last executing test programs:

4.978870219s ago: executing program 3 (id=363):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x180)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580))
wait4(0x0, &(0x7f00000005c0), 0x1, &(0x7f0000000600))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unshare(0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}}, 0x20050800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})

4.051505874s ago: executing program 3 (id=367):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18)
r4 = memfd_secret(0x80000)
fcntl$setlease(r4, 0x400, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000010001000800000001000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b0e89ae44c9348d4e28f3a91cdec6d37160eae249c953592fdcce02fbc3751f9ebb7cd06f15f6762ef4eefa95422032b2730b9ab1f705d6606c36a862244dc16cd72297d2f3f05621812719c3540871eb72b9e160cf468d30ec641e1927d088c0bac69784308bde7f6d7b83752032c2820622bc465b961c3eb445a611a6dbbd6f236f3e6afbd69e7249fe6a7a233f296ff0ce379b12e6a5ef55e3bd477c11bb918119015b731a584d909c47300de112c000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
vmsplice(r8, 0x0, 0x0, 0x0)
fcntl$setpipe(r8, 0x407, 0x6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
fcntl$notify(r11, 0x402, 0x20)
getdents64(r10, &(0x7f0000000080)=""/34, 0x22)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)

4.021525646s ago: executing program 2 (id=368):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {0x0}], 0x2, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800)

4.008874817s ago: executing program 3 (id=369):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8)
tkill(r5, 0x7)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r6, &(0x7f00000009c0)="3bf5", 0x2)
sendfile(r6, r0, 0x0, 0x3ffff)
sendfile(r6, r0, 0x0, 0x7fffeffd)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

3.929295623s ago: executing program 2 (id=370):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3.567958852s ago: executing program 2 (id=373):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80880)
write$P9_RVERSION(r1, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)

3.432828823s ago: executing program 2 (id=375):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
nanosleep(&(0x7f0000000040), 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000c000000000000000000008f000000000000", @ANYRES32=r2, @ANYBLOB="0000000004000000000000003516cecedf4d5a1501e95eb3855c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20)

3.415711275s ago: executing program 4 (id=376):
mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@posixacl}, {@version_u}, {@uname={'uname', 0x3d, '\''}}, {@mmap}, {}], [{@appraise}]}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x208ca44, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYBLOB="530e626dc5e67ac8497f92b73c1ae83a55859b40c2ffebbe1df70121ef86ee88431bc8bad3a9a2400a9df942b969a08f36ebe1787ac75aef8bd64694c22148aa935209c386ff7d2a8768f1a34b0735bc8be51505ab8ff7a316bb3e0d2abd80a0dd17073b9d65ae82b9cc11e48b3e708e42d4a76dfe38e3fe6cfdcc9fc1a38538d5242004e1ace0db55375a7e9b70886e223e653c449003a1a44ed360ec410a4e135fcc2294c37195872763bf4dca735d3d842e74d71421bc3d200142ec07686a2a360070331ab469ca70efa8535d54bfd20702b4828cad31a99a6308bfe030d36b8294583c212898b7b9e292b03b253439790ed207e0", @ANYRESHEX, @ANYRESOCT], 0x6, 0x360, &(0x7f0000000b00)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce4, 0x0, 0x0, 0x0}, 0x94)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x109001, 0x88)
openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x2, <r3=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r3}, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000480), 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

2.556140044s ago: executing program 3 (id=378):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x180)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
wait4(0x0, &(0x7f00000005c0), 0x1, &(0x7f0000000600))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unshare(0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}}, 0x20050800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})

2.347240701s ago: executing program 4 (id=382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)

2.123205199s ago: executing program 4 (id=383):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f00000007c0)=ANY=[], 0x23, 0x18d, &(0x7f0000000d80)="$eJzs28FqE1EUBuAzJq1JBOlaXAy4cRXUlUtFKogDipJFXSlUN60UzGZ0FXwS38B38H0E6aoL4YqdWGOdWmucjDHft8nJ/NxwDiS53IF5evnlzvbe+MXew/3oZVl0b0UeB1lsxLnoREQvAID/zUFK8Wl9+uZdpJRabggAaNzh/p9SSucn0bf/A8BKOHX/v/mLxWsNNwcANGKO8//FRhsDABrzeOvJ/dtFsfkoz3sRHyflqBxVr1V+916xeS0/tPF91X5ZjjpH+fUqz3/M12IwzW/U5utx9UqVf83uPCiO5Rdiu/nxAQAAYCUM8yO15/vh8KS8qmbuDxw7v3fjUndhYwAAZzB+/Wbn2e7u81eK5S3SX/icD9MvxD8wzlmLzymlmSu/O8XbwWAZRu7/0aps7rla/FMCFmL8/tuPvu1OAAAAAAAAAAAAAACAk5z+PNBWP+KnKCYRdc8MZRGzVzptjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC1vgQAAP//NZlAAA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
close(r0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.000841209s ago: executing program 4 (id=384):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.690079294s ago: executing program 4 (id=385):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80880)
write$P9_RVERSION(r1, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)

1.673698445s ago: executing program 0 (id=386):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x3})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0x8, 0x49d)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip_vti0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.673470105s ago: executing program 4 (id=387):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2, 0x5063}], 0x1, 0xffffffffffbffff8)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

1.554972305s ago: executing program 3 (id=389):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8)
tkill(r5, 0x7)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r6, &(0x7f00000009c0)="3bf5", 0x2)
sendfile(r6, r0, 0x0, 0x3ffff)
sendfile(r6, r0, 0x0, 0x7fffeffd)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

1.4819177s ago: executing program 0 (id=390):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0)

1.451039483s ago: executing program 0 (id=391):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r6=>0x0})
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.425253465s ago: executing program 0 (id=392):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c)
listen(r1, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000200)={<r6=>0x0, 0x9, 0x9, 0x2, 0x4, 0x9}, &(0x7f0000000340)=0x14)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x1}, 0x8)
sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
socket$netlink(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r9, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0xd215)
accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80800)
close_range(r1, 0xffffffffffffffff, 0x0)

686.146325ms ago: executing program 3 (id=400):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8)
tkill(r5, 0x7)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r6, &(0x7f00000009c0)="3bf5", 0x2)
sendfile(r6, r0, 0x0, 0x3ffff)
sendfile(r6, r0, 0x0, 0x7fffeffd)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

649.532718ms ago: executing program 1 (id=401):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x3})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0x8, 0x49d)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip_vti0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

576.917574ms ago: executing program 0 (id=402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0)

551.332166ms ago: executing program 0 (id=403):
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
sysinfo(&(0x7f0000000540)=""/145)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000f8ba466aabe98d6c437a570690771ffdd8564b60220d89f9d3de34fda", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000001080)={0x6, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x2, 'lc\x00', 0x0, 0x0, 0x4000}, 0x2c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010102, 0x1fd, 0x0, 'lc\x00', 0x4c, 0x2, 0x3f}, 0x2c)
syz_open_dev$loop(&(0x7f0000001040), 0x5, 0x101000)

436.335205ms ago: executing program 1 (id=404):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x0)

390.890339ms ago: executing program 1 (id=405):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, 0x0, &(0x7f0000000580)=r1}, 0x20)
r2 = socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
fcntl$notify(r6, 0x402, 0x20)
getdents64(r5, &(0x7f0000000080)=""/34, 0x22)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)

355.535131ms ago: executing program 2 (id=406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)

258.404969ms ago: executing program 2 (id=407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b0000000000000000000000000000000c8bd065b9153e229000020"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18)
sendfile(r5, r4, 0x0, 0x7ffff088)
ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000000)={r4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="18000000120005010000000000000000050025"], 0x18}}, 0x20040810)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x300, 0x170bd27, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=<r11=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r12, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1)
readv(r12, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1)
read(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="300000ff0f00000025b57000f9dbdf2500000004", @ANYRESOCT=r11, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=r10], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

10.050089ms ago: executing program 1 (id=408):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
pipe(0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000400))
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, 0x0, 0x0)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmmsg(r2, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0, 0xe}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800)

9.728719ms ago: executing program 1 (id=409):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=410):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3, 0x5063}], 0x1, 0xffffffffffbffff8)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   26.026988][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   26.027006][   T29] audit: type=1400 audit(1756535572.034:57): avc:  denied  { transition } for  pid=3283 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   26.056150][   T29] audit: type=1400 audit(1756535572.034:58): avc:  denied  { noatsecure } for  pid=3283 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   26.075949][   T29] audit: type=1400 audit(1756535572.034:59): avc:  denied  { write } for  pid=3283 comm="sh" path="pipe:[2580]" dev="pipefs" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   26.098067][   T29] audit: type=1400 audit(1756535572.034:60): avc:  denied  { rlimitinh } for  pid=3283 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   26.116805][   T29] audit: type=1400 audit(1756535572.034:61): avc:  denied  { siginh } for  pid=3283 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts.
[   34.278416][   T29] audit: type=1400 audit(1756535580.284:62): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.279570][ T3293] cgroup: Unknown subsys name 'net'
[   34.301187][   T29] audit: type=1400 audit(1756535580.284:63): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.328648][   T29] audit: type=1400 audit(1756535580.314:64): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.545111][ T3293] cgroup: Unknown subsys name 'cpuset'
[   34.551459][ T3293] cgroup: Unknown subsys name 'rlimit'
[   34.702201][   T29] audit: type=1400 audit(1756535580.704:65): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.726871][   T29] audit: type=1400 audit(1756535580.704:66): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.747615][   T29] audit: type=1400 audit(1756535580.704:67): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.756704][ T3296] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.768059][   T29] audit: type=1400 audit(1756535580.714:68): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.797165][   T29] audit: type=1400 audit(1756535580.714:69): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.822761][   T29] audit: type=1400 audit(1756535580.714:70): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.830380][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   34.846074][   T29] audit: type=1400 audit(1756535580.784:71): avc:  denied  { relabelto } for  pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   36.043460][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   36.111713][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   36.157039][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.164207][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.171406][ T3308] bridge_slave_0: entered allmulticast mode
[   36.178000][ T3308] bridge_slave_0: entered promiscuous mode
[   36.189807][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   36.198445][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.205618][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.212947][ T3308] bridge_slave_1: entered allmulticast mode
[   36.219387][ T3308] bridge_slave_1: entered promiscuous mode
[   36.228244][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   36.279969][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.291506][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.300826][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.307993][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.315211][ T3303] bridge_slave_0: entered allmulticast mode
[   36.321750][ T3303] bridge_slave_0: entered promiscuous mode
[   36.345605][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.352693][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.360677][ T3303] bridge_slave_1: entered allmulticast mode
[   36.367176][ T3303] bridge_slave_1: entered promiscuous mode
[   36.402327][ T3308] team0: Port device team_slave_0 added
[   36.428262][ T3308] team0: Port device team_slave_1 added
[   36.440544][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.452903][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.462229][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.469397][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.476782][ T3304] bridge_slave_0: entered allmulticast mode
[   36.483357][ T3304] bridge_slave_0: entered promiscuous mode
[   36.495085][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.502264][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.509455][ T3312] bridge_slave_0: entered allmulticast mode
[   36.515949][ T3312] bridge_slave_0: entered promiscuous mode
[   36.527590][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   36.536703][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.543838][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.551108][ T3304] bridge_slave_1: entered allmulticast mode
[   36.557684][ T3304] bridge_slave_1: entered promiscuous mode
[   36.568729][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.575846][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.582999][ T3312] bridge_slave_1: entered allmulticast mode
[   36.589613][ T3312] bridge_slave_1: entered promiscuous mode
[   36.613566][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.620608][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.646615][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.662805][ T3303] team0: Port device team_slave_0 added
[   36.671959][ T3303] team0: Port device team_slave_1 added
[   36.679007][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.688652][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.695629][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.721649][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.748712][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.767747][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.781420][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.800813][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.807828][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.833860][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.858887][ T3304] team0: Port device team_slave_0 added
[   36.864905][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.871864][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.897902][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.923750][ T3304] team0: Port device team_slave_1 added
[   36.938745][ T3308] hsr_slave_0: entered promiscuous mode
[   36.944988][ T3308] hsr_slave_1: entered promiscuous mode
[   36.957663][ T3312] team0: Port device team_slave_0 added
[   36.969197][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.976201][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.002183][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.013901][ T3312] team0: Port device team_slave_1 added
[   37.030417][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.037449][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.063768][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.098807][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.105990][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.113133][ T3311] bridge_slave_0: entered allmulticast mode
[   37.119956][ T3311] bridge_slave_0: entered promiscuous mode
[   37.145153][ T3304] hsr_slave_0: entered promiscuous mode
[   37.151242][ T3304] hsr_slave_1: entered promiscuous mode
[   37.157203][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   37.163049][ T3304] Cannot create hsr debugfs directory
[   37.174060][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.181043][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.207067][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.217898][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.225010][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.232260][ T3311] bridge_slave_1: entered allmulticast mode
[   37.238880][ T3311] bridge_slave_1: entered promiscuous mode
[   37.247131][ T3303] hsr_slave_0: entered promiscuous mode
[   37.253146][ T3303] hsr_slave_1: entered promiscuous mode
[   37.259304][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   37.265083][ T3303] Cannot create hsr debugfs directory
[   37.279031][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.286157][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.312350][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.346597][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.357154][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.411919][ T3311] team0: Port device team_slave_0 added
[   37.429389][ T3312] hsr_slave_0: entered promiscuous mode
[   37.435601][ T3312] hsr_slave_1: entered promiscuous mode
[   37.441527][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   37.447413][ T3312] Cannot create hsr debugfs directory
[   37.453627][ T3311] team0: Port device team_slave_1 added
[   37.481005][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.488030][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.514044][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.527592][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.534584][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.560657][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.632818][ T3311] hsr_slave_0: entered promiscuous mode
[   37.638979][ T3311] hsr_slave_1: entered promiscuous mode
[   37.644893][ T3311] debugfs: 'hsr0' already exists in 'hsr'
[   37.650643][ T3311] Cannot create hsr debugfs directory
[   37.714458][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.723460][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.739886][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.750818][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.808764][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.819399][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.833250][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.842671][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.869080][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.883453][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.903652][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.913095][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.926353][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.941469][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.955556][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.967175][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.977164][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.007006][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   38.022795][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.037390][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.044496][ T1660] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.055960][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.066895][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.073991][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.085614][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.094568][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.159425][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.171308][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.191066][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   38.209464][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.216610][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.238348][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.248136][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.255355][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.268797][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   38.284612][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.291715][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.300576][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.307717][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.324140][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.350884][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   38.377534][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.388972][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.396168][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.414843][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.421987][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.443089][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   38.459088][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.466366][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.485659][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.492788][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.510745][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.569496][ T3308] veth0_vlan: entered promiscuous mode
[   38.587347][ T3308] veth1_vlan: entered promiscuous mode
[   38.617389][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.631230][ T3308] veth0_macvtap: entered promiscuous mode
[   38.662184][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.672364][ T3308] veth1_macvtap: entered promiscuous mode
[   38.706218][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.716414][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.742716][ T1660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.757941][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.780877][ T3303] veth0_vlan: entered promiscuous mode
[   38.787716][ T1660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.805882][ T1660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.815847][ T3303] veth1_vlan: entered promiscuous mode
[   38.841771][ T1660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.869570][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.871803][ T3304] veth0_vlan: entered promiscuous mode
[   38.903498][ T3303] veth0_macvtap: entered promiscuous mode
[   38.928743][ T3304] veth1_vlan: entered promiscuous mode
[   38.938323][ T3303] veth1_macvtap: entered promiscuous mode
[   38.972111][ T3304] veth0_macvtap: entered promiscuous mode
[   38.982579][    C1] hrtimer: interrupt took 38829 ns
[   38.998623][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.009235][ T3304] veth1_macvtap: entered promiscuous mode
[   39.023791][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.039565][ T3470] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   39.047199][ T1660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.060766][ T3311] veth0_vlan: entered promiscuous mode
[   39.079006][ T3470] team0: Port device dummy0 added
[   39.090824][ T1660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.101142][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.110961][ T1660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.123296][ T3311] veth1_vlan: entered promiscuous mode
[   39.131588][ T3312] veth0_vlan: entered promiscuous mode
[   39.148880][ T1660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.159217][ T3470] loop0: detected capacity change from 0 to 512
[   39.171230][ T3311] veth0_macvtap: entered promiscuous mode
[   39.178976][ T3470] =======================================================
[   39.178976][ T3470] WARNING: The mand mount option has been deprecated and
[   39.178976][ T3470]          and is ignored by this kernel. Remove the mand
[   39.178976][ T3470]          option from the mount to silence this warning.
[   39.178976][ T3470] =======================================================
[   39.220709][ T3470] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.221525][ T3312] veth1_vlan: entered promiscuous mode
[   39.236404][ T3470] EXT4-fs: Ignoring removed i_version option
[   39.237205][ T3311] veth1_macvtap: entered promiscuous mode
[   39.254947][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.292451][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.306619][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.315921][ T1660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.330951][ T1660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.343644][ T3470] EXT4-fs (loop0): 1 orphan inode deleted
[   39.345884][ T3312] veth0_macvtap: entered promiscuous mode
[   39.358565][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.366804][ T3312] veth1_macvtap: entered promiscuous mode
[   39.380581][ T3470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.396239][ T1660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.415361][   T29] kauditd_printk_skb: 28 callbacks suppressed
[   39.415379][   T29] audit: type=1400 audit(1756535585.424:100): avc:  denied  { mount } for  pid=3468 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.448199][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.456684][   T29] audit: type=1400 audit(1756535585.424:101): avc:  denied  { name_bind } for  pid=3478 comm="syz.2.6" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   39.477783][   T29] audit: type=1400 audit(1756535585.424:102): avc:  denied  { node_bind } for  pid=3478 comm="syz.2.6" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   39.482395][ T3470] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   39.500252][   T29] audit: type=1400 audit(1756535585.424:103): avc:  denied  { create } for  pid=3478 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.500287][   T29] audit: type=1400 audit(1756535585.424:104): avc:  denied  { getopt } for  pid=3478 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.500345][   T29] audit: type=1400 audit(1756535585.424:105): avc:  denied  { setopt } for  pid=3478 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.500369][   T29] audit: type=1400 audit(1756535585.424:106): avc:  denied  { write } for  pid=3478 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.500396][   T29] audit: type=1400 audit(1756535585.424:107): avc:  denied  { connect } for  pid=3478 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.500423][   T29] audit: type=1400 audit(1756535585.424:108): avc:  denied  { name_connect } for  pid=3478 comm="syz.2.6" dest=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   39.500467][   T29] audit: type=1400 audit(1756535585.424:109): avc:  denied  { name_connect } for  pid=3478 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   39.652844][   T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.662140][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.712489][ T3470] team0: Port device dummy0 removed
[   39.727498][ T3470] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   39.737848][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.745764][   T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.778762][ T3486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   39.798177][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.825730][ T3470] syz.0.1 (3470) used greatest stack depth: 10584 bytes left
[   39.837334][   T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.850240][ T3492] loop1: detected capacity change from 0 to 512
[   39.864643][   T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.871164][ T3492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.886590][ T3492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   39.893974][   T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.908344][   T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.919351][ T3492] EXT4-fs (loop1): 1 truncate cleaned up
[   39.926842][ T3492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.998622][ T3498] netlink: 'syz.2.10': attribute type 21 has an invalid length.
[   40.040660][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.055263][ T3500] netlink: 'syz.3.11': attribute type 10 has an invalid length.
[   40.067018][ T3498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10'.
[   40.286671][ T3506] loop3: detected capacity change from 0 to 512
[   40.308855][ T3510] loop0: detected capacity change from 0 to 512
[   40.367143][ T3512] loop2: detected capacity change from 0 to 512
[   40.407903][ T3510] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   40.420319][ T3506] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.437645][ T3512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   40.470038][ T3510] EXT4-fs (loop0): orphan cleanup on readonly fs
[   40.491474][ T3512] EXT4-fs (loop2): 1 truncate cleaned up
[   40.502020][ T3510] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.12: corrupted inode contents
[   40.514710][ T3506] EXT4-fs: Ignoring removed i_version option
[   40.520793][ T3510] EXT4-fs (loop0): Remounting filesystem read-only
[   40.527782][ T3510] EXT4-fs (loop0): 1 truncate cleaned up
[   40.534733][ T3512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.548646][ T3500] team0: Port device dummy0 added
[   40.579006][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   40.589608][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   40.616163][   T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   40.647331][ T3506] EXT4-fs (loop3): 1 orphan inode deleted
[   40.676984][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.695682][ T3506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.800291][ T3522] netlink: 'syz.4.14': attribute type 10 has an invalid length.
[   40.829440][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.862645][ T3525] loop0: detected capacity change from 0 to 512
[   40.870563][ T3500] netlink: 'syz.3.11': attribute type 10 has an invalid length.
[   40.903632][ T3525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   40.931629][ T3522] team0: Port device dummy0 added
[   40.948855][ T3525] EXT4-fs (loop0): 1 truncate cleaned up
[   40.958866][ T3525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.998172][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.028284][ T3522] syz.4.14 (3522) used greatest stack depth: 9928 bytes left
[   41.052772][ T3500] team0: Port device dummy0 removed
[   41.075474][ T3500] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   41.090173][ T3532] netlink: 'syz.4.17': attribute type 10 has an invalid length.
[   41.102801][ T3534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   41.152831][ T3500] syz.3.11 (3500) used greatest stack depth: 9224 bytes left
[   41.175084][ T3538] loop4: detected capacity change from 0 to 512
[   41.183674][ T3538] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.191231][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.201680][ T3538] EXT4-fs: Ignoring removed i_version option
[   41.272517][ T3538] EXT4-fs (loop4): 1 orphan inode deleted
[   41.279437][ T3541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.290742][ T3538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.308402][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.317525][ T3532] netlink: 'syz.4.17': attribute type 10 has an invalid length.
[   41.342241][ T3537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.381382][ T3532] team0: Port device dummy0 removed
[   41.425359][ T3532] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   41.456861][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.498791][ T3548] loop4: detected capacity change from 0 to 128
[   41.537656][ T3548] loop4: detected capacity change from 0 to 2048
[   41.557119][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.647803][ T3537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.740229][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.801906][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.815655][ T3552] netlink: 'syz.4.23': attribute type 10 has an invalid length.
[   41.861494][ T3552] bond0: (slave dummy0): Releasing backup interface
[   41.907851][ T3552] team0: Port device dummy0 added
[   41.935454][ T3537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.961023][ T3558] netlink: 'syz.4.25': attribute type 10 has an invalid length.
[   41.995931][ T3537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.060922][ T3559] sd 0:0:1:0: device reset
[   42.122643][ T3558] loop4: detected capacity change from 0 to 512
[   42.142760][ T3558] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.183080][ T3558] EXT4-fs: Ignoring removed i_version option
[   42.249577][ T1707] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.428161][ T1707] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.453059][ T1707] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.457181][ T3558] EXT4-fs (loop4): 1 orphan inode deleted
[   42.469882][ T1707] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.478268][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.521110][ T3558] team0: Port device dummy0 removed
[   42.552478][ T3558] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   42.650120][ T3568] loop1: detected capacity change from 0 to 512
[   42.685723][ T3568] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.699522][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.721580][ T3568] EXT4-fs: Ignoring removed i_version option
[   42.749831][ T3565] team0: Port device dummy0 added
[   42.778972][ T3570] loop4: detected capacity change from 0 to 128
[   42.880419][ T3568] EXT4-fs (loop1): 1 orphan inode deleted
[   42.929440][ T3568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.944662][ T3541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.973550][ T3565] team0: Port device dummy0 removed
[   42.992621][ T3565] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   43.016910][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.228917][ T3541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.287272][ T3541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.423198][ T3383] IPVS: starting estimator thread 0...
[   43.472745][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.484848][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.495722][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.506974][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.515329][ T3589] IPVS: using max 2400 ests per chain, 120000 per kthread
[   43.569838][ T3593] veth3: entered promiscuous mode
[   43.632944][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'.
[   43.792314][ T3598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'.
[   43.852936][ T3604] loop3: detected capacity change from 0 to 128
[   43.942446][ T3606] bond0: (slave dummy0): Releasing backup interface
[   43.968268][ T3606] team0: Port device dummy0 added
[   44.015855][ T3606] loop1: detected capacity change from 0 to 512
[   44.029185][ T3606] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.048701][ T3606] EXT4-fs: Ignoring removed i_version option
[   44.071026][ T3616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'.
[   44.080028][ T3615] loop3: detected capacity change from 0 to 512
[   44.089153][ T3606] EXT4-fs (loop1): 1 orphan inode deleted
[   44.118288][ T3615] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   44.127057][ T3615] EXT4-fs (loop3): orphan cleanup on readonly fs
[   44.134375][ T3606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.136346][ T3615] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.44: corrupted inode contents
[   44.159551][ T3615] EXT4-fs (loop3): Remounting filesystem read-only
[   44.166436][ T3615] EXT4-fs (loop3): 1 truncate cleaned up
[   44.172395][   T51] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   44.183027][ T3606] validate_nla: 7 callbacks suppressed
[   44.183063][ T3606] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   44.183020][   T51] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   44.201246][   T51] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   44.223414][ T3615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.249504][ T3606] team0: Port device dummy0 removed
[   44.255872][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.295163][ T3606] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   44.308736][ T3627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'.
[   44.320701][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.363572][ T3631] netlink: 'syz.3.50': attribute type 21 has an invalid length.
[   44.373444][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'.
[   44.425440][   T29] kauditd_printk_skb: 224 callbacks suppressed
[   44.425504][   T29] audit: type=1326 audit(1756535590.434:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   44.454836][   T29] audit: type=1326 audit(1756535590.434:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   44.478129][   T29] audit: type=1326 audit(1756535590.434:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   44.501624][   T29] audit: type=1326 audit(1756535590.474:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   44.524871][   T29] audit: type=1326 audit(1756535590.474:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   44.548176][   T29] audit: type=1326 audit(1756535590.474:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   44.611519][   T29] audit: type=1326 audit(1756535590.614:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4985eebe9 code=0x7ffc0000
[   44.635296][   T29] audit: type=1326 audit(1756535590.614:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4985eebe9 code=0x7ffc0000
[   44.658640][   T29] audit: type=1326 audit(1756535590.614:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd4985eebe9 code=0x7ffc0000
[   44.681784][   T29] audit: type=1326 audit(1756535590.614:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4985eebe9 code=0x7ffc0000
[   44.939920][ T3651] loop0: detected capacity change from 0 to 512
[   45.011122][ T3651] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   45.019753][ T3651] EXT4-fs (loop0): orphan cleanup on readonly fs
[   45.020576][ T1035] IPVS: starting estimator thread 0...
[   45.036976][ T3651] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.58: corrupted inode contents
[   45.049097][ T3651] EXT4-fs (loop0): Remounting filesystem read-only
[   45.059455][ T3651] EXT4-fs (loop0): 1 truncate cleaned up
[   45.065502][ T1707] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   45.076694][ T1707] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   45.087829][ T1707] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   45.102866][ T3651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   45.117682][ T3659] netlink: 'syz.2.60': attribute type 10 has an invalid length.
[   45.127564][ T3655] IPVS: using max 2352 ests per chain, 117600 per kthread
[   45.137156][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.172719][ T3662] loop2: detected capacity change from 0 to 512
[   45.202107][ T3662] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.211122][ T3662] EXT4-fs: Ignoring removed i_version option
[   45.220743][ T3662] EXT4-fs (loop2): 1 orphan inode deleted
[   45.226803][ T3659] team0: Port device dummy0 added
[   45.232238][ T3662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.246876][ T3662] netlink: 'syz.2.60': attribute type 10 has an invalid length.
[   45.262484][ T3662] team0: Port device dummy0 removed
[   45.265185][ T3661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'.
[   45.270896][ T3662] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   45.305331][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.360390][ T3672] netlink: 'syz.0.65': attribute type 21 has an invalid length.
[   45.368543][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   45.401078][ T3674] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   45.428599][ T3674] bond0: (slave dummy0): Releasing backup interface
[   45.465370][ T3674] team0: Port device dummy0 added
[   45.599180][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'.
[   45.698413][ T3686] loop0: detected capacity change from 0 to 512
[   45.719997][ T3688] sd 0:0:1:0: device reset
[   45.745581][ T3686] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   45.753954][ T3686] EXT4-fs (loop0): orphan cleanup on readonly fs
[   45.764481][ T3686] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.71: corrupted inode contents
[   45.778072][ T3686] EXT4-fs (loop0): Remounting filesystem read-only
[   45.785959][ T3686] EXT4-fs (loop0): 1 truncate cleaned up
[   45.988670][ T3697] netlink: 'syz.3.74': attribute type 10 has an invalid length.
[   46.045615][ T3698] loop3: detected capacity change from 0 to 512
[   46.053496][ T3698] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.067502][ T1707] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   46.078106][ T1707] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   46.078571][ T3698] EXT4-fs: Ignoring removed i_version option
[   46.099958][ T3697] bond0: (slave dummy0): Releasing backup interface
[   46.103210][ T1707] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   46.112650][ T3698] EXT4-fs (loop3): 1 orphan inode deleted
[   46.117241][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6b1200: rx timeout, send abort
[   46.117290][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6b0c00: rx timeout, send abort
[   46.127327][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.131361][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6b1200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   46.166232][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6b0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   46.173571][ T3698] netlink: 'syz.3.74': attribute type 10 has an invalid length.
[   46.188970][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.246694][ T3697] team0: Port device dummy0 added
[   46.261859][ T3698] team0: Port device dummy0 removed
[   46.262624][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.272759][ T3698] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   46.286119][ T3706] loop2: detected capacity change from 0 to 128
[   46.296839][ T3704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'.
[   46.308977][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.363697][ T3710] netlink: 'syz.0.78': attribute type 10 has an invalid length.
[   46.401120][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'.
[   46.492532][ T3710] bond0: (slave dummy0): Releasing backup interface
[   46.531228][ T3710] team0: Port device dummy0 added
[   46.634396][ T3736] loop4: detected capacity change from 0 to 128
[   46.750872][ T3734] loop3: detected capacity change from 0 to 512
[   46.798109][ T3734] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   46.849718][ T3742] netlink: 'syz.4.91': attribute type 21 has an invalid length.
[   46.885556][ T3734] EXT4-fs (loop3): orphan cleanup on readonly fs
[   46.894714][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'.
[   46.906604][ T3734] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.89: corrupted inode contents
[   46.932289][ T3734] EXT4-fs (loop3): Remounting filesystem read-only
[   46.948681][ T3734] EXT4-fs (loop3): 1 truncate cleaned up
[   46.954927][ T1707] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   46.965559][ T1707] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   46.991676][ T1707] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   47.006428][ T3734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.096164][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.134803][ T3746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'.
[   47.212492][ T3749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'.
[   47.278915][ T3756] bond0: (slave dummy0): Releasing backup interface
[   47.299950][ T3756] team0: Port device dummy0 added
[   47.366483][ T3760] Zero length message leads to an empty skb
[   47.407232][ T3765] loop4: detected capacity change from 0 to 128
[   47.469014][ T3771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'.
[   47.480243][ T3767] loop3: detected capacity change from 0 to 512
[   47.493809][ T3767] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.502233][ T3767] EXT4-fs: Ignoring removed i_version option
[   47.520656][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'.
[   47.537174][ T3767] EXT4-fs (loop3): 1 orphan inode deleted
[   47.550819][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.611783][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.773155][ T3794] loop2: detected capacity change from 0 to 128
[   47.866511][ T3800] bond0: (slave dummy0): Releasing backup interface
[   47.892029][ T3805] loop3: detected capacity change from 0 to 512
[   47.899146][ T3805] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.915947][ T3805] EXT4-fs: Ignoring removed i_version option
[   47.934047][ T3804] loop4: detected capacity change from 0 to 512
[   47.954361][ T3800] team0: Port device dummy0 added
[   47.966812][ T3805] EXT4-fs (loop3): 1 orphan inode deleted
[   47.975455][ T3804] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.983695][ T3804] EXT4-fs: Ignoring removed i_version option
[   47.986960][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.024943][ T3804] EXT4-fs (loop4): 1 orphan inode deleted
[   48.043493][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.069959][ T3800] team0: Port device dummy0 removed
[   48.122337][ T3800] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   48.146174][ T3815] loop2: detected capacity change from 0 to 512
[   48.156791][ T3804] team0: Port device dummy0 removed
[   48.162761][ T3815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   48.179166][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.188849][ T3815] EXT4-fs (loop2): 1 truncate cleaned up
[   48.195336][ T3815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.230523][ T3804] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   48.255400][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.442913][ T3833] loop3: detected capacity change from 0 to 128
[   48.816811][ T3852] loop4: detected capacity change from 0 to 512
[   48.832129][ T3852] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.846487][ T3852] EXT4-fs: Ignoring removed i_version option
[   49.000953][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.019746][ T3855] loop2: detected capacity change from 0 to 512
[   49.032795][ T3852] EXT4-fs (loop4): 1 orphan inode deleted
[   49.042717][ T3855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   49.062419][ T3852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.118081][ T3855] EXT4-fs (loop2): 1 truncate cleaned up
[   49.124418][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.141395][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.193366][ T3861] validate_nla: 10 callbacks suppressed
[   49.193385][ T3861] netlink: 'syz.4.138': attribute type 10 has an invalid length.
[   49.316242][ T3865] loop4: detected capacity change from 0 to 128
[   49.407593][ T3869] netlink: 'syz.3.140': attribute type 21 has an invalid length.
[   49.552721][   T29] kauditd_printk_skb: 554 callbacks suppressed
[   49.552737][   T29] audit: type=1326 audit(1756535595.524:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.582394][   T29] audit: type=1326 audit(1756535595.524:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.605721][   T29] audit: type=1326 audit(1756535595.524:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.629116][   T29] audit: type=1326 audit(1756535595.524:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.652395][   T29] audit: type=1326 audit(1756535595.524:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.675789][   T29] audit: type=1326 audit(1756535595.524:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.699169][   T29] audit: type=1326 audit(1756535595.524:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.722856][   T29] audit: type=1326 audit(1756535595.524:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.780616][   T29] audit: type=1326 audit(1756535595.624:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.803984][   T29] audit: type=1326 audit(1756535595.624:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21972ebe9 code=0x7ffc0000
[   49.856766][ T3885] sd 0:0:1:0: device reset
[   50.079643][ T3887] loop1: detected capacity change from 0 to 512
[   50.148803][ T3887] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   50.226774][ T3887] EXT4-fs (loop1): orphan cleanup on readonly fs
[   50.240027][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.148: corrupted inode contents
[   50.267438][ T3887] EXT4-fs (loop1): Remounting filesystem read-only
[   50.277612][ T3887] EXT4-fs (loop1): 1 truncate cleaned up
[   50.284318][   T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   50.295023][   T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   50.305747][   T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   50.316695][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.316738][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.338846][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.376830][ T3898] loop1: detected capacity change from 0 to 128
[   50.465533][ T3903] netlink: 'syz.2.154': attribute type 10 has an invalid length.
[   50.488764][ T3903] bond0: (slave dummy0): Releasing backup interface
[   50.528984][ T3903] team0: Port device dummy0 added
[   50.541481][ T3907] loop2: detected capacity change from 0 to 512
[   50.555677][ T3907] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.568103][ T3907] EXT4-fs: Ignoring removed i_version option
[   50.576487][ T3907] EXT4-fs (loop2): 1 orphan inode deleted
[   50.582657][ T3907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.598515][ T3903] netlink: 'syz.2.154': attribute type 10 has an invalid length.
[   50.619268][ T3903] team0: Port device dummy0 removed
[   50.632910][ T3903] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   50.657434][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.817675][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6b3000: rx timeout, send abort
[   50.826033][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6b2e00: rx timeout, send abort
[   50.834388][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6b3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   50.848900][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6b2e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   51.216691][ T3928] loop3: detected capacity change from 0 to 512
[   51.223823][ T3928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   51.236377][ T3928] EXT4-fs (loop3): 1 truncate cleaned up
[   51.242550][ T3928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.563355][ T3933] loop2: detected capacity change from 0 to 128
[   51.641422][ T3935] __nla_validate_parse: 5 callbacks suppressed
[   51.641438][ T3935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.164'.
[   52.077017][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.853037][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a7a0c00: rx timeout, send abort
[   52.861269][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a7a0a00: rx timeout, send abort
[   52.874090][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a7a0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   52.888418][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a7a0a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   52.938756][ T3961] netlink: 'syz.3.174': attribute type 10 has an invalid length.
[   52.969797][ T3961] bond0: (slave dummy0): Releasing backup interface
[   52.993125][ T3963] loop3: detected capacity change from 0 to 512
[   53.000834][ T3963] EXT4-fs: Ignoring removed nomblk_io_submit option
[   53.011499][ T3963] EXT4-fs: Ignoring removed i_version option
[   53.027568][ T3963] EXT4-fs (loop3): 1 orphan inode deleted
[   53.033834][ T3963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.040122][ T3961] team0: Port device dummy0 added
[   53.057659][ T3963] netlink: 'syz.3.174': attribute type 10 has an invalid length.
[   53.087663][ T3963] team0: Port device dummy0 removed
[   53.107184][ T3963] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   53.128686][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.793862][ T3979] netlink: 'syz.2.178': attribute type 21 has an invalid length.
[   53.827073][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   53.836701][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'.
[   54.212667][ T3988] loop1: detected capacity change from 0 to 128
[   54.272563][ T3989] sd 0:0:1:0: device reset
[   54.541397][ T3992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.723554][ T3995] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.765955][ T3992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.819137][ T3992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.829724][ T4000] netlink: 'syz.2.185': attribute type 10 has an invalid length.
[   54.843283][ T3995] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.866630][ T4000] bond0: (slave dummy0): Releasing backup interface
[   54.882372][ T4003] loop2: detected capacity change from 0 to 512
[   54.889406][ T4003] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.897160][ T4003] EXT4-fs: Ignoring removed i_version option
[   54.908112][ T4003] EXT4-fs (loop2): 1 orphan inode deleted
[   54.915924][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.930725][ T4003] netlink: 'syz.2.185': attribute type 10 has an invalid length.
[   54.935755][ T4000] team0: Port device dummy0 added
[   54.952290][ T3992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.965524][ T3995] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.978846][ T4003] team0: Port device dummy0 removed
[   54.986657][ T4003] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   55.014287][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.025909][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.042690][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.055322][ T3995] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.066753][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.075054][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.102387][ T4008] loop2: detected capacity change from 0 to 512
[   55.122305][   T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.141239][ T4012] loop4: detected capacity change from 0 to 512
[   55.142550][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.156329][   T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.167581][ T4008] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.182346][   T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.199492][ T4008] EXT4-fs: Ignoring removed i_version option
[   55.206781][ T4012] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   55.215411][ T4012] EXT4-fs (loop4): orphan cleanup on readonly fs
[   55.225612][ T4012] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.189: corrupted inode contents
[   55.248048][ T4012] EXT4-fs (loop4): Remounting filesystem read-only
[   55.256001][ T4012] EXT4-fs (loop4): 1 truncate cleaned up
[   55.261807][   T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   55.269227][   T29] kauditd_printk_skb: 284 callbacks suppressed
[   55.269323][   T29] audit: type=1326 audit(1756535601.264:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   55.272538][   T51] Quota error (device loop4): write_blk: dquota write failed
[   55.288969][ T4008] EXT4-fs (loop2): 1 orphan inode deleted
[   55.302083][   T51] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[   55.302111][   T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   55.302134][   T51] Quota error (device loop4): write_blk: dquota write failed
[   55.302150][   T51] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[   55.311543][   T29] audit: type=1326 audit(1756535601.304:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   55.327660][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.338288][   T29] audit: type=1326 audit(1756535601.304:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   55.338395][   T29] audit: type=1326 audit(1756535601.304:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   55.338495][   T29] audit: type=1326 audit(1756535601.304:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   55.338565][   T29] audit: type=1326 audit(1756535601.304:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   55.370072][   T51] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   55.502404][ T4008] netlink: 'syz.2.187': attribute type 10 has an invalid length.
[   55.502587][ T4012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.561923][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.562112][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.597339][ T4025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'.
[   55.633694][ T4029] netlink: 'syz.1.196': attribute type 21 has an invalid length.
[   55.642849][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   55.659435][ T4032] loop2: detected capacity change from 0 to 512
[   55.669682][ T4032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   55.729142][ T4032] EXT4-fs (loop2): 1 truncate cleaned up
[   55.743931][ T4036] netlink: 'syz.3.198': attribute type 10 has an invalid length.
[   55.774529][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.802495][ T4037] loop3: detected capacity change from 0 to 512
[   55.809796][ T4037] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.830582][ T4037] EXT4-fs: Ignoring removed i_version option
[   55.838208][ T4036] bond0: (slave dummy0): Releasing backup interface
[   55.855042][ T4037] EXT4-fs (loop3): 1 orphan inode deleted
[   55.865438][ T4037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.892596][ T4037] netlink: 'syz.3.198': attribute type 10 has an invalid length.
[   55.907081][ T4036] team0: Port device dummy0 added
[   55.922496][ T4041] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.938562][ T4037] team0: Port device dummy0 removed
[   55.949054][ T4037] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   55.965812][ T4041] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.993449][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.025938][ T4041] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.075895][ T4041] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.324308][ T4054] loop3: detected capacity change from 0 to 512
[   56.333587][ T4054] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.342349][ T4054] EXT4-fs: Ignoring removed i_version option
[   56.376612][ T4054] EXT4-fs (loop3): 1 orphan inode deleted
[   56.389541][ T4054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.407832][ T4054] netlink: 'syz.3.204': attribute type 10 has an invalid length.
[   56.467378][ T4057] loop3: detected capacity change from 0 to 512
[   56.485684][ T4057] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   56.493871][ T4057] EXT4-fs (loop3): orphan cleanup on readonly fs
[   56.516398][ T4057] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.205: corrupted inode contents
[   56.548084][ T4057] EXT4-fs (loop3): Remounting filesystem read-only
[   56.560513][ T4057] EXT4-fs (loop3): 1 truncate cleaned up
[   56.567889][   T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.578730][   T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.592684][   T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   56.658321][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'.
[   56.735372][ T4069] netlink: 'syz.3.210': attribute type 21 has an invalid length.
[   56.743182][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'.
[   56.896344][ T4073] netlink: 'syz.3.211': attribute type 10 has an invalid length.
[   56.907390][ T4073] bond0: (slave dummy0): Releasing backup interface
[   56.928395][ T4073] team0: Port device dummy0 added
[   56.963165][ T4073] loop3: detected capacity change from 0 to 512
[   56.980778][ T4073] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.989467][ T4073] EXT4-fs: Ignoring removed i_version option
[   57.033928][ T4073] EXT4-fs (loop3): 1 orphan inode deleted
[   57.059744][ T4073] netlink: 'syz.3.211': attribute type 10 has an invalid length.
[   57.152329][ T4073] team0: Port device dummy0 removed
[   57.198049][ T4087] loop0: detected capacity change from 0 to 512
[   57.218112][ T4087] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   57.226765][ T4073] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   57.228656][ T4087] EXT4-fs (loop0): orphan cleanup on readonly fs
[   57.244177][ T4087] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.217: corrupted inode contents
[   57.257620][ T4087] EXT4-fs (loop0): Remounting filesystem read-only
[   57.264743][ T4087] EXT4-fs (loop0): 1 truncate cleaned up
[   57.270620][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.281210][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.291833][   T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   57.324981][ T4091] loop3: detected capacity change from 0 to 512
[   57.339122][ T4091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   57.351241][ T4091] EXT4-fs (loop3): 1 truncate cleaned up
[   57.359483][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a10a400: rx timeout, send abort
[   57.367791][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a10a800: rx timeout, send abort
[   57.376166][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a10a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   57.390515][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a10a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   57.441651][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   57.845166][ T4107] sd 0:0:1:0: device reset
[   58.326316][ T4122] bond0: (slave dummy0): Releasing backup interface
[   58.336251][ T4125] loop2: detected capacity change from 0 to 512
[   58.365918][ T4125] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.376198][ T4125] EXT4-fs: Ignoring removed i_version option
[   58.399963][ T4125] EXT4-fs (loop2): 1 orphan inode deleted
[   58.441911][ T4122] team0: Port device dummy0 added
[   58.460750][ T4125] team0: Port device dummy0 removed
[   58.469371][ T4125] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.497282][ T4128] loop0: detected capacity change from 0 to 128
[   58.579798][ T4130] bond0: (slave dummy0): Releasing backup interface
[   58.598069][ T4130] team0: Port device dummy0 added
[   58.607662][ T4133] loop2: detected capacity change from 0 to 512
[   58.617684][ T4133] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.625324][ T4133] EXT4-fs: Ignoring removed i_version option
[   58.633864][ T4133] EXT4-fs (loop2): 1 orphan inode deleted
[   58.660062][ T4130] team0: Port device dummy0 removed
[   58.683426][ T4130] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.932683][ T4139] sd 0:0:1:0: device reset
[   59.056850][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5e3c00: rx timeout, send abort
[   59.065161][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881035fda00: rx timeout, send abort
[   59.074023][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a5e3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   59.088404][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881035fda00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   59.115988][   T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.171409][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.247578][   T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.320250][   T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.430468][ T4151] loop0: detected capacity change from 0 to 512
[   59.442795][ T4151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   59.453966][ T4151] EXT4-fs (loop0): 1 truncate cleaned up
[   59.473173][ T4156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.565945][ T4156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.625588][ T4156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.686408][ T4156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.792726][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.816301][ T1660] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.838026][ T1660] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.854855][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.946763][ T4163] loop3: detected capacity change from 0 to 128
[   59.998454][ T4165] loop3: detected capacity change from 0 to 128
[   60.065337][ T4165] loop3: detected capacity change from 0 to 2048
[   60.321720][ T4172] loop0: detected capacity change from 0 to 128
[   60.341750][   T29] kauditd_printk_skb: 417 callbacks suppressed
[   60.341769][   T29] audit: type=1326 audit(1756535606.344:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.371576][   T29] audit: type=1326 audit(1756535606.344:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.394949][   T29] audit: type=1326 audit(1756535606.344:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.418463][   T29] audit: type=1326 audit(1756535606.344:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.441885][   T29] audit: type=1326 audit(1756535606.344:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.442427][ T4172] loop0: detected capacity change from 0 to 2048
[   60.465256][   T29] audit: type=1326 audit(1756535606.344:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.465302][   T29] audit: type=1326 audit(1756535606.344:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.518456][   T29] audit: type=1326 audit(1756535606.344:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   60.541883][   T29] audit: type=1326 audit(1756535606.344:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f632708ec23 code=0x7ffc0000
[   60.568166][   T29] audit: type=1326 audit(1756535606.434:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f632708d69f code=0x7ffc0000
[   60.700416][ T4180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.751245][ T4184] loop4: detected capacity change from 0 to 128
[   60.771245][ T4184] loop4: detected capacity change from 0 to 2048
[   60.788074][ T4180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.828443][ T4180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.867427][ T4191] loop1: detected capacity change from 0 to 128
[   60.877713][ T4180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.959774][ T1660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.972974][ T4193] validate_nla: 6 callbacks suppressed
[   60.973070][ T4193] netlink: 'syz.1.254': attribute type 37 has an invalid length.
[   60.987418][ T1660] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.996833][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811af30a00: rx timeout, send abort
[   61.002095][ T1660] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.005151][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811af31000: rx timeout, send abort
[   61.021647][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811af30a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   61.034180][ T1660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.035986][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811af31000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   61.077896][ T4197] netlink: 'syz.0.255': attribute type 10 has an invalid length.
[   61.090778][ T4197] team0: Port device dummy0 removed
[   61.100011][ T4197] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   61.124822][ T4201] loop4: detected capacity change from 0 to 512
[   61.133869][ T4201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   61.162992][ T4201] EXT4-fs (loop4): 1 truncate cleaned up
[   61.200243][ T4207] netlink: 'syz.3.259': attribute type 37 has an invalid length.
[   61.847551][ T4215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'.
[   61.938334][ T4219] netlink: 'syz.1.262': attribute type 21 has an invalid length.
[   61.948510][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   62.048015][ T4222] loop2: detected capacity change from 0 to 128
[   62.224761][ T4222] loop2: detected capacity change from 0 to 2048
[   62.288147][ T4238] loop0: detected capacity change from 0 to 128
[   62.301789][ T4234] loop4: detected capacity change from 0 to 128
[   62.445982][ T4241] netlink: 'syz.1.270': attribute type 21 has an invalid length.
[   62.459885][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[   62.534704][ T4242] loop4: detected capacity change from 0 to 2048
[   62.550518][ T4243] loop0: detected capacity change from 0 to 2048
[   63.029406][ T4257] loop1: detected capacity change from 0 to 512
[   63.052789][ T4257] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.088524][ T4257] EXT4-fs: Ignoring removed i_version option
[   63.100105][ T4260] loop3: detected capacity change from 0 to 128
[   63.201838][ T4263] loop3: detected capacity change from 0 to 2048
[   63.271262][ T4257] EXT4-fs (loop1): 1 orphan inode deleted
[   63.667070][ T4257] netlink: 'syz.1.274': attribute type 10 has an invalid length.
[   63.764108][ T4274] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[   63.767359][ T4257] team0: Port device dummy0 removed
[   63.806893][ T4257] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   63.810766][ T4275] loop0: detected capacity change from 0 to 512
[   63.860961][ T4275] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.870447][ T4277] loop1: detected capacity change from 0 to 128
[   63.887980][ T4275] EXT4-fs: Ignoring removed i_version option
[   63.942494][ T4274] bond0: (slave dummy0): Releasing backup interface
[   64.037841][ T4275] EXT4-fs (loop0): 1 orphan inode deleted
[   64.046635][ T4275] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[   64.074989][ T4285] netlink: 'syz.4.282': attribute type 10 has an invalid length.
[   64.091870][ T4274] team0: Port device dummy0 added
[   64.101513][ T4280] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.128484][ T4275] team0: Port device dummy0 removed
[   64.144436][ T4275] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   64.215882][ T4285] bond0: (slave dummy0): Releasing backup interface
[   64.269911][ T4285] team0: Port device dummy0 added
[   64.322751][ T4280] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.335964][ T4292] netlink: 'syz.4.285': attribute type 10 has an invalid length.
[   64.436686][ T4295] loop0: detected capacity change from 0 to 512
[   64.443648][ T4295] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.452872][ T4295] EXT4-fs: Ignoring removed i_version option
[   64.467238][ T3399] IPVS: starting estimator thread 0...
[   64.468494][ T4295] EXT4-fs (loop0): 1 orphan inode deleted
[   64.482589][ T4294] bond0: (slave dummy0): Releasing backup interface
[   64.516238][ T4292] loop4: detected capacity change from 0 to 512
[   64.537121][ T4294] team0: Port device dummy0 added
[   64.545110][ T4292] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.555724][ T4292] EXT4-fs: Ignoring removed i_version option
[   64.556209][ T4280] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.564893][ T4298] IPVS: using max 1872 ests per chain, 93600 per kthread
[   64.583241][ T4295] team0: Port device dummy0 removed
[   64.591230][ T4295] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   64.609765][ T4292] EXT4-fs (loop4): 1 orphan inode deleted
[   64.620580][ T4280] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.651157][ T4292] team0: Port device dummy0 removed
[   64.667379][ T4292] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   64.678283][ T4301] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.708855][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'.
[   64.736627][ T4301] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.814272][ T4301] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.823894][ T4306] loop2: detected capacity change from 0 to 512
[   64.845506][ T4306] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   64.853708][ T4306] EXT4-fs (loop2): orphan cleanup on readonly fs
[   64.861734][ T4301] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.874763][ T4306] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.288: corrupted inode contents
[   64.889137][ T4306] EXT4-fs (loop2): Remounting filesystem read-only
[   64.895964][ T4306] EXT4-fs (loop2): 1 truncate cleaned up
[   64.901887][ T3695] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.912477][ T3695] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.925520][ T3695] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   65.079019][ T4318] loop1: detected capacity change from 0 to 512
[   65.089319][ T4318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   65.100762][ T4318] EXT4-fs (loop1): 1 truncate cleaned up
[   65.113764][ T4312] loop2: detected capacity change from 0 to 512
[   65.124762][ T4312] EXT4-fs: Ignoring removed nomblk_io_submit option
[   65.135624][ T4312] EXT4-fs: Ignoring removed i_version option
[   65.191046][    T9] IPVS: starting estimator thread 0...
[   65.214598][ T4312] EXT4-fs (loop2): 1 orphan inode deleted
[   65.284106][ T4322] IPVS: using max 2016 ests per chain, 100800 per kthread
[   65.292385][ T4326] loop2: detected capacity change from 0 to 128
[   65.329639][ T4326] loop2: detected capacity change from 0 to 2048
[   65.347393][   T29] kauditd_printk_skb: 448 callbacks suppressed
[   65.347471][   T29] audit: type=1326 audit(1756535611.354:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa804f7d550 code=0x7ffc0000
[   65.377205][   T29] audit: type=1326 audit(1756535611.354:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa804f7d937 code=0x7ffc0000
[   65.400459][   T29] audit: type=1326 audit(1756535611.354:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa804f7d550 code=0x7ffc0000
[   65.423841][   T29] audit: type=1326 audit(1756535611.354:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.447634][   T29] audit: type=1326 audit(1756535611.354:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.471070][   T29] audit: type=1326 audit(1756535611.354:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.494274][   T29] audit: type=1326 audit(1756535611.354:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.517793][   T29] audit: type=1326 audit(1756535611.354:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.541146][   T29] audit: type=1326 audit(1756535611.354:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.564422][   T29] audit: type=1326 audit(1756535611.354:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa804f7ebe9 code=0x7ffc0000
[   65.611555][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.623214][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.640152][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.663052][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.888002][ T4338] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.910783][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'.
[   66.085250][ T4338] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.188013][ T4346] loop1: detected capacity change from 0 to 512
[   66.250055][ T4346] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   66.279627][ T4346] EXT4-fs (loop1): orphan cleanup on readonly fs
[   66.310130][ T4346] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.300: corrupted inode contents
[   66.330735][ T4338] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.368950][ T4346] EXT4-fs (loop1): Remounting filesystem read-only
[   66.396536][ T4346] EXT4-fs (loop1): 1 truncate cleaned up
[   66.402546][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   66.413128][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   66.425115][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   66.450451][ T4338] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.643512][ T4355] loop4: detected capacity change from 0 to 512
[   66.657303][ T4355] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.668466][ T4355] EXT4-fs: Ignoring removed i_version option
[   66.889494][ T4365] validate_nla: 6 callbacks suppressed
[   66.889557][ T4365] netlink: 'syz.2.306': attribute type 10 has an invalid length.
[   66.913027][ T4365] bond0: (slave dummy0): Releasing backup interface
[   66.954799][ T4366] loop2: detected capacity change from 0 to 512
[   66.961667][ T4365] team0: Port device dummy0 added
[   66.976471][ T4366] EXT4-fs: Ignoring removed nomblk_io_submit option
[   67.003070][ T4366] EXT4-fs: Ignoring removed i_version option
[   67.051626][ T4366] EXT4-fs (loop2): 1 orphan inode deleted
[   67.067567][ T4365] netlink: 'syz.2.306': attribute type 10 has an invalid length.
[   67.108639][ T4365] team0: Port device dummy0 removed
[   67.114498][ T4355] EXT4-fs (loop4): 1 orphan inode deleted
[   67.132821][ T4355] netlink: 'syz.4.303': attribute type 10 has an invalid length.
[   67.148137][ T4365] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.201495][ T4371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'.
[   67.277870][ T4379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'.
[   67.277955][ T4378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'.
[   67.405018][ T4383] netlink: 'syz.2.314': attribute type 21 has an invalid length.
[   67.413010][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[   67.454995][ T4387] netlink: 'syz.1.316': attribute type 37 has an invalid length.
[   67.478233][ T4389] netlink: 'syz.4.317': attribute type 10 has an invalid length.
[   67.495214][ T4389] bond0: (slave dummy0): Releasing backup interface
[   67.526105][ T4389] team0: Port device dummy0 added
[   67.538087][ T4392] loop4: detected capacity change from 0 to 512
[   67.550094][ T4392] EXT4-fs: Ignoring removed nomblk_io_submit option
[   67.557180][ T4392] EXT4-fs: Ignoring removed i_version option
[   67.569261][ T4392] EXT4-fs (loop4): 1 orphan inode deleted
[   67.580666][ T4389] netlink: 'syz.4.317': attribute type 10 has an invalid length.
[   67.620232][ T4389] team0: Port device dummy0 removed
[   67.641266][ T4389] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.708476][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.721994][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.739536][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.754405][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.836646][ T4408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'.
[   67.879129][ T4405] loop0: detected capacity change from 0 to 512
[   67.888514][ T4405] EXT4-fs: Ignoring removed nomblk_io_submit option
[   67.911147][ T4405] EXT4-fs: Ignoring removed i_version option
[   67.981266][ T4405] EXT4-fs (loop0): 1 orphan inode deleted
[   68.010687][ T4405] netlink: 'syz.0.322': attribute type 10 has an invalid length.
[   68.083208][ T4418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.130105][ T4422] netlink: 'syz.0.329': attribute type 21 has an invalid length.
[   68.138315][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'.
[   68.155353][ T4418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.208345][ T4418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.268187][ T4418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.311792][ T4425] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.330857][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.341983][  T143] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.353609][  T143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.366666][  T143] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.386415][ T4425] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.398338][ T4431] netlink: 'syz.1.332': attribute type 10 has an invalid length.
[   68.428403][ T4431] bond0: (slave dummy0): Releasing backup interface
[   68.461107][ T4431] team0: Port device dummy0 added
[   68.479567][ T4434] loop1: detected capacity change from 0 to 512
[   68.487509][ T4425] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.498377][ T4434] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.511544][ T4434] EXT4-fs: Ignoring removed i_version option
[   68.530266][ T4434] EXT4-fs (loop1): 1 orphan inode deleted
[   68.601624][ T4431] team0: Port device dummy0 removed
[   68.648202][ T4431] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   68.764168][ T4438] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.787459][ T4425] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.826366][ T4438] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.877332][ T4438] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.116969][ T4438] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.322944][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.337561][ T3695] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.350501][ T3695] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.363044][ T3695] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.407731][ T4446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'.
[   69.456516][ T4448] loop4: detected capacity change from 0 to 512
[   69.465928][ T4448] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.479073][ T4448] EXT4-fs: Ignoring removed i_version option
[   69.511189][ T4448] EXT4-fs (loop4): 1 orphan inode deleted
[   69.533576][ T4448] EXT4-fs mount: 60 callbacks suppressed
[   69.533620][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.584384][ T4455] loop2: detected capacity change from 0 to 512
[   69.592969][ T4455] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.601397][ T4455] EXT4-fs: Ignoring removed i_version option
[   69.612339][ T4455] EXT4-fs (loop2): 1 orphan inode deleted
[   69.623346][ T4453] bond0: (slave dummy0): Releasing backup interface
[   69.634398][ T4455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.658348][ T4453] team0: Port device dummy0 added
[   69.673278][ T4455] team0: Port device dummy0 removed
[   69.680805][ T4455] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.690628][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.710173][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.830842][ T4465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'.
[   69.860708][ T4468] loop1: detected capacity change from 0 to 512
[   69.869863][ T4468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   69.880837][ T4468] EXT4-fs (loop1): 1 truncate cleaned up
[   69.890626][ T4468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.955919][ T4473] sd 0:0:1:0: device reset
[   70.370822][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'.
[   70.568388][ T4487] loop2: detected capacity change from 0 to 512
[   70.589600][ T4487] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.602553][ T4487] EXT4-fs: Ignoring removed i_version option
[   70.628604][ T4487] EXT4-fs (loop2): 1 orphan inode deleted
[   70.645361][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.698536][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.741696][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.756595][ T4492] bond0: (slave dummy0): Releasing backup interface
[   70.782006][ T4492] team0: Port device dummy0 added
[   70.818070][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'.
[   70.857013][ T4492] loop2: detected capacity change from 0 to 512
[   70.870578][ T4492] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.883238][ T4492] EXT4-fs: Ignoring removed i_version option
[   70.912609][ T4492] EXT4-fs (loop2): 1 orphan inode deleted
[   70.933122][ T4492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.952817][ T4498] bond0: (slave dummy0): Releasing backup interface
[   70.970429][ T4498] team0: Port device dummy0 added
[   71.002999][   T29] kauditd_printk_skb: 278 callbacks suppressed
[   71.003026][   T29] audit: type=1326 audit(1756535617.004:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.032854][   T29] audit: type=1326 audit(1756535617.014:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.047471][ T4492] team0: Port device dummy0 removed
[   71.056379][   T29] audit: type=1326 audit(1756535617.014:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056417][   T29] audit: type=1326 audit(1756535617.014:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056454][   T29] audit: type=1326 audit(1756535617.014:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056502][   T29] audit: type=1326 audit(1756535617.014:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056573][   T29] audit: type=1326 audit(1756535617.014:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056600][   T29] audit: type=1326 audit(1756535617.014:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056630][   T29] audit: type=1326 audit(1756535617.014:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.056656][   T29] audit: type=1326 audit(1756535617.014:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2142ebe9 code=0x7ffc0000
[   71.262396][ T4492] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   71.285241][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.860275][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.870971][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.882147][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.892859][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.926553][ T4511] loop3: detected capacity change from 0 to 128
[   72.060727][ T4517] loop3: detected capacity change from 0 to 128
[   72.121345][ T4521] loop2: detected capacity change from 0 to 512
[   72.128408][ T4521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   72.160683][ T4521] EXT4-fs (loop2): 1 truncate cleaned up
[   72.166925][ T4521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.467192][ T1707] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.551092][ T1707] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.559462][ T1707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.794788][ T1707] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.839163][ T4529] validate_nla: 8 callbacks suppressed
[   72.839257][ T4529] netlink: 'syz.0.366': attribute type 10 has an invalid length.
[   72.861890][ T4529] bond0: (slave dummy0): Releasing backup interface
[   72.905177][ T4529] team0: Port device dummy0 added
[   72.917040][ T4533] loop0: detected capacity change from 0 to 512
[   72.929202][ T4533] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.936594][ T4533] EXT4-fs: Ignoring removed i_version option
[   72.947367][ T4533] EXT4-fs (loop0): 1 orphan inode deleted
[   72.953514][ T4533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.029934][ T4529] netlink: 'syz.0.366': attribute type 10 has an invalid length.
[   73.056426][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.080132][ T4538] loop3: detected capacity change from 0 to 512
[   73.098370][ T4538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   73.117999][ T4538] EXT4-fs (loop3): 1 truncate cleaned up
[   73.126529][ T4529] team0: Port device dummy0 removed
[   73.130984][ T4538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.171038][ T4543] netlink: 'syz.2.370': attribute type 10 has an invalid length.
[   73.173600][ T4529] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   73.211332][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.223930][ T4543] bond0: (slave dummy0): Releasing backup interface
[   73.246074][ T4547] loop0: detected capacity change from 0 to 128
[   73.252616][ T4544] loop2: detected capacity change from 0 to 512
[   73.279472][ T4543] team0: Port device dummy0 added
[   73.305847][ T4544] EXT4-fs: Ignoring removed nomblk_io_submit option
[   73.312767][ T4544] EXT4-fs: Ignoring removed i_version option
[   73.336288][ T4550] __nla_validate_parse: 1 callbacks suppressed
[   73.336307][ T4550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.372'.
[   73.352316][ T4544] EXT4-fs (loop2): 1 orphan inode deleted
[   73.359020][ T4544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.390871][ T4543] netlink: 'syz.2.370': attribute type 10 has an invalid length.
[   73.433424][ T4543] team0: Port device dummy0 removed
[   73.471463][ T4543] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   73.499234][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.877212][ T4565] sd 0:0:1:0: device reset
[   74.298388][ T4568] loop4: detected capacity change from 0 to 128
[   74.456404][ T4564] loop4: detected capacity change from 0 to 2048
[   74.488371][ T4564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.532377][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.568997][ T4575] loop1: detected capacity change from 0 to 512
[   74.605462][ T4575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   74.681564][ T4575] EXT4-fs (loop1): 1 truncate cleaned up
[   74.691945][ T4575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.751455][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.987283][ T4590] loop4: detected capacity change from 0 to 128
[   74.996940][ T4583] loop0: detected capacity change from 0 to 512
[   75.019259][ T4583] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.058286][ T4583] EXT4-fs: Ignoring removed i_version option
[   75.303496][ T4583] EXT4-fs (loop0): 1 orphan inode deleted
[   75.330033][ T4583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.355195][ T4583] netlink: 'syz.0.381': attribute type 10 has an invalid length.
[   75.408183][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.423618][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.450210][ T4600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'.
[   75.501095][ T4602] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.536186][ T4602] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.546137][ T4605] loop3: detected capacity change from 0 to 512
[   75.556694][ T4605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   75.567860][ T4605] EXT4-fs (loop3): 1 truncate cleaned up
[   75.574712][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.604361][ T4609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'.
[   75.614794][ T4602] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.722719][ T4602] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.818025][   T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.837395][   T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.846113][   T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.856456][   T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.075984][ T4626] loop1: detected capacity change from 0 to 512
[   76.093484][ T4626] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.115232][ T4626] EXT4-fs: Ignoring removed i_version option
[   76.146117][ T4626] EXT4-fs (loop1): 1 orphan inode deleted
[   76.160000][ T4626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.182195][ T4626] netlink: 'syz.1.397': attribute type 10 has an invalid length.
[   76.220406][ T4626] team0: Port device dummy0 removed
[   76.241924][ T4626] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.268004][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.331608][ T4632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'.
[   76.391433][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.410117][ T4634] loop3: detected capacity change from 0 to 512
[   76.418091][ T4634] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   76.435717][ T4634] EXT4-fs (loop3): 1 truncate cleaned up
[   76.443620][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.458875][ T4637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'.
[   76.506771][ T4639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'.
[   76.754204][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   76.754221][   T29] audit: type=1326 audit(1756535622.754:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.755876][ T3407] IPVS: starting estimator thread 0...
[   76.760464][   T29] audit: type=1326 audit(1756535622.754:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.812697][   T29] audit: type=1326 audit(1756535622.754:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.836228][   T29] audit: type=1326 audit(1756535622.754:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.859683][   T29] audit: type=1326 audit(1756535622.754:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.883051][   T29] audit: type=1326 audit(1756535622.754:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.883328][ T4651] IPVS: using max 2016 ests per chain, 100800 per kthread
[   76.906394][   T29] audit: type=1326 audit(1756535622.754:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.936806][   T29] audit: type=1326 audit(1756535622.754:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.960233][   T29] audit: type=1326 audit(1756535622.754:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   76.983459][   T29] audit: type=1326 audit(1756535622.754:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632708ebe9 code=0x7ffc0000
[   77.013757][ T4655] netlink: 'syz.2.407': attribute type 37 has an invalid length.
[   77.096646][ T4640] ==================================================================
[   77.104790][ T4640] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range
[   77.113176][ T4640] 
[   77.115517][ T4640] write to 0xffff888119700b3c of 4 bytes by task 4634 on cpu 0:
[   77.123158][ T4640]  __xa_set_mark+0x172/0x1a0
[   77.127789][ T4640]  __folio_mark_dirty+0x3af/0x4d0
[   77.132853][ T4640]  mark_buffer_dirty+0x11e/0x210
[   77.137832][ T4640]  block_write_end+0x12d/0x210
[   77.142650][ T4640]  ext4_write_end+0x134/0x730
[   77.147359][ T4640]  generic_perform_write+0x312/0x490
[   77.152677][ T4640]  ext4_buffered_write_iter+0x1ee/0x3c0
[   77.158265][ T4640]  ext4_file_write_iter+0xdbf/0xf00
[   77.163517][ T4640]  iter_file_splice_write+0x663/0xa60
[   77.168916][ T4640]  direct_splice_actor+0x153/0x2a0
[   77.174055][ T4640]  splice_direct_to_actor+0x30f/0x680
[   77.179470][ T4640]  do_splice_direct+0xda/0x150
[   77.184255][ T4640]  do_sendfile+0x380/0x650
[   77.188722][ T4640]  __x64_sys_sendfile64+0x105/0x150
[   77.193954][ T4640]  x64_sys_call+0x2bb0/0x2ff0
[   77.198658][ T4640]  do_syscall_64+0xd2/0x200
[   77.203187][ T4640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.209112][ T4640] 
[   77.211452][ T4640] read to 0xffff888119700b3c of 4 bytes by task 4640 on cpu 1:
[   77.219008][ T4640]  filemap_write_and_wait_range+0xfc/0x340
[   77.224866][ T4640]  ext4_file_write_iter+0xe04/0xf00
[   77.230114][ T4640]  iter_file_splice_write+0x663/0xa60
[   77.235549][ T4640]  direct_splice_actor+0x153/0x2a0
[   77.240688][ T4640]  splice_direct_to_actor+0x30f/0x680
[   77.246092][ T4640]  do_splice_direct+0xda/0x150
[   77.250881][ T4640]  do_sendfile+0x380/0x650
[   77.255327][ T4640]  __x64_sys_sendfile64+0x105/0x150
[   77.260563][ T4640]  x64_sys_call+0x2bb0/0x2ff0
[   77.265257][ T4640]  do_syscall_64+0xd2/0x200
[   77.269792][ T4640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.275710][ T4640] 
[   77.278054][ T4640] value changed: 0x00000021 -> 0x0a000021
[   77.283792][ T4640] 
[   77.286128][ T4640] Reported by Kernel Concurrency Sanitizer on:
[   77.292312][ T4640] CPU: 1 UID: 0 PID: 4640 Comm: syz.3.400 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.301974][ T4640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   77.312070][ T4640] ==================================================================
[   77.475564][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.