7wsRh4oby11auXVtZn5+bjFPTy5fvzm5tHLr+NXrM1fmrszdmP7/9JnTp06fmTrR/sUVs39V5+++/e7oRxfe/PLzJ8nUVz9eSOJsPM2fkF5b/csH2y85Mx7jUSp7XHs8/bqeec5z7xa/jlZ+Tp5J6g+wa13Ofx77I+LvMRrFmu/maHz4ak8rB3RVKYlKGwXsO0lb8T/U+YoAO6zSDyi/ty9vW/caCl3ulQA74eG58gBAOfb7I6IS/33lscEYysYGhteSdeM8SUQ8x8hcVVrGd99euJtuUTcO12DYEOig1TuVUe769j/JYnMshrLU8FphXfwXarb0+Gttlj9el26t/wF0wuqdiPhH3v4PxLbif7wm/t9qs3zxDwAAAAAAAJ1z/1xE/K/R/L9Cdf7PQIP5PyMRcbYD5W/997/Cg3wn6UBxQI2H5yJebjj/tzrHd6yYp/6czQfoTy5fnZ87ERF/iYhj0T+Ypqfqzls7Q/j4x4c+a1Z+7fy/dEvLr8wFzM/0oK9uIe7szPLM8143EPHwTsQ/s/m/R/Ij6+f/pO1/0qD9T+P7ZotlHPrPvYvN8raOf6BbSl9EHG3Y/j/rbieb359jMusPTFZ6BRv96/1Pvm5WvviH3knb/+HN438wqb1fz9L2zj8QESdX+krN8tvt/w8kbxRjNTt/ZRHj8uJUxEByvlgpN/XezPLy4vT26gx7VSUessepcvwf+/fm43/V/n9NHB6IiNUWy/zb05GfmuVp/6F30vif3bz9H1vf/m9/Z/re2DdNik8uttT+n8ra9GP5EeN/UGvj/ThaDdCeVBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXnCFiPhTJIWJ6n6hMDERMRIRf43hwvzC0vJ/Ly+8c2M2zcs+/79Q+aTf0XI6qXz+/1hE9EdEmp7O05X8kxFxMCI+LR7I0hOXFuZne33xAAAAAAAAAAAAAAAAAAAAsEuMZGv+S4P16/9TPxd7XTug6/ryR/EO+09f268sDXa0IsCOaz/+gRdd6/Hf39V6ADuvefw/flLK7Gh1gB2k/w/7V5vx788FsAdo/2G/anFMb6jb9QB6QfsPAAAAAAB7ysEj939IImL1pQPZlhrI80z2h72t0OsKAD1jDi/sX30Lva4B0Cve4wNJde+3hov9m8/+T7pTIQAAAAAAAAAAAABgg6OHrf+H/Wrz9f/m9sNetsn6/0bB73YBsIc0/+gPbT/sdd7jA8kWvwis/wcAAAAAAAAAAACAXWDo1rWZ+fm5xaWVF2/nlTZeNdjryq/O7IYvXWd3nnbnzP0RsTsusFM7SUS08uTKLTh6WNUe/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACq/ggAAP//5y0ltw==")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x2a0809a, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32], 0xd, 0x2be, &(0x7f0000000f00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x60, 0x0)

1.660993135s ago: executing program 1 (id=1445):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008c000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.613876419s ago: executing program 3 (id=1446):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r4 = dup(r3)
write$cgroup_pid(r4, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
name_to_handle_at(r4, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="1c00000082000000ff03000000000000dcb90000000000001b08000000000000030000007f766e60bc842b1475bfabd6f9453910a0e8b641f0fe466874ae270542da71c460c634565b09e557bd075fdf36da0c504f69c052e70695f8284ec65a2c6c3458ad1149d0df0b7fce69617c3b1da37db81cfe15ee941eae7e3ef4364c7f1feb90a11de27af636bb7aa535f8d01bcd9d693a7c9bd5acbb80cc0d4db335ec66b9ce4536ca1900273c2ec24e772e8828f7b8fe88"], &(0x7f0000000400), 0x1000)

1.584255192s ago: executing program 1 (id=1447):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000995000/0x1000)=nil, 0x1000, 0x53214d095a103b32, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.527329397s ago: executing program 4 (id=1448):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x8001, 0x200, r0, 0xffffffc0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='jbd2_checkpoint\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)
close(0xffffffffffffffff)

1.445715254s ago: executing program 2 (id=1451):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000048000000030a0102000000000000000001000000080007006e6174000900030073796031000000000900010073797a3000000000140004800800024000000000080001"], 0x90}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x4}, 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r4, &(0x7f0000000340)="f6500eab22067627eafad8b9c3838634a91393d387553abf1abb77d4a5044418159b6028f3ce0e368630e256a6576f482efcf87169006fdab67fc1cf9337f3da4f25f935bec4d6e384cd3f0f065a8a5309a1a2c6207769fb0bac5dbc07e76e24718c73517446f9c0467e30fb95ed12c37c02d1c02d5893a5880f5859e0f3cd46a32b652bd67b8aa1a5c3e6ceac15a5ff547af8c8a13c3d56acf8213991809939d0cd3f495046bba282ad8417a2b42466680414ca7389c1e59a591e618afd7b06d360a357ebe746afafac43", 0xcb, 0xfc39ab5b82c6a957, &(0x7f0000000200)={0x2, 0x0, @local, 0x2}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bind$inet6(r2, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r7)
preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r8, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x80000000}}, 0x24)
sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0)

1.38144848s ago: executing program 2 (id=1452):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r4}, 0x10)
renameat2(r2, &(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0)

1.37849719s ago: executing program 1 (id=1453):
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000002680))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000088000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
r5 = memfd_secret(0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], 0x0}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, r5, 0x2e, 0x4608, @void}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000d80)='R', 0x1, 0x8000, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
sendto$inet6(r7, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYRES32=r6])

1.270188539s ago: executing program 2 (id=1455):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
syz_open_dev$usbfs(&(0x7f00000013c0), 0x40, 0x20000)
socket$phonet_pipe(0x23, 0x5, 0x2)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
mount$9p_fd(0x0, 0x0, 0x0, 0x140000, &(0x7f0000001640)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_cancel(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x0})

1.180122947s ago: executing program 1 (id=1456):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000780)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@nodiscard}]}, 0x8, 0x61f, &(0x7f00000008c0)="$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")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x2a0809a, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32], 0xd, 0x2be, &(0x7f0000000f00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x60, 0x0)

1.082288185s ago: executing program 1 (id=1457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008c000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

995.306553ms ago: executing program 2 (id=1458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000ffff6401010214000200ff0200000000000000000000000000010800080036020000"], 0x48}}, 0x8080)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_io_uring_setup(0x616f, &(0x7f0000000780)={0x0, 0x4fe0, 0x10100, 0xfffffffd, 0x59}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1000000000000050})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)
epoll_create1(0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r5, 0xc0189436, 0x1ffffffe)

935.474998ms ago: executing program 2 (id=1459):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x6c03)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="1c00000082000000ff03000000000000dcb90000000000001b08000000000000030000007f766e60bc842b1475bfabd6f9453910a0e8b641f0fe466874ae270542da71c460c634565b09e557bd075fdf36da0c504f69c052e70695f8284ec65a2c6c3458ad1149d0df0b7fce69617c3b1da37db81cfe15ee941eae7e3ef4364c7f1feb90a11de27af636bb7aa535f8d01bcd9d693a7c9bd5acbb80cc0d4db335ec66b9ce4536ca1900273c2ec24e772e8828f7b8fe88"], &(0x7f0000000400), 0x1000)

935.263188ms ago: executing program 2 (id=1460):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
splice(r2, 0x0, r3, 0x0, 0x7151, 0x0)

427.442023ms ago: executing program 0 (id=1463):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

409.680455ms ago: executing program 0 (id=1464):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x8001, 0x200, r0, 0xffffffc0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='jbd2_checkpoint\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)
close(r9)

317.141683ms ago: executing program 0 (id=1465):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000b40)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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")

209.536372ms ago: executing program 0 (id=1466):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x3f2, 0x2, 0x70bd29, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

185.660384ms ago: executing program 0 (id=1467):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r7}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800)
renameat2(r2, &(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0)

0s ago: executing program 0 (id=1468):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000995000/0x1000)=nil, 0x1000, 0x53214d095a103b32, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa5fee9cef9 code=0x7ffc0000
[  124.760816][   T29] audit: type=1326 audit(1725603558.896:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5fee9cf33 code=0x7ffc0000
[  124.813553][   T29] audit: type=1326 audit(1725603558.906:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5fee9b9df code=0x7ffc0000
[  124.820567][ T8876] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  124.836825][   T29] audit: type=1326 audit(1725603558.906:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa5fee9cf87 code=0x7ffc0000
[  124.869938][   T29] audit: type=1326 audit(1725603558.906:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5fee9b890 code=0x7ffc0000
[  124.895875][ T8876] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  124.933905][ T8876] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #4: comm syz.1.880: blocks 32-33 from inode overlap system zone
[  124.957173][ T8779] hsr_slave_0: entered promiscuous mode
[  124.973384][ T8876] EXT4-fs (loop1): failed to initialize system zone (-117)
[  124.983315][ T8876] EXT4-fs (loop1): mount failed
[  125.018832][ T8779] hsr_slave_1: entered promiscuous mode
[  125.038779][ T8779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.051864][ T8779] Cannot create hsr debugfs directory
[  125.281074][ T1644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.376006][ T1644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.385677][ T8908] loop4: detected capacity change from 0 to 1024
[  125.464052][ T1644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.522133][ T8779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.545174][ T8779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.553385][ T8937] loop1: detected capacity change from 0 to 1024
[  125.554452][ T8779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.568809][ T8779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.572907][ T8937] EXT4-fs: Ignoring removed orlov option
[  125.581297][ T8937] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.603867][ T1644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.737806][ T8906] chnl_net:caif_netlink_parms(): no params data found
[  125.782543][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.802710][ T8779] 8021q: adding VLAN 0 to HW filter on device team0
[  125.840660][ T8962] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  125.845188][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.856824][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.873903][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  125.901154][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.908242][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.920472][ T8910] chnl_net:caif_netlink_parms(): no params data found
[  125.972849][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.979979][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.992556][ T8906] bridge_slave_0: entered allmulticast mode
[  125.999480][ T8906] bridge_slave_0: entered promiscuous mode
[  126.012901][ T1644] bridge_slave_1: left allmulticast mode
[  126.018574][ T1644] bridge_slave_1: left promiscuous mode
[  126.024428][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.033938][ T1644] bridge_slave_0: left allmulticast mode
[  126.039758][ T1644] bridge_slave_0: left promiscuous mode
[  126.045408][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.138930][ T1644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.149195][ T1644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.161573][ T1644] bond0 (unregistering): Released all slaves
[  126.169945][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.177096][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.184315][ T8906] bridge_slave_1: entered allmulticast mode
[  126.191437][ T8906] bridge_slave_1: entered promiscuous mode
[  126.207518][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  126.236899][ T8906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.250637][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.257819][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.264960][ T8910] bridge_slave_0: entered allmulticast mode
[  126.271436][ T8910] bridge_slave_0: entered promiscuous mode
[  126.278881][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.286076][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.293325][ T8910] bridge_slave_1: entered allmulticast mode
[  126.299708][ T8910] bridge_slave_1: entered promiscuous mode
[  126.308744][ T1644] hsr_slave_0: left promiscuous mode
[  126.314435][ T1644] hsr_slave_1: left promiscuous mode
[  126.320471][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.328008][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.335780][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.343194][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.352006][ T1644] veth1_macvtap: left promiscuous mode
[  126.357595][ T1644] veth0_macvtap: left promiscuous mode
[  126.363072][ T1644] veth1_vlan: left promiscuous mode
[  126.368331][ T1644] veth0_vlan: left promiscuous mode
[  126.441001][ T1644] team0 (unregistering): Port device team_slave_1 removed
[  126.451768][ T1644] team0 (unregistering): Port device team_slave_0 removed
[  126.485330][ T8906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.519622][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.530252][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.544572][ T8906] team0: Port device team_slave_0 added
[  126.551297][ T8906] team0: Port device team_slave_1 added
[  126.575051][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.582045][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.608019][ T8906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.620606][ T8910] team0: Port device team_slave_0 added
[  126.629378][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.636521][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.662488][ T8906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.702017][ T8910] team0: Port device team_slave_1 added
[  126.725013][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.732147][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.758209][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.794559][ T9036] loop1: detected capacity change from 0 to 512
[  126.810470][ T9036] EXT4-fs (loop1): failed to initialize system zone (-117)
[  126.817383][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.817744][ T9036] EXT4-fs (loop1): mount failed
[  126.824602][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.855736][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.874967][ T8906] hsr_slave_0: entered promiscuous mode
[  126.882143][ T8906] hsr_slave_1: entered promiscuous mode
[  126.889165][ T8906] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.899327][ T8906] Cannot create hsr debugfs directory
[  126.927145][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.006882][ T8910] hsr_slave_0: entered promiscuous mode
[  127.026345][ T8910] hsr_slave_1: entered promiscuous mode
[  127.032435][ T8910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.045755][ T8910] Cannot create hsr debugfs directory
[  127.138656][ T1644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.198835][ T9066] loop4: detected capacity change from 0 to 1024
[  127.206432][ T1644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.275096][ T1644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.294294][ T8779] veth0_vlan: entered promiscuous mode
[  127.317006][ T8779] veth1_vlan: entered promiscuous mode
[  127.343986][ T1644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.369127][ T8779] veth0_macvtap: entered promiscuous mode
[  127.384709][ T8779] veth1_macvtap: entered promiscuous mode
[  127.427650][ T1644] bridge_slave_1: left allmulticast mode
[  127.433340][ T1644] bridge_slave_1: left promiscuous mode
[  127.439052][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.449512][ T1644] bridge_slave_0: left allmulticast mode
[  127.455184][ T1644] bridge_slave_0: left promiscuous mode
[  127.461055][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.578746][ T1644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.590779][ T1644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.603292][ T1644] bond0 (unregistering): Released all slaves
[  127.613385][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.623913][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.633820][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.644484][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.654303][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.664720][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.674542][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.685203][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.695833][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.720868][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.731383][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.741331][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.751883][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.761720][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.772285][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.784672][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.794912][ T8779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.803708][ T8779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.812512][ T8779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.821268][ T8779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.862011][ T9095] loop4: detected capacity change from 0 to 1024
[  127.878811][ T9095] EXT4-fs: Ignoring removed orlov option
[  127.884610][ T9095] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.031071][ T1644] hsr_slave_0: left promiscuous mode
[  128.042887][ T1644] hsr_slave_1: left promiscuous mode
[  128.051847][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.060080][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.090807][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.098301][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.099344][ T9123] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  128.124396][ T1644] veth1_macvtap: left promiscuous mode
[  128.129957][ T1644] veth0_macvtap: left promiscuous mode
[  128.135488][ T1644] veth1_vlan: left promiscuous mode
[  128.140752][ T1644] veth0_vlan: left promiscuous mode
[  128.156587][ T9128] loop4: detected capacity change from 0 to 1024
[  128.165570][ T9128] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  128.178624][ T9128] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  128.198126][ T9128] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  128.219568][ T8146] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  128.248296][ T8146] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  128.262227][ T8146] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  128.294443][ T1644] team0 (unregistering): Port device team_slave_1 removed
[  128.305575][ T9133] vhci_hcd: invalid port number 63
[  128.311678][ T1644] team0 (unregistering): Port device team_slave_0 removed
[  128.347352][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'.
[  128.441928][ T8906] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  128.451860][ T8906] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  128.462271][ T8906] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  128.471156][ T8906] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  128.518667][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.531403][ T8906] 8021q: adding VLAN 0 to HW filter on device team0
[  128.554102][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.561274][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.566466][ T8146] EXT4-fs unmount: 107 callbacks suppressed
[  128.566478][ T8146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.586621][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.593699][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.625402][ T9161] loop2: detected capacity change from 0 to 128
[  128.628768][ T8906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.640492][ T9161] vfat: Unknown parameter ''
[  128.642000][ T8906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.668310][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.905'.
[  128.798087][ T8906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.836555][ T8910] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  128.843734][ T9180] loop1: detected capacity change from 0 to 1024
[  128.853227][ T8910] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  128.862215][ T9180] EXT4-fs: Ignoring removed orlov option
[  128.867990][ T9180] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.880677][ T1644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.896054][ T8910] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  128.908205][ T9180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.909748][ T8910] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.040607][ T1644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.088377][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.103636][ T1644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.159206][ T1644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.188339][ T8906] veth0_vlan: entered promiscuous mode
[  129.204218][ T8910] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.221703][ T8910] 8021q: adding VLAN 0 to HW filter on device team0
[  129.238783][ T9166] chnl_net:caif_netlink_parms(): no params data found
[  129.252511][ T8906] veth1_vlan: entered promiscuous mode
[  129.271840][ T1749] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.279063][ T1749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.299679][ T1644] bridge_slave_1: left allmulticast mode
[  129.305424][ T1644] bridge_slave_1: left promiscuous mode
[  129.311091][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.319667][ T1644] bridge_slave_0: left allmulticast mode
[  129.325374][ T1644] bridge_slave_0: left promiscuous mode
[  129.331221][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.391857][ T9249] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  129.439584][ T1644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.450334][ T1644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.461903][ T1644] bond0 (unregistering): Released all slaves
[  129.479250][ T8906] veth0_macvtap: entered promiscuous mode
[  129.503697][ T9262] loop2: detected capacity change from 0 to 512
[  129.504577][ T1749] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.517139][ T1749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.525821][ T9262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  129.548422][ T9262] EXT4-fs (loop2): 1 truncate cleaned up
[  129.555999][ T1644] hsr_slave_0: left promiscuous mode
[  129.562260][ T1644] hsr_slave_1: left promiscuous mode
[  129.562577][ T9262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.582114][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.589623][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.600744][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.608262][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.617909][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.627712][ T1644] veth1_macvtap: left promiscuous mode
[  129.633227][ T1644] veth0_macvtap: left promiscuous mode
[  129.638772][ T1644] veth1_vlan: left promiscuous mode
[  129.644085][ T1644] veth0_vlan: left promiscuous mode
[  129.645567][ T9277] loop2: detected capacity change from 0 to 1024
[  129.691780][ T9277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.730351][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  129.730365][   T29] audit: type=1326 audit(1725603564.016:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.762908][   T29] audit: type=1326 audit(1725603564.016:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.786497][   T29] audit: type=1326 audit(1725603564.016:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.810226][   T29] audit: type=1326 audit(1725603564.016:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.833725][   T29] audit: type=1326 audit(1725603564.016:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.857257][   T29] audit: type=1326 audit(1725603564.016:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.880946][   T29] audit: type=1326 audit(1725603564.016:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.904543][   T29] audit: type=1326 audit(1725603564.016:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f51cb03cef9 code=0x7ffc0000
[  129.928092][   T29] audit: type=1326 audit(1725603564.016:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51cb03cf33 code=0x7ffc0000
[  129.951396][   T29] audit: type=1326 audit(1725603564.026:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51cb03b9df code=0x7ffc0000
[  129.982932][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.021596][ T1644] team0 (unregistering): Port device team_slave_1 removed
[  130.033070][ T1644] team0 (unregistering): Port device team_slave_0 removed
[  130.068737][ T9297] loop2: detected capacity change from 0 to 512
[  130.078897][ T8906] veth1_macvtap: entered promiscuous mode
[  130.085011][ T9297] EXT4-fs (loop2): failed to initialize system zone (-117)
[  130.094387][ T9297] EXT4-fs (loop2): mount failed
[  130.103283][ T9298] pimreg: entered allmulticast mode
[  130.127663][ T9291] loop1: detected capacity change from 0 to 512
[  130.144461][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.151598][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.161700][ T9166] bridge_slave_0: entered allmulticast mode
[  130.168048][ T9291] EXT4-fs (loop1): orphan cleanup on readonly fs
[  130.174832][ T9291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.915: bg 0: block 248: padding at end of block bitmap is not set
[  130.189744][ T9166] bridge_slave_0: entered promiscuous mode
[  130.200642][ T8910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.211158][ T8910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.222955][ T9291] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.915: Failed to acquire dquot type 1
[  130.234701][ T9291] EXT4-fs (loop1): 1 truncate cleaned up
[  130.243330][ T9291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  130.261623][ T8906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.272195][ T8906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.282174][ T8906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.292770][ T8906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.302590][ T8906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.313010][ T8906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.325663][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.339003][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.346200][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.362345][ T9166] bridge_slave_1: entered allmulticast mode
[  130.371883][ T9166] bridge_slave_1: entered promiscuous mode
[  130.385906][ T8906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.396387][ T8906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.406220][ T8906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.416771][ T8906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.439813][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.447161][ T9291] pimreg: left allmulticast mode
[  130.496754][ T8906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.505580][ T8906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.514386][ T8906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.523223][ T8906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.532977][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.574346][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.601784][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.617285][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.682718][ T9166] team0: Port device team_slave_0 added
[  130.705681][ T9166] team0: Port device team_slave_1 added
[  130.747491][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.754523][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.780710][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.796956][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.803986][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.830296][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.891192][ T9166] hsr_slave_0: entered promiscuous mode
[  130.901111][ T9166] hsr_slave_1: entered promiscuous mode
[  130.904199][ T9353] loop0: detected capacity change from 0 to 1024
[  130.923133][ T8910] veth0_vlan: entered promiscuous mode
[  130.949012][ T9353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.971766][ T8910] veth1_vlan: entered promiscuous mode
[  130.996025][ T8906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.006060][ T8910] veth0_macvtap: entered promiscuous mode
[  131.013215][ T8910] veth1_macvtap: entered promiscuous mode
[  131.075288][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.085929][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.095756][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.106274][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.116232][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.126791][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.136706][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.147149][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.159395][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.169224][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.179868][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.189799][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.200478][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.210677][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.221196][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.256386][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.271592][ T8910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.280617][ T8910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.289463][ T8910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.298265][ T8910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.455216][ T9166] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.474744][ T9398] loop1: detected capacity change from 0 to 1024
[  131.496756][ T9166] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  131.512371][ T9398] EXT4-fs: Ignoring removed orlov option
[  131.518555][ T9398] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.533701][ T9166] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.569963][ T9398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.578854][ T9166] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  131.583679][ T9409] Illegal XDP return value 4291391488 on prog  (id 695) dev N/A, expect packet loss!
[  131.633369][ T9414] veth1_macvtap: mtu less than device minimum
[  131.665544][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.698992][ T9166] 8021q: adding VLAN 0 to HW filter on device team0
[  131.712389][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.736114][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.743264][ T1847] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.784838][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.792104][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.984835][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.303805][ T9166] veth0_vlan: entered promiscuous mode
[  132.337753][ T9166] veth1_vlan: entered promiscuous mode
[  132.387798][ T9166] veth0_macvtap: entered promiscuous mode
[  132.413981][ T9166] veth1_macvtap: entered promiscuous mode
[  132.451468][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.461945][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.471870][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.482439][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.492538][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.503245][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.513212][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.523638][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.533453][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.543905][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.622890][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.648664][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.659225][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.669061][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.679641][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.689481][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.700011][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.709827][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.720382][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.735464][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.775050][ T9166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.783847][ T9166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.792581][ T9166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.801650][ T9166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.969886][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.972916][ T9554] loop4: detected capacity change from 0 to 512
[  132.986437][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.007354][ T9554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.020165][ T9554] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.054677][ T9166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.664389][ T9565] capability: warning: `syz.1.964' uses deprecated v2 capabilities in a way that may be insecure
[  134.331697][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.384687][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.385910][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.401937][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.436607][ T9580] pim6reg1: entered promiscuous mode
[  134.438915][ T9570] loop4: detected capacity change from 0 to 1024
[  134.441922][ T9580] pim6reg1: entered allmulticast mode
[  134.463541][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.510506][ T9585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.545963][ T9585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.751932][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  134.751946][   T29] audit: type=1400 audit(1725603569.036:4660): avc:  denied  { mounton } for  pid=9571 comm="syz.3.967" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  134.963945][ T9598] syz.0.976[9598] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.964039][ T9598] syz.0.976[9598] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.995619][   T29] audit: type=1400 audit(1725603569.276:4661): avc:  denied  { load_policy } for  pid=9597 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  135.030244][ T9598] SELinux: failed to load policy
[  135.669281][   T29] audit: type=1326 audit(1725603569.956:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  135.692993][   T29] audit: type=1326 audit(1725603569.956:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  135.757797][   T29] audit: type=1326 audit(1725603569.956:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  135.757829][   T29] audit: type=1326 audit(1725603569.956:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  135.757851][   T29] audit: type=1326 audit(1725603569.956:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  135.757870][   T29] audit: type=1326 audit(1725603569.956:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  135.777208][   T29] audit: type=1326 audit(1725603570.046:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9977cef9 code=0x7ffc0000
[  135.876989][   T29] audit: type=1326 audit(1725603570.086:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9977cef9 code=0x7ffc0000
[  135.903572][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.903714][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.903956][ T9618] bridge0: entered allmulticast mode
[  136.019594][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.037407][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.260311][ T9640] loop2: detected capacity change from 0 to 512
[  136.313805][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.326551][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.338918][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.351281][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.363769][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.377259][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.389820][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.402619][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.415372][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.427794][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.994
[  136.504388][ T9649] loop2: detected capacity change from 0 to 512
[  136.518568][ T9649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.531225][ T9649] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.550511][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.584173][ T9656] loop2: detected capacity change from 0 to 512
[  136.592112][ T9656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  136.609578][ T9656] EXT4-fs (loop2): 1 truncate cleaned up
[  136.617421][ T9656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.649085][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.276545][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  137.397417][ T9166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.450465][ T9718] loop0: detected capacity change from 0 to 512
[  137.464623][ T9718] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  137.472949][ T9718] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1024: invalid indirect mapped block 8 (level 2)
[  137.488141][ T9718] EXT4-fs (loop0): Remounting filesystem read-only
[  137.494843][ T9718] EXT4-fs (loop0): 1 truncate cleaned up
[  137.501165][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.513788][ T9718] SELinux: (dev loop0, type ext4) getxattr errno 5
[  137.520845][ T9718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.546190][ T9718] loop0: detected capacity change from 0 to 2048
[  137.552731][ T9718] EXT4-fs: Ignoring removed bh option
[  137.558174][ T9718] EXT4-fs: Ignoring removed nomblk_io_submit option
[  137.564794][ T9718] EXT4-fs: Ignoring removed nobh option
[  137.600718][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.651970][ T8906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.805424][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  138.916194][ T9780] loop1: detected capacity change from 0 to 512
[  138.934128][ T9780] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  138.948043][ T9785] loop3: detected capacity change from 0 to 1024
[  138.955071][ T9780] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1049: invalid indirect mapped block 8 (level 2)
[  138.968405][ T9780] EXT4-fs (loop1): Remounting filesystem read-only
[  138.975001][ T9780] EXT4-fs (loop1): 1 truncate cleaned up
[  138.980720][ T9785] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  138.980720][ T9785] 
[  138.981022][ T9780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.991418][ T9785] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  139.003832][ T9780] SELinux: (dev loop1, type ext4) getxattr errno 5
[  139.019370][ T9780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.214248][ T9794] syzkaller0: entered promiscuous mode
[  139.219860][ T9794] syzkaller0: entered allmulticast mode
[  139.681334][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  140.304518][ T9883] loop2: detected capacity change from 0 to 1024
[  140.313073][ T9883] EXT4-fs (loop2): Can't support bigalloc feature without extents feature
[  140.313073][ T9883] 
[  140.323936][ T9883] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  140.336917][ T9893] loop3: detected capacity change from 0 to 512
[  140.349452][ T9893] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  140.358008][ T9893] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1095: invalid indirect mapped block 8 (level 2)
[  140.372341][ T9893] EXT4-fs (loop3): Remounting filesystem read-only
[  140.379157][ T9893] EXT4-fs (loop3): 1 truncate cleaned up
[  140.394263][ T9893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.407663][ T9893] SELinux: (dev loop3, type ext4) getxattr errno 5
[  140.414622][ T9893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.525206][   T29] kauditd_printk_skb: 38 callbacks suppressed
[  140.525220][   T29] audit: type=1400 audit(1725603574.806:4708): avc:  denied  { unmount } for  pid=8779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  141.433018][   T29] audit: type=1400 audit(1725603575.716:4709): avc:  denied  { ioctl } for  pid=9944 comm="syz.3.1117" path="socket:[31919]" dev="sockfs" ino=31919 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  141.763719][ T1847] bridge_slave_1: left allmulticast mode
[  141.769415][ T1847] bridge_slave_1: left promiscuous mode
[  141.775094][ T1847] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.817089][ T1847] bridge_slave_0: left allmulticast mode
[  141.822788][ T1847] bridge_slave_0: left promiscuous mode
[  141.828538][ T1847] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.867648][ T9981] loop0: detected capacity change from 0 to 512
[  141.881335][ T9981] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  141.889733][ T9981] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1130: invalid indirect mapped block 8 (level 2)
[  141.928043][ T9981] EXT4-fs (loop0): Remounting filesystem read-only
[  141.934693][ T9981] EXT4-fs (loop0): 1 truncate cleaned up
[  141.940738][ T9981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.953224][ T9981] SELinux: (dev loop0, type ext4) getxattr errno 5
[  141.960123][ T9981] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.109278][ T1847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.123125][ T1847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.143933][ T1847] bond0 (unregistering): Released all slaves
[  142.329073][ T1847] hsr_slave_0: left promiscuous mode
[  142.336418][ T1847] hsr_slave_1: left promiscuous mode
[  142.359776][ T1847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.367268][ T1847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.393727][ T1847] veth1_macvtap: left promiscuous mode
[  142.399512][ T1847] veth0_macvtap: left promiscuous mode
[  142.405108][ T1847] veth1_vlan: left promiscuous mode
[  142.410426][ T1847] veth0_vlan: left promiscuous mode
[  142.645119][ T1847] team0 (unregistering): Port device team_slave_1 removed
[  142.672651][ T1847] team0 (unregistering): Port device team_slave_0 removed
[  142.784211][   T29] audit: type=1400 audit(1725603577.066:4710): avc:  denied  { getopt } for  pid=10014 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  142.904307][T10022] loop3: detected capacity change from 0 to 512
[  142.915244][T10022] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  142.923680][T10022] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1144: invalid indirect mapped block 8 (level 2)
[  142.937454][T10022] EXT4-fs (loop3): Remounting filesystem read-only
[  142.944084][T10022] EXT4-fs (loop3): 1 truncate cleaned up
[  142.950085][T10022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.962662][T10022] SELinux: (dev loop3, type ext4) getxattr errno 5
[  142.969562][T10022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.386683][T10072] loop4: detected capacity change from 0 to 512
[  144.396241][T10072] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  144.404619][T10072] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1165: invalid indirect mapped block 8 (level 2)
[  144.418298][T10072] EXT4-fs (loop4): Remounting filesystem read-only
[  144.424973][T10072] EXT4-fs (loop4): 1 truncate cleaned up
[  144.431041][T10072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.443512][T10072] SELinux: (dev loop4, type ext4) getxattr errno 5
[  144.450472][T10072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.626973][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  145.643511][T10117] loop3: detected capacity change from 0 to 512
[  145.653514][T10117] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  145.662173][T10117] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1183: invalid indirect mapped block 8 (level 2)
[  145.675910][T10117] EXT4-fs (loop3): Remounting filesystem read-only
[  145.682510][T10117] EXT4-fs (loop3): 1 truncate cleaned up
[  145.688702][T10117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.701163][T10117] SELinux: (dev loop3, type ext4) getxattr errno 5
[  145.708062][T10117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.922986][T10183] loop3: detected capacity change from 0 to 512
[  146.932551][T10183] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  146.944424][T10183] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1207: invalid indirect mapped block 8 (level 2)
[  146.958122][T10183] EXT4-fs (loop3): Remounting filesystem read-only
[  146.964782][T10183] EXT4-fs (loop3): 1 truncate cleaned up
[  146.971104][T10183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.983657][T10183] SELinux: (dev loop3, type ext4) getxattr errno 5
[  146.990548][T10183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.671333][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.695796][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.382892][   T29] audit: type=1400 audit(1725603582.666:4711): avc:  denied  { remount } for  pid=10259 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  148.382898][T10260] tmpfs: Unknown parameter 'trans'
[  148.742875][T10291] tipc: Failed to obtain node identity
[  148.748513][T10291] tipc: Enabling of bearer <ib:ip6tnl0> rejected, failed to enable media
[  149.693805][   T29] audit: type=1400 audit(1725603583.976:4712): avc:  denied  { bind } for  pid=10302 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  149.729345][   T29] audit: type=1400 audit(1725603583.996:4713): avc:  denied  { setopt } for  pid=10302 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  150.045437][   T29] audit: type=1400 audit(1725603584.326:4714): avc:  denied  { ioctl } for  pid=10321 comm="syz.3.1264" path="socket:[32417]" dev="sockfs" ino=32417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.088682][   T29] audit: type=1400 audit(1725603584.356:4715): avc:  denied  { read } for  pid=10321 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.132888][   T29] audit: type=1400 audit(1725603584.416:4716): avc:  denied  { setopt } for  pid=10321 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.138116][T10340] loop2: detected capacity change from 0 to 1024
[  150.152593][   T29] audit: type=1400 audit(1725603584.416:4717): avc:  denied  { write } for  pid=10321 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.164444][T10340] EXT4-fs: Ignoring removed orlov option
[  150.184398][T10340] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.195143][   T29] audit: type=1326 audit(1725603584.486:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247613cef9 code=0x7ffc0000
[  150.218723][   T29] audit: type=1326 audit(1725603584.486:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247613cef9 code=0x7ffc0000
[  150.242314][   T29] audit: type=1326 audit(1725603584.486:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247613cef9 code=0x7ffc0000
[  150.270365][T10340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.353916][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.587932][T10356] nfs4: Bad value for 'source'
[  150.784359][T10363] vhci_hcd: invalid port number 63
[  150.845308][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'.
[  150.910370][T10367] loop0: detected capacity change from 0 to 512
[  150.938676][T10367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.951479][T10367] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.984484][ T8906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.063809][T10375] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  151.157028][T10377] Invalid ELF header magic: != ELF
[  151.380570][T10390] loop4: detected capacity change from 0 to 2048
[  151.397580][T10390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.411365][T10390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  151.427308][T10390] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  151.439901][T10390] EXT4-fs (loop4): This should not happen!! Data will be lost
[  151.439901][T10390] 
[  151.449790][T10390] EXT4-fs (loop4): Total free blocks count 0
[  151.455952][T10390] EXT4-fs (loop4): Free/Dirty block details
[  151.461858][T10390] EXT4-fs (loop4): free_blocks=2415919104
[  151.467707][T10390] EXT4-fs (loop4): dirty_blocks=16
[  151.472818][T10390] EXT4-fs (loop4): Block reservation details
[  151.478800][T10390] EXT4-fs (loop4): i_reserved_data_blocks=1
[  151.485647][T10402] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  151.538809][T10407] loop4: detected capacity change from 0 to 1024
[  151.553609][T10409] loop2: detected capacity change from 0 to 512
[  151.562272][T10409] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  151.571408][T10409] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1290: invalid indirect mapped block 8 (level 2)
[  151.573035][T10407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.584794][T10409] EXT4-fs (loop2): Remounting filesystem read-only
[  151.603831][T10409] EXT4-fs (loop2): 1 truncate cleaned up
[  151.609989][T10409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.622480][T10409] SELinux: (dev loop2, type ext4) getxattr errno 5
[  151.623430][ T9166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.629519][T10409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.687468][T10414] Invalid ELF header magic: != ELF
[  151.882434][T10432] nfs4: Bad value for 'source'
[  152.254317][T10439] loop1: detected capacity change from 0 to 1024
[  152.283659][T10441] loop3: detected capacity change from 0 to 1024
[  152.320916][T10443] loop2: detected capacity change from 0 to 512
[  152.343210][T10443] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  152.352420][T10443] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1302: invalid indirect mapped block 8 (level 2)
[  152.366877][T10443] EXT4-fs (loop2): Remounting filesystem read-only
[  152.367809][T10439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.373525][T10443] EXT4-fs (loop2): 1 truncate cleaned up
[  152.391602][T10443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.404098][T10443] SELinux: (dev loop2, type ext4) getxattr errno 5
[  152.410859][T10443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.486315][T10441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.502309][T10413] dccp_close: ABORT with 32 bytes unread
[  152.530987][ T8910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.597496][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.686554][T10462] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  152.926576][T10484] Invalid ELF header magic: != ELF
[  152.939188][T10483] loop4: detected capacity change from 0 to 1024
[  152.963335][T10483] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  152.984153][T10488] loop3: detected capacity change from 0 to 1024
[  152.989872][T10483] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  153.014521][T10483] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #4: comm syz.4.1315: blocks 32-33 from inode overlap system zone
[  153.030201][T10483] EXT4-fs (loop4): failed to initialize system zone (-117)
[  153.041238][T10488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.047928][T10483] EXT4-fs (loop4): mount failed
[  153.089467][ T8910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.322237][T10502] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  153.434775][T10505] loop3: detected capacity change from 0 to 512
[  153.442604][T10505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  153.457255][T10505] EXT4-fs (loop3): 1 truncate cleaned up
[  153.463208][T10505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.580597][T10513] loop1: detected capacity change from 0 to 512
[  153.589891][T10513] EXT4-fs (loop1): failed to initialize system zone (-117)
[  153.597616][T10513] EXT4-fs (loop1): mount failed
[  153.701304][   T29] kauditd_printk_skb: 147 callbacks suppressed
[  153.701323][   T29] audit: type=1326 audit(1725603587.986:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.2.1329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51cb03cef9 code=0x0
[  153.754292][T10520] loop4: detected capacity change from 0 to 512
[  153.762294][T10520] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  153.771227][T10520] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1330: invalid indirect mapped block 8 (level 2)
[  153.784782][T10520] EXT4-fs (loop4): Remounting filesystem read-only
[  153.791439][T10520] EXT4-fs (loop4): 1 truncate cleaned up
[  153.797626][T10520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.810230][T10520] SELinux: (dev loop4, type ext4) getxattr errno 5
[  153.817033][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.830844][T10482] dccp_close: ABORT with 32 bytes unread
[  153.831526][T10522] loop2: detected capacity change from 0 to 128
[  153.856657][T10522] vfat: Unknown parameter ''
[  153.878252][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1329'.
[  154.214251][ T8910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.253898][T10544] pimreg: entered allmulticast mode
[  154.264246][T10544] loop3: detected capacity change from 0 to 512
[  154.273383][T10544] EXT4-fs (loop3): orphan cleanup on readonly fs
[  154.283107][T10544] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1339: bg 0: block 248: padding at end of block bitmap is not set
[  154.301293][T10544] Quota error (device loop3): write_blk: dquota write failed
[  154.308722][T10544] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  154.318841][T10544] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1339: Failed to acquire dquot type 1
[  154.331752][T10544] EXT4-fs (loop3): 1 truncate cleaned up
[  154.338114][T10544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  154.355277][T10544] pimreg: left allmulticast mode
[  154.417457][ T8910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.429126][T10554] loop4: detected capacity change from 0 to 512
[  154.438009][T10554] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  154.446471][T10554] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1344: invalid indirect mapped block 8 (level 2)
[  154.464122][T10554] EXT4-fs (loop4): Remounting filesystem read-only
[  154.470827][T10554] EXT4-fs (loop4): 1 truncate cleaned up
[  154.476978][T10554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.489475][T10554] SELinux: (dev loop4, type ext4) getxattr errno 5
[  154.503277][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'.
[  154.539448][T10564] Invalid ELF header magic: != ELF
[  154.545065][T10567] loop3: detected capacity change from 0 to 1024
[  154.552273][T10567] EXT4-fs: Ignoring removed orlov option
[  154.558160][T10567] EXT4-fs: Ignoring removed nomblk_io_submit option
[  154.604167][T10573] loop4: detected capacity change from 0 to 512
[  154.615347][   T29] audit: type=1326 audit(1725603588.896:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.639007][   T29] audit: type=1326 audit(1725603588.896:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.662707][   T29] audit: type=1326 audit(1725603588.896:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.686262][   T29] audit: type=1326 audit(1725603588.896:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.710204][   T29] audit: type=1326 audit(1725603588.896:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.733829][   T29] audit: type=1326 audit(1725603588.896:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.757495][   T29] audit: type=1326 audit(1725603588.896:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a0ccef9 code=0x7ffc0000
[  154.783609][T10573] EXT4-fs (loop4): failed to initialize system zone (-117)
[  154.790969][T10573] EXT4-fs (loop4): mount failed
[  154.870499][T10580] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  154.925200][T10584] loop0: detected capacity change from 0 to 1024
[  154.944750][T10584] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  154.955866][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'.
[  154.974793][T10584] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  155.011955][T10584] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  155.041657][T10592] loop2: detected capacity change from 0 to 512
[  155.045998][ T8906] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  155.073507][T10592] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  155.076375][ T8906] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  155.095646][T10592] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1358: invalid indirect mapped block 8 (level 2)
[  155.096660][ T8906] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  155.115832][T10592] EXT4-fs (loop2): Remounting filesystem read-only
[  155.129260][T10592] EXT4-fs (loop2): 1 truncate cleaned up
[  155.135360][T10592] SELinux: (dev loop2, type ext4) getxattr errno 5
[  155.185671][T10596] Invalid ELF header magic: != ELF
[  155.243633][T10601] loop1: detected capacity change from 0 to 1024
[  155.250394][T10601] EXT4-fs: Ignoring removed orlov option
[  155.256223][T10601] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.327296][T10604] loop2: detected capacity change from 0 to 128
[  155.340279][T10604] vfat: Unknown parameter ''
[  155.354230][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1361'.
[  155.659623][T10612] chnl_net:caif_netlink_parms(): no params data found
[  155.697270][T10612] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.704575][T10612] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.717557][T10612] bridge_slave_0: entered allmulticast mode
[  155.724024][T10612] bridge_slave_0: entered promiscuous mode
[  155.731056][T10612] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.738160][T10612] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.754198][T10612] bridge_slave_1: entered allmulticast mode
[  155.761553][T10633] loop3: detected capacity change from 0 to 1024
[  155.765446][T10632] loop4: detected capacity change from 0 to 1024
[  155.769660][T10633] EXT4-fs: Ignoring removed orlov option
[  155.777720][T10612] bridge_slave_1: entered promiscuous mode
[  155.779943][T10633] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.798914][T10632] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  155.808787][T10632] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  155.821433][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.830966][T10632] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  155.832047][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.865244][ T9166] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  155.887495][ T9166] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  155.902322][ T9166] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  155.903376][T10612] team0: Port device team_slave_0 added
[  155.929556][T10640] Invalid ELF header magic: != ELF
[  155.939899][T10612] team0: Port device team_slave_1 added
[  155.961418][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.968443][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.994386][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.008037][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.013605][T10645] loop3: detected capacity change from 0 to 1024
[  156.015009][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.047324][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.061325][ T1799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.096234][T10649] loop2: detected capacity change from 0 to 512
[  156.104971][T10649] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  156.106764][T10612] hsr_slave_0: entered promiscuous mode
[  156.113298][T10649] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1375: invalid indirect mapped block 8 (level 2)
[  156.132397][T10649] EXT4-fs (loop2): Remounting filesystem read-only
[  156.139692][T10612] hsr_slave_1: entered promiscuous mode
[  156.145775][T10649] EXT4-fs (loop2): 1 truncate cleaned up
[  156.151583][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.159422][T10649] SELinux: (dev loop2, type ext4) getxattr errno 5
[  156.163420][T10652] loop3: detected capacity change from 0 to 1024
[  156.167469][T10612] Cannot create hsr debugfs directory
[  156.175505][T10652] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  156.187917][T10652] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  156.200660][ T1799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.241632][T10652] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #4: comm syz.3.1376: blocks 32-33 from inode overlap system zone
[  156.256939][T10652] EXT4-fs (loop3): failed to initialize system zone (-117)
[  156.266923][T10652] EXT4-fs (loop3): mount failed
[  156.287651][ T1799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.290655][T10659] loop2: detected capacity change from 0 to 1024
[  156.330206][T10664] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  156.341699][T10665] loop1: detected capacity change from 0 to 512
[  156.355506][T10659] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  156.368779][T10659] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  156.387757][T10665] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.401180][ T1799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.411679][T10659] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  156.423545][T10675] loop3: detected capacity change from 0 to 512
[  156.431040][T10675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  156.444912][T10675] EXT4-fs (loop3): 1 truncate cleaned up
[  156.456196][T10677] loop1: detected capacity change from 0 to 512
[  156.460528][ T8779] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  156.484773][ T8779] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  156.489356][T10677] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  156.499735][ T8779] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  156.508914][T10677] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1384: invalid indirect mapped block 8 (level 2)
[  156.534786][T10677] EXT4-fs (loop1): Remounting filesystem read-only
[  156.541462][T10677] EXT4-fs (loop1): 1 truncate cleaned up
[  156.548478][T10677] SELinux: (dev loop1, type ext4) getxattr errno 5
[  156.601958][ T1799] bridge_slave_1: left allmulticast mode
[  156.607859][ T1799] bridge_slave_1: left promiscuous mode
[  156.613497][ T1799] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.624136][ T1799] bridge_slave_0: left allmulticast mode
[  156.629861][ T1799] bridge_slave_0: left promiscuous mode
[  156.635491][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.747988][ T1799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.758702][ T1799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.768943][ T1799] bond0 (unregistering): Released all slaves
[  156.963936][ T1799] hsr_slave_0: left promiscuous mode
[  156.969791][ T1799] hsr_slave_1: left promiscuous mode
[  156.975557][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.983005][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.992118][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.999594][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.010176][ T1799] veth1_macvtap: left promiscuous mode
[  157.015663][ T1799] veth0_macvtap: left promiscuous mode
[  157.021385][ T1799] veth1_vlan: left promiscuous mode
[  157.026648][ T1799] veth0_vlan: left promiscuous mode
[  157.114489][ T1799] team0 (unregistering): Port device team_slave_1 removed
[  157.125263][ T1799] team0 (unregistering): Port device team_slave_0 removed
[  157.161366][T10660] chnl_net:caif_netlink_parms(): no params data found
[  157.205755][T10660] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.213093][T10660] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.221835][T10660] bridge_slave_0: entered allmulticast mode
[  157.228758][T10660] bridge_slave_0: entered promiscuous mode
[  157.237297][T10660] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.245659][T10660] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.254815][T10660] bridge_slave_1: entered allmulticast mode
[  157.261447][T10660] bridge_slave_1: entered promiscuous mode
[  157.264671][T10718] loop3: detected capacity change from 0 to 1024
[  157.279435][T10718] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  157.289372][T10718] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  157.300835][T10718] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #4: comm syz.3.1390: blocks 32-33 from inode overlap system zone
[  157.315288][T10718] EXT4-fs (loop3): failed to initialize system zone (-117)
[  157.322675][T10718] EXT4-fs (loop3): mount failed
[  157.352390][T10723] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  157.352432][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.376748][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.405995][T10727] loop3: detected capacity change from 0 to 1024
[  157.412964][T10727] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  157.422732][T10727] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  157.445116][T10660] team0: Port device team_slave_0 added
[  157.451734][T10660] team0: Port device team_slave_1 added
[  157.457924][T10727] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  157.482600][T10612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  157.509575][ T8910] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  157.536475][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.543479][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.569523][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.583276][ T8910] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  157.606695][ T8910] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  157.641532][T10612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  157.657060][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.664020][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.689958][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.708142][T10707] chnl_net:caif_netlink_parms(): no params data found
[  157.717373][T10612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  157.726218][T10612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  157.758206][T10660] hsr_slave_0: entered promiscuous mode
[  157.764989][T10660] hsr_slave_1: entered promiscuous mode
[  157.772786][T10660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.781654][T10660] Cannot create hsr debugfs directory
[  157.819405][ T1799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.841018][T10707] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.848133][T10707] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.855438][T10707] bridge_slave_0: entered allmulticast mode
[  157.862118][T10707] bridge_slave_0: entered promiscuous mode
[  157.869394][T10707] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.876496][T10707] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.883698][T10707] bridge_slave_1: entered allmulticast mode
[  157.890201][T10707] bridge_slave_1: entered promiscuous mode
[  157.900793][ T1799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.936285][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.946731][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.969753][ T1799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.998469][T10707] team0: Port device team_slave_0 added
[  158.013793][T10707] team0: Port device team_slave_1 added
[  158.031262][T10660] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.045512][ T1799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.062729][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.069742][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.095627][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.114016][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.121013][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.146958][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.168741][T10660] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.194563][T10707] hsr_slave_0: entered promiscuous mode
[  158.200748][T10707] hsr_slave_1: entered promiscuous mode
[  158.206827][T10707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.214802][T10707] Cannot create hsr debugfs directory
[  158.231421][T10660] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.278912][T10612] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.290280][T10660] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.301595][T10764] chnl_net:caif_netlink_parms(): no params data found
[  158.327219][ T1799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.386444][T10612] 8021q: adding VLAN 0 to HW filter on device team0
[  158.397467][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.404523][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.416681][ T1799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.444835][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.452018][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.463794][T10764] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.471002][T10764] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.480246][T10764] bridge_slave_0: entered allmulticast mode
[  158.487803][T10764] bridge_slave_0: entered promiscuous mode
[  158.505979][ T1799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.519761][T10764] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.527152][T10764] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.535191][T10764] bridge_slave_1: entered allmulticast mode
[  158.542973][T10764] bridge_slave_1: entered promiscuous mode
[  158.589085][ T1799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.607824][T10764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.628716][T10660] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.647425][T10764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.659707][T10660] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  158.667230][T10799] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  158.691276][T10660] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  158.728159][T10764] team0: Port device team_slave_0 added
[  158.734723][T10764] team0: Port device team_slave_1 added
[  158.795466][T10660] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  158.836031][T10764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.842999][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.869041][T10764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.913217][T10660] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.928046][T10660] 8021q: adding VLAN 0 to HW filter on device team0
[  158.950062][T10660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.960593][T10660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.000830][ T1799] bridge_slave_1: left allmulticast mode
[  159.006570][ T1799] bridge_slave_1: left promiscuous mode
[  159.012186][ T1799] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.024595][ T1799] bridge_slave_0: left allmulticast mode
[  159.030572][ T1799] bridge_slave_0: left promiscuous mode
[  159.037047][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.047959][ T1799] bridge_slave_1: left allmulticast mode
[  159.053658][ T1799] bridge_slave_1: left promiscuous mode
[  159.059468][ T1799] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.069465][ T1799] bridge_slave_0: left allmulticast mode
[  159.075222][ T1799] bridge_slave_0: left promiscuous mode
[  159.081318][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.091524][ T1799] bridge_slave_1: left allmulticast mode
[  159.097227][ T1799] bridge_slave_1: left promiscuous mode
[  159.102863][ T1799] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.112449][ T1799] bridge_slave_0: left allmulticast mode
[  159.118176][ T1799] bridge_slave_0: left promiscuous mode
[  159.124120][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.368076][ T1799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.378200][ T1799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.388525][ T1799] bond0 (unregistering): Released all slaves
[  159.397388][ T1799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.407580][ T1799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.417531][ T1799] bond0 (unregistering): Released all slaves
[  159.426570][ T1799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.437169][ T1799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.447315][ T1799] bond0 (unregistering): Released all slaves
[  159.458106][T10764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.465071][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.491135][T10764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.504990][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.512114][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.521237][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.528409][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.621622][T10835] loop1: detected capacity change from 0 to 1024
[  159.628561][T10835] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  159.640200][T10764] hsr_slave_0: entered promiscuous mode
[  159.646092][T10835] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  159.657558][T10835] EXT4-fs mount: 27 callbacks suppressed
[  159.657572][T10835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  159.678090][T10764] hsr_slave_1: entered promiscuous mode
[  159.684778][T10764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.692489][T10764] Cannot create hsr debugfs directory
[  159.703816][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.711878][T10835] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  159.726221][ T1799] hsr_slave_0: left promiscuous mode
[  159.729578][ T7291] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  159.752052][ T1799] hsr_slave_1: left promiscuous mode
[  159.752255][ T7291] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  159.771546][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.776025][ T7291] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  159.778988][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.802007][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.809463][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.818724][ T1799] hsr_slave_0: left promiscuous mode
[  159.824431][ T1799] hsr_slave_1: left promiscuous mode
[  159.830574][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.838040][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.845814][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.853384][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.862748][ T1799] hsr_slave_0: left promiscuous mode
[  159.868374][ T1799] hsr_slave_1: left promiscuous mode
[  159.874070][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.881526][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.889153][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.896742][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.907638][ T1799] veth1_macvtap: left promiscuous mode
[  159.913114][ T1799] veth0_macvtap: left promiscuous mode
[  159.918641][ T1799] veth1_vlan: left promiscuous mode
[  159.923847][ T1799] veth0_vlan: left promiscuous mode
[  159.930267][ T1799] veth1_macvtap: left promiscuous mode
[  159.935743][ T1799] veth0_macvtap: left promiscuous mode
[  159.941306][ T1799] veth1_vlan: left promiscuous mode
[  159.946547][ T1799] veth0_vlan: left promiscuous mode
[  159.952225][ T1799] veth1_macvtap: left promiscuous mode
[  159.957769][ T1799] veth0_macvtap: left promiscuous mode
[  159.963371][ T1799] veth1_vlan: left promiscuous mode
[  159.968804][ T1799] veth0_vlan: left promiscuous mode
[  160.108669][ T1799] team0 (unregistering): Port device team_slave_1 removed
[  160.118901][ T1799] team0 (unregistering): Port device team_slave_0 removed
[  160.172760][ T1799] team0 (unregistering): Port device team_slave_1 removed
[  160.182624][ T1799] team0 (unregistering): Port device team_slave_0 removed
[  160.236231][ T1799] team0 (unregistering): Port device team_slave_1 removed
[  160.245769][ T1799] team0 (unregistering): Port device team_slave_0 removed
[  160.307028][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.418953][T10707] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  160.443047][T10612] veth0_vlan: entered promiscuous mode
[  160.449111][T10707] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  160.466431][T10707] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  160.478997][T10707] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  160.491915][T10612] veth1_vlan: entered promiscuous mode
[  160.507197][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.532138][T10612] veth0_macvtap: entered promiscuous mode
[  160.541719][T10612] veth1_macvtap: entered promiscuous mode
[  160.613819][T10660] veth0_vlan: entered promiscuous mode
[  160.637024][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.647588][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.658515][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.668175][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.678751][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.689717][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.699927][T10707] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.716659][T10612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.725463][T10612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.734223][T10612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.743019][T10612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.754594][T10660] veth1_vlan: entered promiscuous mode
[  160.775504][T10660] veth0_macvtap: entered promiscuous mode
[  160.788350][T10707] 8021q: adding VLAN 0 to HW filter on device team0
[  160.797598][T10660] veth1_macvtap: entered promiscuous mode
[  160.838870][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.846075][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.862889][T10764] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  160.873596][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.880731][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.904714][T10764] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  160.917087][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'.
[  160.928619][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.939248][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.949076][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.959617][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.970607][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.991582][T10764] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  161.004521][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.015045][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.024912][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.035335][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.047624][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.079361][T10764] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  161.093909][T10707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.104448][T10707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.126249][T10660] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.134976][T10660] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.143778][T10660] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.152635][T10660] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.241495][T10911] vhci_hcd: invalid port number 63
[  161.414378][T10881] chnl_net:caif_netlink_parms(): no params data found
[  161.427525][T10922] loop4: detected capacity change from 0 to 2048
[  161.450186][T10764] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.472654][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.487570][T10922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.516967][T10764] 8021q: adding VLAN 0 to HW filter on device team0
[  161.580997][T10881] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.588305][T10881] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.595621][T10881] bridge_slave_0: entered allmulticast mode
[  161.603442][T10660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.604429][T10881] bridge_slave_0: entered promiscuous mode
[  161.620630][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.627780][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.637466][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.644553][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.680275][T10881] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.687449][T10881] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.697184][T10881] bridge_slave_1: entered allmulticast mode
[  161.705887][T10881] bridge_slave_1: entered promiscuous mode
[  161.727790][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1412'.
[  161.752564][T10881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.803381][T10881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.824886][T10707] veth0_vlan: entered promiscuous mode
[  161.850718][   T29] kauditd_printk_skb: 75 callbacks suppressed
[  161.850735][   T29] audit: type=1326 audit(1725603596.136:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  161.881010][   T29] audit: type=1326 audit(1725603596.136:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  161.904681][   T29] audit: type=1326 audit(1725603596.136:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  161.928323][   T29] audit: type=1326 audit(1725603596.136:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  161.951833][   T29] audit: type=1326 audit(1725603596.136:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  161.975422][   T29] audit: type=1326 audit(1725603596.136:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  161.999062][   T29] audit: type=1326 audit(1725603596.136:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  162.023108][   T29] audit: type=1326 audit(1725603596.136:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  162.046673][   T29] audit: type=1326 audit(1725603596.136:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  162.070149][   T29] audit: type=1326 audit(1725603596.136:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10975 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2d94cef9 code=0x7ffc0000
[  162.099243][T10707] veth1_vlan: entered promiscuous mode
[  162.112233][T10707] veth0_macvtap: entered promiscuous mode
[  162.120402][T10707] veth1_macvtap: entered promiscuous mode
[  162.134886][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.161735][T10881] team0: Port device team_slave_0 added
[  162.184012][T10764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.201792][T10881] team0: Port device team_slave_1 added
[  162.232317][T10992] loop0: detected capacity change from 0 to 512
[  162.243896][T10996] loop4: detected capacity change from 0 to 1024
[  162.254776][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.266816][T10992] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  162.275317][T10992] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1418: invalid indirect mapped block 8 (level 2)
[  162.298111][T10881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.305239][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.315871][T10992] EXT4-fs (loop0): Remounting filesystem read-only
[  162.331319][T10881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.337930][T10992] EXT4-fs (loop0): 1 truncate cleaned up
[  162.356256][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.366731][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.373959][T10996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.376696][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.376711][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.376725][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.389151][T10992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.399128][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.400317][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.436910][T10992] SELinux: (dev loop0, type ext4) getxattr errno 5
[  162.456227][T10992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.470544][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.485582][T10881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.492688][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.519049][T10881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.539004][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.549573][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.559437][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.570033][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.579959][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.590484][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.601964][T10660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.625585][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.672944][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.693114][T10707] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.701933][T10707] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.710700][T10707] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.719488][T10707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.758748][T11028] loop4: detected capacity change from 0 to 1024
[  162.782665][T10881] hsr_slave_0: entered promiscuous mode
[  162.789602][T10881] hsr_slave_1: entered promiscuous mode
[  162.796040][T11029] nfs4: Bad value for 'source'
[  162.930805][T11028] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  162.963734][T11028] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  163.057688][T11028] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #4: comm syz.4.1422: blocks 32-33 from inode overlap system zone
[  163.075834][T11028] EXT4-fs (loop4): failed to initialize system zone (-117)
[  163.076756][   T11] bridge_slave_1: left allmulticast mode
[  163.084134][T11028] EXT4-fs (loop4): mount failed
[  163.088778][   T11] bridge_slave_1: left promiscuous mode
[  163.099368][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.135352][   T11] bridge_slave_0: left allmulticast mode
[  163.141122][   T11] bridge_slave_0: left promiscuous mode
[  163.146820][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.235321][T11058] loop4: detected capacity change from 0 to 1024
[  163.243933][T11058] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  163.258593][T11058] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  163.269535][T11058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.282393][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.291849][T11058] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  163.302737][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.314041][T10660] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  163.314549][   T11] bond0 (unregistering): Released all slaves
[  163.335703][T10660] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  163.354323][T10660] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  163.412141][T10764] veth0_vlan: entered promiscuous mode
[  163.452366][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.462371][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.479398][T10764] veth1_vlan: entered promiscuous mode
[  163.487164][   T11] hsr_slave_0: left promiscuous mode
[  163.492748][   T11] hsr_slave_1: left promiscuous mode
[  163.498470][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.506087][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.513717][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.522200][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.532133][   T11] veth1_macvtap: left promiscuous mode
[  163.537820][   T11] veth0_macvtap: left promiscuous mode
[  163.543378][   T11] veth1_vlan: left promiscuous mode
[  163.548824][   T11] veth0_vlan: left promiscuous mode
[  163.626930][   T11] team0 (unregistering): Port device team_slave_1 removed
[  163.637670][   T11] team0 (unregistering): Port device team_slave_0 removed
[  163.704647][T10764] veth0_macvtap: entered promiscuous mode
[  163.712432][T10764] veth1_macvtap: entered promiscuous mode
[  163.729483][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.740034][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.749925][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.760375][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.770218][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.780851][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.792599][T10764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.803633][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.814091][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.823919][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.834595][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.844465][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.854946][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.867490][T10764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.889585][T10764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.898409][T10764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.907468][T10764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.916346][T10764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.993984][T11090] loop0: detected capacity change from 0 to 512
[  164.001628][T10881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  164.014144][T10881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  164.021400][T11090] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  164.023173][T10881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  164.036840][T11090] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1431: invalid indirect mapped block 8 (level 2)
[  164.050190][T11090] EXT4-fs (loop0): Remounting filesystem read-only
[  164.056845][T11090] EXT4-fs (loop0): 1 truncate cleaned up
[  164.059985][T11098] loop3: detected capacity change from 0 to 1024
[  164.063179][T11090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.081979][T11090] SELinux: (dev loop0, type ext4) getxattr errno 5
[  164.088897][T11090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.116088][T11098] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  164.135521][T10881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.181219][T11098] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  164.191170][T11114] loop2: detected capacity change from 0 to 1024
[  164.210502][T11114] EXT4-fs: Ignoring removed orlov option
[  164.216247][T11114] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.252881][T10881] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.260418][T11114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.266691][T10881] 8021q: adding VLAN 0 to HW filter on device team0
[  164.278160][T11098] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #4: comm syz.3.1397: blocks 32-33 from inode overlap system zone
[  164.294291][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.301384][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.324484][T11098] EXT4-fs (loop3): failed to initialize system zone (-117)
[  164.339580][T11098] EXT4-fs (loop3): mount failed
[  164.340367][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.348904][T10707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.351682][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.415115][T10881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.425876][T10881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.508246][T10881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.602625][T10881] veth0_vlan: entered promiscuous mode
[  164.617049][T10881] veth1_vlan: entered promiscuous mode
[  164.634205][T10881] veth0_macvtap: entered promiscuous mode
[  164.643432][T10881] veth1_macvtap: entered promiscuous mode
[  164.655654][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.666753][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.676670][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.687379][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.697185][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.707673][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.717593][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.728170][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.850066][T10881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.864351][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.864810][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.874818][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.874850][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.903677][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.913529][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.923954][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.933768][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.944200][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.954139][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.955159][T10881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.974618][T10881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.983407][T10881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.992293][T10881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.001063][T10881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.051378][T11161] pimreg: entered allmulticast mode
[  165.059260][T11161] loop1: detected capacity change from 0 to 512
[  165.071071][T11161] EXT4-fs (loop1): orphan cleanup on readonly fs
[  165.078174][T11161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1405: bg 0: block 248: padding at end of block bitmap is not set
[  165.093028][T11161] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1405: Failed to acquire dquot type 1
[  165.104943][T11161] EXT4-fs (loop1): 1 truncate cleaned up
[  165.112233][T11161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.127021][T11161] pimreg: left allmulticast mode
[  165.185576][T11167] loop3: detected capacity change from 0 to 1024
[  165.192640][T11167] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  165.202553][T11167] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  165.214356][T11167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.225164][T10881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.236166][T11167] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  165.261298][T10764] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  165.266289][T10660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.290114][T10764] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  165.314615][T10764] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  165.529814][T11187] loop2: detected capacity change from 0 to 1024
[  165.536592][T11187] EXT4-fs: Ignoring removed orlov option
[  165.542342][T11187] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.557066][T11187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.593761][T11198] loop0: detected capacity change from 0 to 1024
[  165.606412][T11198] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  165.617273][T11198] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  165.621442][T10707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.633255][T11198] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #4: comm syz.0.1454: blocks 32-33 from inode overlap system zone
[  165.650637][T11198] EXT4-fs (loop0): failed to initialize system zone (-117)
[  165.658250][T11198] EXT4-fs (loop0): mount failed
[  165.666878][ T1644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.706611][T11178] chnl_net:caif_netlink_parms(): no params data found
[  165.710365][T11206] loop1: detected capacity change from 0 to 1024
[  165.722854][T11206] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  165.732149][T11207] vhci_hcd: invalid port number 63
[  165.732821][T11206] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  165.749867][T11206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.765453][ T1644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.776824][T11206] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (62631!=20869)
[  165.793474][T10881] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  165.814247][T10881] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  165.828403][T10881] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  165.845970][ T1644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.862423][T11178] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.869568][T11178] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.884997][T11178] bridge_slave_0: entered allmulticast mode
[  165.891715][T11178] bridge_slave_0: entered promiscuous mode
[  165.900083][T11178] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.907239][T11178] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.914526][T11178] bridge_slave_1: entered allmulticast mode
[  165.922154][T11178] bridge_slave_1: entered promiscuous mode
[  165.946450][ T1644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.979884][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.990477][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.009435][T11178] team0: Port device team_slave_0 added
[  166.016536][T11178] team0: Port device team_slave_1 added
[  166.032873][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.039958][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.066271][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.079049][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.086041][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.112105][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.138442][T11178] hsr_slave_0: entered promiscuous mode
[  166.144478][T11178] hsr_slave_1: entered promiscuous mode
[  166.150631][T11178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.158338][T11178] Cannot create hsr debugfs directory
[  166.211683][ T1644] bridge_slave_1: left allmulticast mode
[  166.217416][ T1644] bridge_slave_1: left promiscuous mode
[  166.223130][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.231171][ T1644] bridge_slave_0: left allmulticast mode
[  166.236916][ T1644] bridge_slave_0: left promiscuous mode
[  166.242630][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.327949][ T1644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.338426][ T1644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.348706][ T1644] bond0 (unregistering): Released all slaves
[  166.488273][ T1644] hsr_slave_0: left promiscuous mode
[  166.494582][ T1644] hsr_slave_1: left promiscuous mode
[  166.500547][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.508040][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.517439][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.524851][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.534419][ T1644] veth1_macvtap: left promiscuous mode
[  166.540019][ T1644] veth0_macvtap: left promiscuous mode
[  166.545670][ T1644] veth1_vlan: left promiscuous mode
[  166.551401][ T1644] veth0_vlan: left promiscuous mode
[  166.570902][T11244] loop0: detected capacity change from 0 to 512
[  166.582243][T11244] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  166.590627][T11244] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1465: invalid indirect mapped block 8 (level 2)
[  166.604150][T11244] EXT4-fs (loop0): Remounting filesystem read-only
[  166.610855][T11244] EXT4-fs (loop0): 1 truncate cleaned up
[  166.618000][T11244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.630808][T11244] SELinux: (dev loop0, type ext4) getxattr errno 5
[  166.638379][T11244] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.681781][ T1644] team0 (unregistering): Port device team_slave_1 removed
[  166.692555][ T1644] team0 (unregistering): Port device team_slave_0 removed
[  166.693966][T11249] loop0: detected capacity change from 0 to 1024
[  166.707776][T11249] EXT4-fs: Ignoring removed orlov option
[  166.713447][T11249] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.728960][T11249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.877510][T10612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.898104][ T3339] ==================================================================
[  166.906206][ T3339] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[  166.912891][ T3339] 
[  166.915196][ T3339] write to 0xffff888106d536d0 of 8 bytes by task 3253 on cpu 0:
[  166.922810][ T3339]  __dentry_kill+0x13e/0x4c0
[  166.927394][ T3339]  dput+0x5c/0xd0
[  166.931022][ T3339]  do_unlinkat+0x257/0x4c0
[  166.935425][ T3339]  __x64_sys_unlink+0x2e/0x40
[  166.940094][ T3339]  x64_sys_call+0x280f/0x2d60
[  166.944767][ T3339]  do_syscall_64+0xc9/0x1c0
[  166.949258][ T3339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.955146][ T3339] 
[  166.957452][ T3339] read to 0xffff888106d536d0 of 8 bytes by task 3339 on cpu 1:
[  166.964975][ T3339]  fast_dput+0x65/0x2c0
[  166.969125][ T3339]  dput+0x24/0xd0
[  166.972749][ T3339]  step_into+0x21a/0x810
[  166.976981][ T3339]  path_openat+0x14f7/0x1f10
[  166.981559][ T3339]  do_filp_open+0xf7/0x200
[  166.985962][ T3339]  do_sys_openat2+0xab/0x120
[  166.990552][ T3339]  __x64_sys_openat+0xf3/0x120
[  166.995909][ T3339]  x64_sys_call+0x1025/0x2d60
[  167.000579][ T3339]  do_syscall_64+0xc9/0x1c0
[  167.005074][ T3339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.011050][ T3339] 
[  167.013391][ T3339] value changed: 0xffff8882379e3f50 -> 0x0000000000000000
[  167.020486][ T3339] 
[  167.022795][ T3339] Reported by Kernel Concurrency Sanitizer on:
[  167.028926][ T3339] CPU: 1 UID: 0 PID: 3339 Comm: udevd Not tainted 6.11.0-rc6-syzkaller-00075-gad618736883b #0
[  167.039159][ T3339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  167.049208][ T3339] ==================================================================
[  167.122356][T11178] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  167.137518][T11178] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  167.153951][T11178] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  167.170722][T11178] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  167.244612][T11178] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.269743][T11178] 8021q: adding VLAN 0 to HW filter on device team0
[  167.279888][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.287004][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.304742][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.311926][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.371013][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.466819][T11178] veth0_vlan: entered promiscuous mode
[  167.475586][T11178] veth1_vlan: entered promiscuous mode
[  167.490464][T11178] veth0_macvtap: entered promiscuous mode
[  167.498280][T11178] veth1_macvtap: entered promiscuous mode
[  167.508192][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.518887][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.528794][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.539281][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.549148][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.559629][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.569588][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.580117][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.591003][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.602726][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.613176][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.622997][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.633428][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.643234][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.653738][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.663633][T11178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.674115][T11178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.685047][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.693036][T10764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.694269][T11178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.710999][T11178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.719881][T11178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.728611][T11178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.748066][ T1621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.258818][ T1621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.308077][ T1621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.369266][ T1621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.440658][ T1621] bridge_slave_1: left allmulticast mode
[  168.446383][ T1621] bridge_slave_1: left promiscuous mode
[  168.452074][ T1621] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.459747][ T1621] bridge_slave_0: left allmulticast mode
[  168.465375][ T1621] bridge_slave_0: left promiscuous mode
[  168.471132][ T1621] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.539616][ T1621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.550128][ T1621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.560861][ T1621] bond0 (unregistering): Released all slaves
[  168.637552][T10881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.649930][ T1621] hsr_slave_0: left promiscuous mode
[  168.656773][ T1621] hsr_slave_1: left promiscuous mode
[  168.666167][ T1621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.673574][ T1621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.684326][ T1621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.691850][ T1621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.700819][ T1621] veth1_macvtap: left promiscuous mode
[  168.706365][ T1621] veth0_macvtap: left promiscuous mode
[  168.712013][ T1621] veth1_vlan: left promiscuous mode
[  168.717257][ T1621] veth0_vlan: left promiscuous mode
[  168.801313][ T1621] team0 (unregistering): Port device team_slave_1 removed
[  168.813855][ T1621] team0 (unregistering): Port device team_slave_0 removed
[  169.151223][ T1621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.949498][ T1621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.010053][ T1621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.068514][ T1621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.145633][ T1621] bridge_slave_1: left allmulticast mode
[  171.151351][ T1621] bridge_slave_1: left promiscuous mode
[  171.157099][ T1621] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.165393][ T1621] bridge_slave_0: left allmulticast mode
[  171.171087][ T1621] bridge_slave_0: left promiscuous mode
[  171.176841][ T1621] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.308086][ T1621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.318495][ T1621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.329627][ T1621] bond0 (unregistering): Released all slaves
[  171.428223][ T1621] hsr_slave_0: left promiscuous mode
[  171.436767][ T1621] hsr_slave_1: left promiscuous mode
[  171.456090][ T1621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.463672][ T1621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.471721][ T1621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.479334][ T1621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.488327][ T1621] veth1_macvtap: left promiscuous mode
[  171.493973][ T1621] veth0_macvtap: left promiscuous mode
[  171.499552][ T1621] veth1_vlan: left promiscuous mode
[  171.504775][ T1621] veth0_vlan: left promiscuous mode
[  171.593426][ T1621] team0 (unregistering): Port device team_slave_1 removed
[  171.605510][ T1621] team0 (unregistering): Port device team_slave_0 removed