last executing test programs:

3m13.386905335s ago: executing program 4 (id=502):
r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\x0f\x00\x00\x00\x00\x00\x00\x00\x04', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
close(r0)

3m13.345373518s ago: executing program 4 (id=503):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x885}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

3m13.344960389s ago: executing program 4 (id=504):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
gettid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
getgid()
modify_ldt$write(0x1, &(0x7f0000000200)={0x8, 0x20001000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)

3m13.08135926s ago: executing program 4 (id=511):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

3m13.050798292s ago: executing program 4 (id=512):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
syz_read_part_table(0x5a0, &(0x7f0000000cc0)="$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")

3m12.872057767s ago: executing program 4 (id=516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x208}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

3m12.82349511s ago: executing program 32 (id=516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x208}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

3m6.675945058s ago: executing program 5 (id=700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000030c0)={0x34, r1, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040842)

3m6.605591964s ago: executing program 5 (id=702):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

3m6.53189386s ago: executing program 5 (id=706):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000004000/0x3000)=nil, 0x3000)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)

3m6.416207729s ago: executing program 5 (id=714):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0xfffd, 0x0)

3m6.323730826s ago: executing program 5 (id=715):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

3m2.592532612s ago: executing program 5 (id=844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

3m2.581487363s ago: executing program 33 (id=844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

2m36.799131251s ago: executing program 2 (id=1653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)

2m36.750076844s ago: executing program 2 (id=1654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=<r3=>0x0)
timer_delete(r3)

2m36.631831984s ago: executing program 2 (id=1655):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

2m35.767755902s ago: executing program 2 (id=1674):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15)

2m35.583234047s ago: executing program 2 (id=1681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m35.539385751s ago: executing program 2 (id=1683):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

2m35.106748985s ago: executing program 0 (id=1696):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
close(r0)

2m35.017658012s ago: executing program 0 (id=1697):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = io_uring_setup(0xa9e, &(0x7f0000000880)={0x0, 0xa793, 0x1, 0x5, 0x2a})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="07000000040000008000000004000000280000", @ANYRES64=0x0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2m34.892212872s ago: executing program 0 (id=1704):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

2m34.855256535s ago: executing program 0 (id=1706):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x100, 0x0, 0xfffffffd}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000001040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)

2m34.801584579s ago: executing program 6 (id=1709):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x0, './file0\x00'}})

2m34.78378172s ago: executing program 0 (id=1710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m34.728032765s ago: executing program 6 (id=1712):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0x1, 0xd5}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}})
syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0xffffffffffffffd0}}, 0x1006)
io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0)

2m34.631781683s ago: executing program 6 (id=1713):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7a2a, 0x9, 0x5a}, 0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
shutdown(r1, 0x1)

2m34.631527492s ago: executing program 0 (id=1714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

2m34.519565802s ago: executing program 6 (id=1719):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x7a680000)

2m34.16219647s ago: executing program 6 (id=1723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m33.879795392s ago: executing program 6 (id=1725):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f)

2m20.494161525s ago: executing program 34 (id=1683):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

2m19.488083295s ago: executing program 35 (id=1714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

2m18.864488694s ago: executing program 36 (id=1725):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f)

2.318810686s ago: executing program 9 (id=5822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110200, 0x318, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1.904220899s ago: executing program 9 (id=5835):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4})
mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@noswap}, {@huge_never}], [], 0x39})

1.795965137s ago: executing program 9 (id=5837):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)

1.746408121s ago: executing program 7 (id=5839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000003, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))

1.63997415s ago: executing program 3 (id=5843):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110200, 0x318, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1.627736791s ago: executing program 7 (id=5853):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000680)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

1.532860058s ago: executing program 8 (id=5846):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x6)
fchdir(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)

1.349408183s ago: executing program 8 (id=5847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.161947367s ago: executing program 8 (id=5859):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES8=0x0], 0x1, 0x252, &(0x7f00000007c0)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1.120081461s ago: executing program 7 (id=5850):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x1, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
exit(0xffff)

930.611516ms ago: executing program 3 (id=5854):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

886.37389ms ago: executing program 9 (id=5856):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)

827.600784ms ago: executing program 3 (id=5857):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000)

827.177704ms ago: executing program 1 (id=5858):
r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = inotify_init1(0x800)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526)
r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)

804.682426ms ago: executing program 1 (id=5860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

755.2077ms ago: executing program 9 (id=5861):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
readv(r1, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/183, 0xb7}], 0x1)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@shortname_lower}, {@rodir}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@fat=@check_normal}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@fat=@umask}, {@shortname_win95}]}, 0x26, 0x34e, &(0x7f0000000540)="$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")
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

733.018532ms ago: executing program 1 (id=5862):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e)

657.908018ms ago: executing program 8 (id=5863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
accept(r2, 0x0, 0x0)

657.661718ms ago: executing program 3 (id=5864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

656.299178ms ago: executing program 1 (id=5874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

457.952764ms ago: executing program 3 (id=5865):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0)
r0 = gettid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)

457.107564ms ago: executing program 9 (id=5876):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

440.076805ms ago: executing program 8 (id=5866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110200, 0x318, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

404.109828ms ago: executing program 1 (id=5867):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x2c020400)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)

253.50777ms ago: executing program 7 (id=5868):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @broadcast}, "e8a6647b41d5d17c8224497e20aeaf10ffb6df27"}}}}}, 0x3e)

252.93497ms ago: executing program 1 (id=5880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r2, 0x0, 0x91, 0x20008800, 0x0, 0x0)

158.319628ms ago: executing program 7 (id=5869):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

156.064448ms ago: executing program 3 (id=5870):
socket$kcm(0x29, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)

15.256299ms ago: executing program 8 (id=5871):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18)
utimensat(r2, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=5872):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

kernel console output (not intermixed with test programs):

ver after parsing attributes in process `syz.8.3931'.
[  169.660838][   T29] kauditd_printk_skb: 176 callbacks suppressed
[  169.660864][   T29] audit: type=1400 audit(169.639:5274): avc:  denied  { cpu } for  pid=13097 comm="syz.8.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  169.763536][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3935'.
[  169.817653][   T29] audit: type=1326 audit(169.779:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.840958][   T29] audit: type=1326 audit(169.779:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.863958][   T29] audit: type=1326 audit(169.779:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.887328][   T29] audit: type=1326 audit(169.779:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.910368][   T29] audit: type=1326 audit(169.779:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.933377][   T29] audit: type=1326 audit(169.779:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.956742][   T29] audit: type=1326 audit(169.779:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  169.980124][   T29] audit: type=1326 audit(169.779:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  170.003221][   T29] audit: type=1326 audit(169.779:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13108 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  170.041964][T13120] xt_connbytes: Forcing CT accounting to be enabled
[  170.073198][T13120] Cannot find set identified by id 0 to match
[  170.146443][ T4048] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  170.162133][ T4048] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  170.174472][ T4048] EXT4-fs (loop1): This should not happen!! Data will be lost
[  170.174472][ T4048] 
[  170.184168][ T4048] EXT4-fs (loop1): Total free blocks count 0
[  170.190304][ T4048] EXT4-fs (loop1): Free/Dirty block details
[  170.196305][ T4048] EXT4-fs (loop1): free_blocks=66060288
[  170.201948][ T4048] EXT4-fs (loop1): dirty_blocks=4112
[  170.207296][ T4048] EXT4-fs (loop1): Block reservation details
[  170.213308][ T4048] EXT4-fs (loop1): i_reserved_data_blocks=257
[  170.222708][ T4048] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  170.474056][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3956'.
[  170.505104][T13150] team1: entered promiscuous mode
[  170.510373][T13150] team1: entered allmulticast mode
[  170.524880][T13150] 8021q: adding VLAN 0 to HW filter on device team1
[  170.539428][T13152] vlan2: entered allmulticast mode
[  170.831970][T13174] lo speed is unknown, defaulting to 1000
[  170.837200][T13177] loop1: detected capacity change from 0 to 1024
[  170.845938][T13175] loop3: detected capacity change from 0 to 4096
[  170.882161][T13175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.899147][T13177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.916370][T13170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.925832][T13170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.969971][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.009188][T13187] Cannot find add_set index 0 as target
[  171.033911][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.441828][T13232] loop1: detected capacity change from 0 to 164
[  171.474651][T13232] bio_check_eod: 314 callbacks suppressed
[  171.474671][T13232] syz.1.3988: attempt to access beyond end of device
[  171.474671][T13232] loop1: rw=8912896, sector=263328, nr_sectors = 4 limit=164
[  171.512212][T13232] syz.1.3988: attempt to access beyond end of device
[  171.512212][T13232] loop1: rw=8388608, sector=263328, nr_sectors = 4 limit=164
[  171.600452][T13249] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3996'.
[  171.699782][T13261] syzkaller0: entered allmulticast mode
[  171.705734][T13261] syzkaller0: entered promiscuous mode
[  171.714590][T13261] syzkaller0 (unregistering): left allmulticast mode
[  171.722264][T13261] syzkaller0 (unregistering): left promiscuous mode
[  172.030500][T13289] loop8: detected capacity change from 0 to 128
[  172.056168][T13281] lo speed is unknown, defaulting to 1000
[  172.068444][T13290] loop9: detected capacity change from 0 to 4096
[  172.088386][T13290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.302743][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.408465][T13304] loop1: detected capacity change from 0 to 128
[  172.427508][T13304] msdos: Unknown parameter 'dos1xfl%�4?օy'
[  172.925853][T13349] netlink: 'syz.7.4041': attribute type 1 has an invalid length.
[  172.951354][T13353] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4043'.
[  172.963504][T13353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13353 comm=syz.7.4043
[  172.977050][T13353] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4043'.
[  173.015839][ T5573] hid_parser_main: 22 callbacks suppressed
[  173.015862][ T5573] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4
[  173.029570][ T5573] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2
[  173.037369][ T5573] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3
[  173.056640][ T5573] hid-generic 0000:3000000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  173.343992][T13379] rdma_op ffff888104200980 conn xmit_rdma 0000000000000000
[  173.424105][T13387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13387 comm=syz.1.4057
[  173.436823][T13387] __nla_validate_parse: 4 callbacks suppressed
[  173.436839][T13387] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4057'.
[  173.478039][T13391] loop7: detected capacity change from 0 to 512
[  173.485084][T13391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  173.495772][T13391] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.4059: invalid block
[  173.508213][T13391] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4059: invalid indirect mapped block 4294967295 (level 1)
[  173.508593][T13394] loop1: detected capacity change from 0 to 512
[  173.528972][T13391] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4059: invalid indirect mapped block 4294967295 (level 1)
[  173.544632][T13394] EXT4-fs: dax option not supported
[  173.547371][T13391] EXT4-fs (loop7): 2 truncates cleaned up
[  173.561693][T13391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.611390][ T8266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.659777][T13407] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[  173.673764][T13407] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[  173.691244][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4068'.
[  173.749347][T13416] loop7: detected capacity change from 0 to 128
[  173.883782][T13423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4073'.
[  173.932845][T13425] debugfs: 'ttyS3' already exists in 'caif_serial'
[  173.981849][T13421] lo speed is unknown, defaulting to 1000
[  174.690017][   T29] kauditd_printk_skb: 84 callbacks suppressed
[  174.690035][   T29] audit: type=1400 audit(174.669:5368): avc:  denied  { read } for  pid=13448 comm="syz.3.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  174.741046][   T29] audit: type=1400 audit(174.719:5369): avc:  denied  { ioctl } for  pid=13448 comm="syz.3.4083" path="socket:[42738]" dev="sockfs" ino=42738 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  174.796817][   T29] audit: type=1400 audit(174.769:5370): avc:  denied  { write } for  pid=13455 comm="syz.7.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  174.845415][   T29] audit: type=1400 audit(174.799:5371): avc:  denied  { nlmsg_write } for  pid=13455 comm="syz.7.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  174.866558][   T29] audit: type=1326 audit(174.799:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.8.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  174.890695][   T29] audit: type=1326 audit(174.799:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.8.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  174.914514][   T29] audit: type=1326 audit(174.799:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.8.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  174.938392][   T29] audit: type=1326 audit(174.799:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.8.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  174.962179][   T29] audit: type=1326 audit(174.809:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.8.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  174.983362][ T3411] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4
[  174.985823][   T29] audit: type=1326 audit(174.809:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.8.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  174.992781][ T3411] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2
[  174.995145][ T3411] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3
[  175.067347][ T3411] hid-generic 0000:3000000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  175.110117][T13472] set_capacity_and_notify: 1 callbacks suppressed
[  175.110138][T13472] loop8: detected capacity change from 0 to 2048
[  175.137822][T13472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.420487][ T8320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.810579][T13533] loop9: detected capacity change from 0 to 164
[  175.818969][T13533] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  175.831088][T13533] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  175.853052][T13533] Symlink component flag not implemented
[  175.858786][T13533] Symlink component flag not implemented
[  175.878279][T13533] Symlink component flag not implemented (7)
[  175.884364][T13533] Symlink component flag not implemented (116)
[  175.914792][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4123'.
[  175.948597][T13541] 8021q: adding VLAN 0 to HW filter on device team0
[  175.962271][T13548] loop8: detected capacity change from 0 to 128
[  175.969918][T13548] vfat: Unknown parameter '01777777777777777777777'
[  176.162990][T13569] loop9: detected capacity change from 0 to 512
[  176.182369][T13569] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  176.193979][T13569] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  176.204152][T13569] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4136: Corrupt directory, running e2fsck is recommended
[  176.218362][T13569] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  176.228705][T13569] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.4136: corrupted in-inode xattr: e_name out of bounds
[  176.255915][T13569] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4136: couldn't read orphan inode 15 (err -117)
[  176.269782][T13569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.318979][T13569] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.475077][T13593] lo speed is unknown, defaulting to 1000
[  176.839742][T13626] pim6reg1: entered promiscuous mode
[  176.845110][T13626] pim6reg1: entered allmulticast mode
[  176.856400][T13629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.870775][T13629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.229810][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4177'.
[  177.254547][T13668] loop7: detected capacity change from 0 to 1024
[  177.262292][T13668] EXT4-fs: Ignoring removed oldalloc option
[  177.269008][T13668] EXT4-fs: Ignoring removed bh option
[  177.316310][T13668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.353924][ T8266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.409079][T13683] loop7: detected capacity change from 0 to 2048
[  177.473485][T13683]  loop7: unable to read partition table
[  177.489730][T13683] loop7: partition table beyond EOD, truncated
[  177.496007][T13683] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  177.544798][T13694] syzkaller0: entered allmulticast mode
[  177.551119][T13694] syzkaller0: entered promiscuous mode
[  177.561745][T13694] syzkaller0 (unregistering): left promiscuous mode
[  177.567068][T13698] loop3: detected capacity change from 0 to 736
[  177.569199][T13694] syzkaller0 (unregistering): left allmulticast mode
[  177.596958][T13700] loop1: detected capacity change from 0 to 1024
[  177.604249][T13700] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  177.615987][T13700] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  177.626740][T13700] JBD2: no valid journal superblock found
[  177.633379][T13700] EXT4-fs (loop1): Could not load journal inode
[  177.637914][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.653849][T13700] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  177.773621][T10151] Process accounting resumed
[  177.934356][T13727] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  177.945312][ T1043] Process accounting resumed
[  177.998306][T13732] netlink: 'syz.3.4206': attribute type 1 has an invalid length.
[  178.013317][T13732] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.033154][T13732] 8021q: adding VLAN 0 to HW filter on device batadv1
[  178.042454][T13732] bond2: (slave batadv1): making interface the new active one
[  178.060903][T13732] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  178.087855][T13735] netlink: 'syz.3.4206': attribute type 13 has an invalid length.
[  178.147594][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4207'.
[  178.250343][ T2033] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  178.263254][ T2033] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  178.293888][ T2033] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  178.320252][ T2033] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  178.375785][T13753] loop1: detected capacity change from 0 to 128
[  178.395426][T13753] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  178.460588][ T4021] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  178.525871][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4219'.
[  178.550928][T13771] IPVS: Error connecting to the multicast addr
[  178.589169][T13786] loop3: detected capacity change from 0 to 1024
[  178.596381][T13786] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  178.607587][T13786] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  178.620157][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4229'.
[  178.632200][T13786] JBD2: no valid journal superblock found
[  178.638265][T13786] EXT4-fs (loop3): Could not load journal inode
[  178.662057][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'.
[  178.686319][T13786] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  178.701726][T10151] Process accounting resumed
[  178.725704][T13795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.735743][T13795] tipc: Disabling bearer <eth:syzkaller0>
[  178.778805][T13803] netlink: 'syz.3.4235': attribute type 29 has an invalid length.
[  178.892046][ T3411] Process accounting resumed
[  179.002089][T13818] tipc: Invalid UDP bearer configuration
[  179.002101][T13818] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  179.100556][T13829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.131404][ T8320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.275213][T13847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4252'.
[  179.421264][T13853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4255'.
[  179.430484][T13853] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  179.478568][T13857] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  179.513018][T13857] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.4258: Allocating blocks 41-42 which overlap fs metadata
[  179.536876][T13857] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.4258: Allocating blocks 41-42 which overlap fs metadata
[  179.552405][T13857] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4258: Failed to acquire dquot type 1
[  179.554036][T13868] netlink: 'syz.8.4263': attribute type 10 has an invalid length.
[  179.569088][T13857] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: 
[  179.571740][T13868] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4263'.
[  179.586692][T13868] dummy0: entered promiscuous mode
[  179.590030][T13857] block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  179.594561][T13868] batman_adv: batadv0: Interface deactivated: dummy0
[  179.604549][T13857] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4258: corrupted inode contents
[  179.611319][T13868] batman_adv: batadv0: Removing interface: dummy0
[  179.622779][T13857] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.4258: mark_inode_dirty error
[  179.641316][T13868] bridge0: port 3(dummy0) entered blocking state
[  179.647782][T13868] bridge0: port 3(dummy0) entered disabled state
[  179.655058][T13868] dummy0: entered allmulticast mode
[  179.660755][T13857] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4258: corrupted inode contents
[  179.661441][T13868] bridge0: port 3(dummy0) entered blocking state
[  179.679163][T13868] bridge0: port 3(dummy0) entered forwarding state
[  179.697528][T13857] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.4258: mark_inode_dirty error
[  179.718474][T13857] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4258: corrupted inode contents
[  179.735181][T13857] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  179.744694][T13857] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4258: corrupted inode contents
[  179.762415][T13857] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.4258: mark_inode_dirty error
[  179.773964][T13857] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[  179.784416][T13857] EXT4-fs (loop9): 1 truncate cleaned up
[  179.792566][T13857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.849859][   T29] kauditd_printk_skb: 262 callbacks suppressed
[  179.849874][   T29] audit: type=1326 audit(179.829:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  179.880181][   T29] audit: type=1326 audit(179.829:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  179.880982][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.904021][   T29] audit: type=1326 audit(179.829:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  179.935951][   T29] audit: type=1326 audit(179.829:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  179.959575][   T29] audit: type=1326 audit(179.829:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  179.982961][   T29] audit: type=1326 audit(179.829:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  180.006588][   T29] audit: type=1326 audit(179.829:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  180.030372][   T29] audit: type=1326 audit(179.829:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  180.053919][   T29] audit: type=1326 audit(179.829:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  180.077450][   T29] audit: type=1326 audit(179.829:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  180.137503][T13900] batman_adv: batadv0: Interface deactivated: dummy0
[  180.145117][T13900] batman_adv: batadv0: Removing interface: dummy0
[  180.175333][T13900] bond0: (slave batadv0): Releasing backup interface
[  180.183619][T13906] netlink: 'syz.9.4272': attribute type 10 has an invalid length.
[  180.229416][T13900] bridge_slave_0: left allmulticast mode
[  180.235198][T13900] bridge_slave_0: left promiscuous mode
[  180.241514][T13900] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.251197][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4272'.
[  180.263852][T13900] bridge_slave_1: left allmulticast mode
[  180.269745][T13900] bridge_slave_1: left promiscuous mode
[  180.275607][T13900] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.287107][T13900] bond0: (slave bond_slave_0): Releasing backup interface
[  180.298622][T13900] bond0: (slave bond_slave_1): Releasing backup interface
[  180.299025][T13916] set_capacity_and_notify: 3 callbacks suppressed
[  180.299044][T13916] loop1: detected capacity change from 0 to 8192
[  180.323470][T13900] team0: Port device team_slave_0 removed
[  180.334729][T13900] team0: Port device team_slave_1 removed
[  180.342508][T13900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.349984][T13900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.360341][T13900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.367843][T13900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.390927][T13900] bond1: (slave bridge1): Releasing active interface
[  180.422212][T13906] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.443712][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4289'.
[  180.451908][T13906] team0: Port device bond0 added
[  180.491607][T13919] team0 (unregistering): Port device bond0 removed
[  180.558589][T13941] netlink: 'syz.7.4294': attribute type 33 has an invalid length.
[  180.566444][T13941] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4294'.
[  180.577037][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4294'.
[  180.582032][T13943] loop9: detected capacity change from 0 to 512
[  180.598216][T13941] batman_adv: batadv0: Removing interface: dummy0
[  180.606148][T13943] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.4295: ea_inode file size=0 entry size=6
[  180.623101][T13943] EXT4-fs (loop9): 1 orphan inode deleted
[  180.629907][T13943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.652488][T13947] loop1: detected capacity change from 0 to 512
[  180.660989][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.671955][T13947] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  180.687516][T13947] EXT4-fs (loop1): mount failed
[  180.712802][T13952] netlink: 'syz.7.4298': attribute type 10 has an invalid length.
[  180.723092][T13952] bond0: (slave team0): Releasing backup interface
[  180.737184][T13952] team0 (unregistering): Port device team_slave_0 removed
[  180.747224][T13952] team0 (unregistering): Port device team_slave_1 removed
[  180.781014][T13961] loop9: detected capacity change from 0 to 512
[  180.800529][T13961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.833298][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.891098][T13973] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  180.919732][T13977] loop7: detected capacity change from 0 to 1024
[  180.927521][T13977] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  180.938752][T13977] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  180.949865][T13979] netlink: 'syz.1.4310': attribute type 1 has an invalid length.
[  180.959454][T13977] JBD2: no valid journal superblock found
[  180.965269][T13977] EXT4-fs (loop7): Could not load journal inode
[  180.980230][T13979] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.988988][T13984] netlink: 'syz.9.4312': attribute type 10 has an invalid length.
[  180.989557][T13977] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  181.006151][T13984] dummy0: entered promiscuous mode
[  181.012868][T13984] bridge0: port 1(dummy0) entered blocking state
[  181.019452][T13984] bridge0: port 1(dummy0) entered disabled state
[  181.026574][T13984] dummy0: entered allmulticast mode
[  181.033099][T13984] bridge0: port 1(dummy0) entered blocking state
[  181.039618][T13984] bridge0: port 1(dummy0) entered forwarding state
[  181.052678][T13979] 8021q: adding VLAN 0 to HW filter on device batadv2
[  181.062686][T13979] bond2: (slave batadv2): making interface the new active one
[  181.070849][T13988] netlink: 'syz.1.4310': attribute type 13 has an invalid length.
[  181.080764][T13979] bond2: (slave batadv2): Enslaving as an active interface with an up link
[  181.164505][T13988] batman_adv: batadv0: Interface deactivated: dummy0
[  181.232594][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.237197][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.372976][T13988] hsr0: left allmulticast mode
[  181.378723][T13988] hsr_slave_0: left allmulticast mode
[  181.384357][T13988] hsr_slave_1: left allmulticast mode
[  181.392665][T14013] serio: Serial port ttyS3
[  181.403785][T13998] tipc: Invalid UDP bearer configuration
[  181.403804][T13998] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  181.418581][ T4027] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.427072][ T4027] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.437412][T14008] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  181.454458][ T4027] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.462919][ T4027] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.497591][ T4027] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.506176][ T4027] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.523680][ T4027] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.532143][ T4027] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.553598][T14021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14021 comm=syz.9.4327
[  181.575565][T14019] syzkaller0: entered allmulticast mode
[  181.583170][T14019] syzkaller0 (unregistering): left allmulticast mode
[  181.672659][T14035] bridge0: port 3(dummy0) entered disabled state
[  181.680848][T14035] dummy0 (unregistering): left allmulticast mode
[  181.690874][T14035] bridge0: port 3(dummy0) entered disabled state
[  181.706867][T14037] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.726406][T14037] 8021q: adding VLAN 0 to HW filter on device batadv1
[  181.735918][T14037] bond2: (slave batadv1): making interface the new active one
[  181.745149][T14037] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  181.755024][T14039] loop9: detected capacity change from 0 to 8192
[  181.771271][T14037] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  181.865742][T14048] loop8: detected capacity change from 0 to 2048
[  181.893462][T14048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.924328][T14048] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4340: bg 0: block 345: padding at end of block bitmap is not set
[  181.940752][T14048] EXT4-fs (loop8): Remounting filesystem read-only
[  181.971347][ T8320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.098567][T14066] loop7: detected capacity change from 0 to 128
[  182.127891][T14069] bridge0: port 1(dummy0) entered disabled state
[  182.136006][T14069] dummy0 (unregistering): left allmulticast mode
[  182.143321][T14069] bridge0: port 1(dummy0) entered disabled state
[  182.205535][T14075] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.224213][T14075] 8021q: adding VLAN 0 to HW filter on device batadv1
[  182.233385][T14075] bond2: (slave batadv1): making interface the new active one
[  182.244640][T14075] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  182.419609][ T4045] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.430823][T14097] syzkaller0: entered allmulticast mode
[  182.436725][ T4045] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.447967][T14097] syzkaller0 (unregistering): left allmulticast mode
[  182.489380][ T4045] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.498620][ T4045] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.757975][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.049820][T14144] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14144 comm=syz.3.4381
[  183.063035][T14144] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14144 comm=syz.3.4381
[  183.123876][T14150] loop2: detected capacity change from 0 to 7
[  183.218441][T14160] vlan2: entered allmulticast mode
[  183.324358][T14170] validate_nla: 10 callbacks suppressed
[  183.324377][T14170] netlink: 'syz.9.4394': attribute type 1 has an invalid length.
[  183.344193][T14170] bond3: entered promiscuous mode
[  183.349489][T14170] bond3: entered allmulticast mode
[  183.354920][T14170] 8021q: adding VLAN 0 to HW filter on device bond3
[  183.369523][T14170] macvlan2: entered promiscuous mode
[  183.374873][T14170] macvlan2: entered allmulticast mode
[  183.381822][T14170] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  183.405380][T14175] loop7: detected capacity change from 0 to 1024
[  183.412784][T14175] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  183.471726][T14180] EXT4-fs: dax option not supported
[  183.535399][T14192] __nla_validate_parse: 16 callbacks suppressed
[  183.535413][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4403'.
[  183.633272][T14199] SELinux: failed to load policy
[  183.710792][T14205] tipc: New replicast peer: 255.255.255.255
[  183.716991][T14205] tipc: Enabled bearer <udp:s>, priority 10
[  183.740296][T14207] SELinux:  Context � is not valid (left unmapped).
[  183.769291][T14209] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4412'.
[  183.832359][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4413'.
[  183.842667][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4413'.
[  184.352035][T14254] EXT4-fs: inline encryption not supported
[  184.358131][T14254] EXT4-fs: Ignoring removed orlov option
[  184.374770][T14254] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  184.412312][T14254] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002]
[  184.436558][T14254] System zones: 0-1, 3-12
[  184.453539][T14254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.487937][T14262] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4435'.
[  184.571471][T14262] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4435'.
[  184.654739][T14266] FAT-fs (loop1): bogus number of FAT sectors
[  184.660949][T14266] FAT-fs (loop1): Can't find a valid FAT filesystem
[  184.745211][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.788180][T14269] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.798039][T14269] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.912869][T14269] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.922743][T14269] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.990653][T14269] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.000677][T14269] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.050392][   T29] kauditd_printk_skb: 301 callbacks suppressed
[  185.050412][   T29] audit: type=1400 audit(185.029:5946): avc:  denied  { create } for  pid=14278 comm="syz.3.4443" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1
[  185.080079][T14281] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  185.114316][T14269] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.124262][T14269] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.189196][   T29] audit: type=1400 audit(185.159:5947): avc:  denied  { firmware_load } for  pid=14292 comm="syz.9.4450" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  185.226613][T14297] EXT4-fs: Ignoring removed nobh option
[  185.256307][ T4034] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.264686][ T4034] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.279162][T14300] pim6reg: entered allmulticast mode
[  185.281694][T14297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.287072][T14300] pim6reg: left allmulticast mode
[  185.316641][T14297] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  185.340599][ T4034] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.349592][ T4034] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.364451][ T4034] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.373500][ T4034] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.382085][ T4034] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.391115][ T4034] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.400849][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.454003][   T29] audit: type=1400 audit(185.429:5948): avc:  denied  { setopt } for  pid=14316 comm="syz.9.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  185.646918][   T29] audit: type=1400 audit(185.619:5949): avc:  denied  { mounton } for  pid=14321 comm="syz.1.4460" path="/940/file0" dev="tmpfs" ino=4894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  185.673737][T14323] netlink: 131740 bytes leftover after parsing attributes in process `syz.8.4459'.
[  185.683286][T14323] netlink: zone id is out of range
[  185.689220][T14323] netlink: zone id is out of range
[  185.694542][T14323] netlink: zone id is out of range
[  185.699791][T14323] netlink: zone id is out of range
[  185.704999][T14323] netlink: zone id is out of range
[  185.710961][T14323] netlink: zone id is out of range
[  185.716125][T14323] netlink: zone id is out of range
[  185.721282][T14323] netlink: zone id is out of range
[  185.726404][T14323] netlink: zone id is out of range
[  185.839547][   T29] audit: type=1326 audit(185.819:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.8.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  185.887378][   T29] audit: type=1326 audit(185.839:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.8.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  185.910397][   T29] audit: type=1326 audit(185.839:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.8.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  185.933461][   T29] audit: type=1326 audit(185.839:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.8.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  185.956461][   T29] audit: type=1326 audit(185.839:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.8.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  185.979444][   T29] audit: type=1326 audit(185.839:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.8.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  186.053589][T14325] sch_fq: defrate 0 ignored.
[  186.134875][T14352] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4471'.
[  186.144137][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'.
[  186.324902][T14370] macsec1: entered allmulticast mode
[  186.337755][T14370] dummy0: entered allmulticast mode
[  186.646985][T14405] geneve2: entered promiscuous mode
[  186.653227][T14405] geneve2: entered allmulticast mode
[  186.741290][ T5573] Process accounting resumed
[  186.786794][T14411] lo speed is unknown, defaulting to 1000
[  186.803584][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4499'.
[  187.373069][T14478] set_capacity_and_notify: 4 callbacks suppressed
[  187.373087][T14478] loop9: detected capacity change from 0 to 256
[  187.457390][T14478] FAT-fs (loop9): IO charset macgaelic not found
[  187.501265][T14493] netlink: 'syz.8.4534': attribute type 10 has an invalid length.
[  187.700167][T14499] lo speed is unknown, defaulting to 1000
[  187.879328][T14516] loop3: detected capacity change from 0 to 128
[  188.187877][T14547] loop7: detected capacity change from 0 to 1024
[  188.194859][T14547] EXT4-fs: Ignoring removed nobh option
[  188.201686][ T3483] Process accounting resumed
[  188.412905][T14559] 9p: Bad value for 'rfdno'
[  188.476421][T14547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  188.518362][ T8266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  188.659588][T14565] lo speed is unknown, defaulting to 1000
[  188.700461][T14573] geneve2: entered promiscuous mode
[  188.705807][T14573] geneve2: entered allmulticast mode
[  188.716757][T14575] loop3: detected capacity change from 0 to 128
[  189.448086][T14623] loop7: detected capacity change from 0 to 128
[  189.470500][T14623] __nla_validate_parse: 5 callbacks suppressed
[  189.470519][T14623] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4586'.
[  189.695482][T14635] lo speed is unknown, defaulting to 1000
[  189.937212][T14651] geneve2: entered promiscuous mode
[  189.942659][T14651] geneve2: entered allmulticast mode
[  190.106246][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4605'.
[  190.128999][T14672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.143061][T14672] batman_adv: batadv0: Removing interface: veth1_vlan
[  190.290234][T14676] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4606'.
[  190.318411][T14676] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4606'.
[  190.505945][T14679] lo speed is unknown, defaulting to 1000
[  190.649038][T14692] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=14692 comm=syz.3.4611
[  191.170288][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'.
[  191.193434][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4625'.
[  191.471198][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4621'.
[  191.531183][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4621'.
[  191.860267][T14719] lo speed is unknown, defaulting to 1000
[  191.898071][T14725] loop9: detected capacity change from 0 to 1024
[  191.976207][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  191.976299][   T29] audit: type=1400 audit(191.949:6079): avc:  denied  { read } for  pid=14728 comm="syz.8.4629" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  192.006538][   T29] audit: type=1400 audit(191.949:6080): avc:  denied  { open } for  pid=14728 comm="syz.8.4629" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  192.065869][T14725] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4626: bad orphan inode 134217728
[  192.219408][T14725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.702884][T14739] loop7: detected capacity change from 0 to 8192
[  193.057783][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'.
[  193.080179][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.168625][T14751] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4638'.
[  193.362541][   T29] audit: type=1326 audit(193.339:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  193.420254][   T29] audit: type=1326 audit(193.399:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  193.488301][T14763] loop7: detected capacity change from 0 to 256
[  193.494348][   T29] audit: type=1326 audit(193.429:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  193.517797][   T29] audit: type=1326 audit(193.429:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  193.540900][   T29] audit: type=1326 audit(193.429:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4cc283f783 code=0x7ffc0000
[  193.563683][   T29] audit: type=1326 audit(193.439:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4cc283e1ff code=0x7ffc0000
[  193.586802][   T29] audit: type=1326 audit(193.469:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4cc283f7d7 code=0x7ffc0000
[  193.609805][   T29] audit: type=1326 audit(193.469:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14762 comm="syz.7.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cc283df90 code=0x7ffc0000
[  193.858422][T14778] geneve2: entered promiscuous mode
[  193.863875][T14778] geneve2: entered allmulticast mode
[  194.631394][T14844] loop1: detected capacity change from 0 to 128
[  194.678170][T14844] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.793304][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.806937][T14857] xt_CT: You must specify a L4 protocol and not use inversions on it
[  195.013304][T14884] blktrace: Concurrent blktraces are not allowed on loop3
[  195.146095][T14906] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=14906 comm=syz.1.4705
[  195.302033][T14915] __nla_validate_parse: 3 callbacks suppressed
[  195.302051][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4709'.
[  195.566149][T14930] ip6gre0: left promiscuous mode
[  195.571837][T14930] batadv0: left allmulticast mode
[  195.581190][T14930] veth2: left promiscuous mode
[  195.586007][T14930] veth2: left allmulticast mode
[  195.592321][T14930] bond3: left promiscuous mode
[  195.597186][T14930] bond3: left allmulticast mode
[  195.641411][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4718'.
[  195.739795][T14942] loop8: detected capacity change from 0 to 128
[  195.750654][T14942] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.799618][ T8320] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.834202][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4722'.
[  195.853601][T14948] netlink: 'syz.7.4723': attribute type 30 has an invalid length.
[  196.009454][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4731'.
[  196.020385][T14950] lo speed is unknown, defaulting to 1000
[  196.346399][T14988] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  196.776588][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4758'.
[  197.610320][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  197.610339][   T29] audit: type=1326 audit(197.589:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.644445][T15066] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.654270][T15066] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.666116][   T29] audit: type=1326 audit(197.589:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.689739][   T29] audit: type=1326 audit(197.589:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.713474][   T29] audit: type=1326 audit(197.589:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.737228][   T29] audit: type=1326 audit(197.589:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.760898][   T29] audit: type=1326 audit(197.589:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.783817][   T29] audit: type=1326 audit(197.589:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.807401][   T29] audit: type=1326 audit(197.589:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.831039][   T29] audit: type=1326 audit(197.589:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.854682][   T29] audit: type=1326 audit(197.619:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15063 comm="syz.3.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  197.956089][T15066] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.966123][T15066] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.021082][T15066] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.031296][T15066] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.073362][T15082] loop9: detected capacity change from 0 to 512
[  198.080883][T15082] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101)
[  198.100192][T15066] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.110441][T15066] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.181588][ T4004] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  198.190673][ T4004] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.210022][ T4004] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  198.218323][ T4004] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.232035][ T4004] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  198.240366][ T4004] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.249519][ T4004] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  198.257780][ T4004] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.373084][T15103] loop9: detected capacity change from 0 to 512
[  198.381089][T15103] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  198.390136][T15103] EXT4-fs (loop9): invalid journal inode
[  198.398815][T15103] EXT4-fs (loop9): can't get journal size
[  198.406905][T15103] EXT4-fs (loop9): 1 truncate cleaned up
[  198.413897][T15103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.500753][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.238254][T15131] netlink: 3 bytes leftover after parsing attributes in process `{/}\'.
[  199.275382][T15131] 0�X���: renamed from caif0
[  199.288607][T15131] 0�X���: entered allmulticast mode
[  199.293872][T15131] net_ratelimit: 4 callbacks suppressed
[  199.293889][T15131] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  199.757290][T15158] bridge_slave_0: left allmulticast mode
[  199.763165][T15158] bridge_slave_0: left promiscuous mode
[  199.763495][T15162] netlink: 'syz.8.4810': attribute type 10 has an invalid length.
[  199.769782][T15158] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.788536][T15161] loop3: detected capacity change from 0 to 512
[  199.795456][T15161] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  199.806221][T15161] EXT4-fs (loop3): invalid journal inode
[  199.806679][T15158] bridge_slave_1: left allmulticast mode
[  199.813758][T15161] EXT4-fs (loop3): can't get journal size
[  199.817679][T15158] bridge_slave_1: left promiscuous mode
[  199.817854][T15158] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.828618][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4810'.
[  199.849865][T15161] EXT4-fs (loop3): 1 truncate cleaned up
[  199.856083][T15161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.886718][T15158] bond0: (slave bond_slave_0): Releasing backup interface
[  199.939666][T15158] bond0: (slave bond_slave_1): Releasing backup interface
[  199.952804][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.053911][T15158] team0: Port device team_slave_0 removed
[  200.075810][T15158] team0: Port device team_slave_1 removed
[  200.085824][T15158] bond0: (slave batadv_slave_0): Releasing backup interface
[  200.121060][T15158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.129282][T15158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.156912][T15158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  200.178439][T15162] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.187105][T15162] team0: Port device bond0 added
[  200.241904][T15165] team0 (unregistering): Port device bond0 removed
[  200.270575][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4817'.
[  201.118950][T15222] lo speed is unknown, defaulting to 1000
[  201.146092][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4838'.
[  201.191084][T15229] loop9: detected capacity change from 0 to 4096
[  201.200126][T15229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.225497][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.628400][T15240] Set syz1 is full, maxelem 65536 reached
[  201.826467][T15269] loop7: detected capacity change from 0 to 256
[  201.852344][T15272] loop3: detected capacity change from 0 to 512
[  201.860538][T15272] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101)
[  201.899562][T15276] netlink: 'syz.7.4860': attribute type 5 has an invalid length.
[  201.931126][T15279] loop7: detected capacity change from 0 to 1024
[  201.940363][T15279] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4861: bad orphan inode 134217728
[  201.953414][T15279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.996302][T15284] loop1: detected capacity change from 0 to 1024
[  202.003429][T15284] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.022523][T15284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.251306][T15303] loop3: detected capacity change from 0 to 1024
[  202.293324][T15303] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4870: Failed to acquire dquot type 0
[  202.315583][T15303] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  202.367726][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.4870: corrupted inode contents
[  202.408836][T15303] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.4870: mark_inode_dirty error
[  202.435396][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.4870: corrupted inode contents
[  202.458208][T15303] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.4870: mark_inode_dirty error
[  202.489246][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.4870: corrupted inode contents
[  202.502632][T15303] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  202.511994][ T8266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.521369][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.4870: corrupted inode contents
[  202.543764][T15303] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.4870: mark_inode_dirty error
[  202.575974][T15303] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  202.585638][T15303] EXT4-fs (loop3): 1 truncate cleaned up
[  202.605700][T15303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.648447][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.666890][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  202.666908][   T29] audit: type=1400 audit(202.639:6471): avc:  denied  { mount } for  pid=15317 comm="syz.9.4874" name="/" dev="ramfs" ino=53318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  202.732602][T15322] pimreg: entered allmulticast mode
[  202.745791][T15322] pimreg: left allmulticast mode
[  202.846439][   T29] audit: type=1326 audit(202.819:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  202.869518][   T29] audit: type=1326 audit(202.819:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  202.937656][   T29] audit: type=1326 audit(202.879:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  202.960678][   T29] audit: type=1326 audit(202.879:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  202.983775][   T29] audit: type=1326 audit(202.879:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  203.007151][   T29] audit: type=1326 audit(202.879:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  203.030364][   T29] audit: type=1326 audit(202.879:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  203.053480][   T29] audit: type=1326 audit(202.879:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  203.076593][   T29] audit: type=1326 audit(202.879:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15323 comm="syz.3.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11abef749 code=0x7ffc0000
[  203.181658][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.199467][T15334] syzkaller0: entered promiscuous mode
[  203.205017][T15334] syzkaller0: entered allmulticast mode
[  203.409741][T15351] loop9: detected capacity change from 0 to 1024
[  203.499846][T15351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  203.559048][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  203.709905][T15378] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4898'.
[  203.721380][T15378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15378 comm=syz.3.4898
[  203.735219][T15378] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4898'.
[  203.950417][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4911'.
[  203.959963][T15407] IPVS: Error connecting to the multicast addr
[  203.966499][T15409] netlink: 'syz.3.4912': attribute type 10 has an invalid length.
[  203.975199][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4912'.
[  203.986632][T15409] ipvlan2: entered promiscuous mode
[  203.992286][T15409] bridge0: port 3(ipvlan2) entered blocking state
[  203.999093][T15409] bridge0: port 3(ipvlan2) entered disabled state
[  204.005927][T15409] ipvlan2: entered allmulticast mode
[  204.012002][T15409] bridge0: entered allmulticast mode
[  204.017939][T15409] ipvlan2: left allmulticast mode
[  204.023182][T15409] bridge0: left allmulticast mode
[  204.166023][T15418] netlink: 'syz.3.4916': attribute type 5 has an invalid length.
[  204.224153][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4921'.
[  204.246480][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4921'.
[  204.313102][T15440] loop9: detected capacity change from 0 to 512
[  204.320913][T15440] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  204.339319][T15440] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.4927: invalid indirect mapped block 4294967295 (level 0)
[  204.357940][T15440] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.4927: invalid indirect mapped block 4294967295 (level 1)
[  204.363402][T15444] loop1: detected capacity change from 0 to 512
[  204.378275][T15440] EXT4-fs (loop9): 1 orphan inode deleted
[  204.385029][T15440] EXT4-fs (loop9): 1 truncate cleaned up
[  204.392414][T15440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.429035][T15444] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  204.437618][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.449587][T15444] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.4928: invalid block
[  204.478018][T15444] EXT4-fs (loop1): Remounting filesystem read-only
[  204.491428][T15444] EXT4-fs (loop1): 1 truncate cleaned up
[  204.497534][T15444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.562347][T15444] lo speed is unknown, defaulting to 1000
[  204.666093][T15471] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.4937'.
[  204.675440][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4937'.
[  204.776194][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.968837][T15469] Set syz1 is full, maxelem 65536 reached
[  205.137300][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4947'.
[  205.513576][ T4004] Bluetooth: hci0: Frame reassembly failed (-84)
[  205.987800][T15513] Set syz1 is full, maxelem 65536 reached
[  206.120377][T15521] lo speed is unknown, defaulting to 1000
[  206.296894][T15548] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  206.441971][T15562] tipc: New replicast peer: 255.255.255.255
[  206.449042][T15562] tipc: Enabled bearer <udp:syz2>, priority 10
[  206.683636][T15590] lo speed is unknown, defaulting to 1000
[  207.507895][T15604] bond0: (slave dummy0): Releasing backup interface
[  207.515373][T15604] bridge_slave_0: left promiscuous mode
[  207.521180][T15604] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.529458][T15604] bridge_slave_1: left allmulticast mode
[  207.535224][T15604] bridge_slave_1: left promiscuous mode
[  207.540997][T15604] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.554663][ T7914] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  207.562172][T15606] netlink: 'syz.3.4991': attribute type 10 has an invalid length.
[  207.589870][T15604] bond0: (slave bond_slave_0): Releasing backup interface
[  207.597528][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4993'.
[  207.607331][T15604] bond0: (slave bond_slave_1): Releasing backup interface
[  207.614929][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4991'.
[  207.624483][T15604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.632420][T15604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.640172][T15604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  207.667042][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4993'.
[  207.779851][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4997'.
[  207.877931][   T29] kauditd_printk_skb: 354 callbacks suppressed
[  207.877950][   T29] audit: type=1400 audit(207.859:6835): avc:  denied  { cpu } for  pid=15625 comm="syz.8.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  207.918223][   T29] audit: type=1400 audit(207.899:6836): avc:  denied  { unmount } for  pid=8351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  208.003348][   T29] audit: type=1400 audit(207.979:6837): avc:  denied  { watch watch_reads } for  pid=15633 comm="syz.7.5002" path="/556/file0" dev="tmpfs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  208.026945][   T29] audit: type=1400 audit(207.979:6838): avc:  denied  { execute_no_trans } for  pid=15633 comm="syz.7.5002" path="/556/file0" dev="tmpfs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  208.636631][   T29] audit: type=1326 audit(208.609:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15658 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  208.660820][   T29] audit: type=1326 audit(208.609:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15658 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  208.684616][   T29] audit: type=1326 audit(208.609:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15658 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  208.707560][   T29] audit: type=1326 audit(208.609:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15658 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  208.731878][   T29] audit: type=1326 audit(208.609:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15658 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  208.755594][   T29] audit: type=1326 audit(208.609:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15658 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  208.784300][T15662] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5015'.
[  209.166216][T15679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5022'.
[  209.175273][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5022'.
[  209.184287][T15679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5022'.
[  209.227126][T15666] syz.8.5017 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  209.241288][T15666] CPU: 0 UID: 0 PID: 15666 Comm: syz.8.5017 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  209.241330][T15666] Tainted: [W]=WARN
[  209.241338][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  209.241355][T15666] Call Trace:
[  209.241364][T15666]  <TASK>
[  209.241400][T15666]  __dump_stack+0x1d/0x30
[  209.241427][T15666]  dump_stack_lvl+0xe8/0x140
[  209.241454][T15666]  dump_stack+0x15/0x1b
[  209.241573][T15666]  dump_header+0x81/0x240
[  209.241595][T15666]  oom_kill_process+0x295/0x350
[  209.241626][T15666]  out_of_memory+0x97b/0xb80
[  209.241657][T15666]  try_charge_memcg+0x610/0xa10
[  209.241738][T15666]  obj_cgroup_charge_pages+0xa6/0x150
[  209.241873][T15666]  __memcg_kmem_charge_page+0x9f/0x170
[  209.242064][T15666]  __alloc_frozen_pages_noprof+0x18f/0x360
[  209.242104][T15666]  alloc_pages_mpol+0xb3/0x260
[  209.242135][T15666]  alloc_pages_noprof+0x90/0x130
[  209.242229][T15666]  __vmalloc_node_range_noprof+0xa7b/0x1310
[  209.242279][T15666]  __kvmalloc_node_noprof+0x492/0x6b0
[  209.242322][T15666]  ? ip_set_alloc+0x24/0x30
[  209.242359][T15666]  ? ip_set_alloc+0x24/0x30
[  209.242404][T15666]  ip_set_alloc+0x24/0x30
[  209.242439][T15666]  hash_netiface_create+0x282/0x740
[  209.242482][T15666]  ? __pfx_hash_netiface_create+0x10/0x10
[  209.242572][T15666]  ip_set_create+0x3cc/0x970
[  209.242615][T15666]  ? _raw_spin_unlock+0x26/0x50
[  209.242637][T15666]  ? finish_task_switch+0x7a/0x2a0
[  209.242713][T15666]  ? __cond_resched+0x4e/0x90
[  209.242741][T15666]  nfnetlink_rcv_msg+0x4c6/0x590
[  209.242855][T15666]  netlink_rcv_skb+0x123/0x220
[  209.242884][T15666]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  209.242919][T15666]  nfnetlink_rcv+0x167/0x16c0
[  209.242952][T15666]  ? kmem_cache_free+0xe3/0x3a0
[  209.243064][T15666]  ? __kfree_skb+0x109/0x150
[  209.243096][T15666]  ? nlmon_xmit+0x4f/0x60
[  209.243121][T15666]  ? consume_skb+0x49/0x150
[  209.243153][T15666]  ? nlmon_xmit+0x4f/0x60
[  209.243176][T15666]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  209.243229][T15666]  ? __dev_queue_xmit+0x138d/0x1ec0
[  209.243266][T15666]  ? __dev_queue_xmit+0x148/0x1ec0
[  209.243293][T15666]  ? shmem_undo_range+0xa45/0xa80
[  209.243320][T15666]  ? ref_tracker_free+0x37d/0x3e0
[  209.243377][T15666]  ? __netlink_deliver_tap+0x4dc/0x500
[  209.243418][T15666]  netlink_unicast+0x5c0/0x690
[  209.243464][T15666]  netlink_sendmsg+0x58b/0x6b0
[  209.243504][T15666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.243547][T15666]  __sock_sendmsg+0x145/0x180
[  209.243573][T15666]  ____sys_sendmsg+0x31e/0x4a0
[  209.243660][T15666]  ___sys_sendmsg+0x17b/0x1d0
[  209.243718][T15666]  __x64_sys_sendmsg+0xd4/0x160
[  209.243796][T15666]  x64_sys_call+0x17ba/0x3000
[  209.243839][T15666]  do_syscall_64+0xd8/0x2c0
[  209.243926][T15666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.243947][T15666] RIP: 0033:0x7f3026a2f749
[  209.243963][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.243980][T15666] RSP: 002b:00007f3025497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.244066][T15666] RAX: ffffffffffffffda RBX: 00007f3026c85fa0 RCX: 00007f3026a2f749
[  209.244083][T15666] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005
[  209.244100][T15666] RBP: 00007f3026ab3f91 R08: 0000000000000000 R09: 0000000000000000
[  209.244117][T15666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.244134][T15666] R13: 00007f3026c86038 R14: 00007f3026c85fa0 R15: 00007ffce3d607a8
[  209.244159][T15666]  </TASK>
[  209.244191][T15666] memory: usage 307200kB, limit 307200kB, failcnt 1067
[  209.327878][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5022'.
[  209.329591][T15666] memory+swap: usage 323252kB, limit 9007199254740988kB, failcnt 0
[  209.613272][T15666] kmem: usage 254896kB, limit 9007199254740988kB, failcnt 0
[  209.620580][T15666] Memory cgroup stats for /syz8:
[  209.623853][T15666] cache 53374976
[  209.632682][T15666] rss 184320
[  209.635903][T15666] shmem 53374976
[  209.640187][T15666] mapped_file 0
[  209.643667][T15666] dirty 0
[  209.646617][T15666] writeback 0
[  209.650054][T15666] workingset_refault_anon 83
[  209.655080][T15666] workingset_refault_file 320
[  209.660707][T15666] swap 16437248
[  209.664223][T15666] swapcached 0
[  209.667631][T15666] pgpgin 207443
[  209.671105][T15666] pgpgout 194367
[  209.674709][T15666] pgfault 156811
[  209.678990][T15666] pgmajfault 50
[  209.682486][T15666] inactive_anon 1183744
[  209.686653][T15666] active_anon 52375552
[  209.690753][T15666] inactive_file 0
[  209.694426][T15666] active_file 0
[  209.698635][T15666] unevictable 0
[  209.702109][T15666] hierarchical_memory_limit 314572800
[  209.707482][T15666] hierarchical_memsw_limit 9223372036854771712
[  209.713717][T15666] total_cache 53374976
[  209.718467][T15666] total_rss 184320
[  209.722269][T15666] total_shmem 53374976
[  209.726489][T15666] total_mapped_file 0
[  209.730509][T15666] total_dirty 0
[  209.733985][T15666] total_writeback 0
[  209.738423][T15666] total_workingset_refault_anon 83
[  209.743559][T15666] total_workingset_refault_file 320
[  209.748810][T15666] total_swap 16437248
[  209.752804][T15666] total_swapcached 0
[  209.756713][T15666] total_pgpgin 207443
[  209.761412][T15666] total_pgpgout 194367
[  209.765508][T15666] total_pgfault 156811
[  209.769637][T15666] total_pgmajfault 50
[  209.773651][T15666] total_inactive_anon 1183744
[  209.779020][T15666] total_active_anon 52375552
[  209.783715][T15666] total_inactive_file 0
[  209.788031][T15666] total_active_file 0
[  209.792015][T15666] total_unevictable 0
[  209.796188][T15666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2970,pid=10773,uid=0
[  209.811602][T15666] Memory cgroup out of memory: Killed process 10773 (syz.8.2970) total-vm:93836kB, anon-rss:1136kB, file-rss:20720kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000
[  209.875418][T15687] loop9: detected capacity change from 0 to 1024
[  209.887659][T15687] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.910928][T15687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.060346][T15711] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  210.076342][T15687] syz.9.5025 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  210.090602][T15687] CPU: 0 UID: 0 PID: 15687 Comm: syz.9.5025 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  210.090694][T15687] Tainted: [W]=WARN
[  210.090703][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  210.090723][T15687] Call Trace:
[  210.090729][T15687]  <TASK>
[  210.090738][T15687]  __dump_stack+0x1d/0x30
[  210.090771][T15687]  dump_stack_lvl+0xe8/0x140
[  210.090834][T15687]  dump_stack+0x15/0x1b
[  210.090861][T15687]  dump_header+0x81/0x240
[  210.090886][T15687]  oom_kill_process+0x295/0x350
[  210.090971][T15687]  out_of_memory+0x97b/0xb80
[  210.091003][T15687]  try_charge_memcg+0x610/0xa10
[  210.091038][T15687]  obj_cgroup_charge_pages+0xa6/0x150
[  210.091078][T15687]  __memcg_kmem_charge_page+0x9f/0x170
[  210.091193][T15687]  __alloc_frozen_pages_noprof+0x18f/0x360
[  210.091229][T15687]  alloc_pages_mpol+0xb3/0x260
[  210.091269][T15687]  alloc_pages_noprof+0x90/0x130
[  210.091333][T15687]  __vmalloc_node_range_noprof+0xa7b/0x1310
[  210.091377][T15687]  __kvmalloc_node_noprof+0x492/0x6b0
[  210.091412][T15687]  ? ip_set_alloc+0x24/0x30
[  210.091457][T15687]  ? ip_set_alloc+0x24/0x30
[  210.091567][T15687]  ip_set_alloc+0x24/0x30
[  210.091605][T15687]  hash_netiface_create+0x282/0x740
[  210.091647][T15687]  ? __pfx_hash_netiface_create+0x10/0x10
[  210.091725][T15687]  ip_set_create+0x3cc/0x970
[  210.091814][T15687]  ? __nla_parse+0x40/0x60
[  210.091849][T15687]  nfnetlink_rcv_msg+0x4c6/0x590
[  210.091985][T15687]  netlink_rcv_skb+0x123/0x220
[  210.092025][T15687]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  210.092066][T15687]  nfnetlink_rcv+0x167/0x16c0
[  210.092176][T15687]  ? xas_load+0x405/0x430
[  210.092254][T15687]  ? xas_load+0x405/0x430
[  210.092317][T15687]  ? folio_mark_accessed+0x236/0x3a0
[  210.092354][T15687]  ? find_get_block_common+0x739/0x950
[  210.092533][T15687]  ? bdev_getblk+0x35b/0x3f0
[  210.092610][T15687]  ? check_xattrs+0x27f/0x7f0
[  210.092646][T15687]  ? __ext4_sb_bread_gfp+0xd9/0x170
[  210.092689][T15687]  ? should_fail_ex+0x30/0x280
[  210.092781][T15687]  ? selinux_nlmsg_lookup+0x99/0x890
[  210.092816][T15687]  ? __rcu_read_unlock+0x34/0x70
[  210.092843][T15687]  ? __netlink_lookup+0x266/0x2a0
[  210.092898][T15687]  netlink_unicast+0x5c0/0x690
[  210.092937][T15687]  netlink_sendmsg+0x58b/0x6b0
[  210.092981][T15687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.093048][T15687]  __sock_sendmsg+0x145/0x180
[  210.093075][T15687]  ____sys_sendmsg+0x31e/0x4a0
[  210.093117][T15687]  ___sys_sendmsg+0x17b/0x1d0
[  210.093220][T15687]  __x64_sys_sendmsg+0xd4/0x160
[  210.093262][T15687]  x64_sys_call+0x17ba/0x3000
[  210.093348][T15687]  do_syscall_64+0xd8/0x2c0
[  210.093389][T15687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.093437][T15687] RIP: 0033:0x7f57f953f749
[  210.093458][T15687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.093482][T15687] RSP: 002b:00007f57f7fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.093556][T15687] RAX: ffffffffffffffda RBX: 00007f57f9795fa0 RCX: 00007f57f953f749
[  210.093573][T15687] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  210.093590][T15687] RBP: 00007f57f95c3f91 R08: 0000000000000000 R09: 0000000000000000
[  210.093686][T15687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.093700][T15687] R13: 00007f57f9796038 R14: 00007f57f9795fa0 R15: 00007ffd18b2d268
[  210.093739][T15687]  </TASK>
[  210.093749][T15687] memory: usage 307200kB, limit 307200kB, failcnt 340
[  210.167007][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5035'.
[  210.168716][T15687] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  210.168734][T15687] kmem: usage 238728kB, limit 9007199254740988kB, failcnt 0
[  210.168766][T15687] Memory cgroup stats for /syz9:
[  210.215712][T15687] cache 69799936
[  210.376724][T15720] ip6gre1: entered allmulticast mode
[  210.378449][T15687] rss 307200
[  210.378461][T15687] shmem 69771264
[  210.378470][T15687] mapped_file 0
[  210.378479][T15687] dirty 0
[  210.378488][T15687] writeback 0
[  210.378496][T15687] workingset_refault_anon 1613
[  210.378587][T15687] workingset_refault_file 0
[  210.378598][T15687] swap 0
[  210.378606][T15687] swapcached 0
[  210.378615][T15687] pgpgin 141254
[  210.378624][T15687] pgpgout 124136
[  210.378634][T15687] pgfault 163266
[  210.378643][T15687] pgmajfault 285
[  210.378652][T15687] inactive_anon 0
[  210.378662][T15687] active_anon 70078464
[  210.378672][T15687] inactive_file 36864
[  210.378681][T15687] active_file 0
[  210.378720][T15687] unevictable 0
[  210.378730][T15687] hierarchical_memory_limit 314572800
[  210.378742][T15687] hierarchical_memsw_limit 9223372036854771712
[  210.378755][T15687] total_cache 69799936
[  210.378765][T15687] total_rss 307200
[  210.378775][T15687] total_shmem 69771264
[  210.378784][T15687] total_mapped_file 0
[  210.378854][T15687] total_dirty 0
[  210.378861][T15687] total_writeback 0
[  210.378869][T15687] total_workingset_refault_anon 1613
[  210.378880][T15687] total_workingset_refault_file 0
[  210.378891][T15687] total_swap 0
[  210.378901][T15687] total_swapcached 0
[  210.378909][T15687] total_pgpgin 141254
[  210.378916][T15687] total_pgpgout 124136
[  210.378952][T15687] total_pgfault 163266
[  210.378962][T15687] total_pgmajfault 285
[  210.378972][T15687] total_inactive_anon 0
[  210.378981][T15687] total_active_anon 70078464
[  210.378988][T15687] total_inactive_file 36864
[  210.379039][T15687] total_active_file 0
[  210.379049][T15687] total_unevictable 0
[  210.379065][T15687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5025,pid=15686,uid=0
[  210.379191][T15687] Memory cgroup out of memory: Killed process 15686 (syz.9.5025) total-vm:96016kB, anon-rss:1264kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  210.749209][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.816361][T15732] bridge_slave_0: left allmulticast mode
[  210.822172][T15732] bridge_slave_0: left promiscuous mode
[  210.827982][T15732] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.840918][T15732] bridge_slave_1: left allmulticast mode
[  210.846596][T15732] bridge_slave_1: left promiscuous mode
[  210.852404][T15732] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.868731][T15732] bond0: (slave bond_slave_0): Releasing backup interface
[  210.878840][T15732] bond0: (slave bond_slave_1): Releasing backup interface
[  210.892943][T15732] bond0: (slave batadv_slave_0): Releasing backup interface
[  210.928627][T15732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  210.962571][T15732] netlink: 'syz.7.5041': attribute type 10 has an invalid length.
[  211.030187][T15749] random: crng reseeded on system resumption
[  211.555494][T15792] netlink: 'syz.3.5067': attribute type 1 has an invalid length.
[  211.589876][T15792] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.627346][T15792] bond3: (slave ip6gretap1): making interface the new active one
[  211.639481][T15792] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  212.631065][T15833] loop7: detected capacity change from 0 to 512
[  212.639780][T15835] loop3: detected capacity change from 0 to 1024
[  212.640844][T15837] loop1: detected capacity change from 0 to 128
[  212.678667][T15839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=15839 comm=syz.1.5085
[  212.693019][T15833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  212.701919][T15839] netlink: 'syz.1.5085': attribute type 29 has an invalid length.
[  212.713273][T15833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.750104][T15835] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.5082: bad orphan inode 134217728
[  212.786264][T15835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.903561][   T29] kauditd_printk_skb: 77 callbacks suppressed
[  212.903577][   T29] audit: type=1400 audit(212.879:6922): avc:  denied  { ioctl } for  pid=15831 comm="syz.7.5092" path="/575/bus/file1" dev="loop7" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  212.952774][   T29] audit: type=1400 audit(212.929:6923): avc:  denied  { unmount } for  pid=8266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  212.975282][ T8266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.019903][   T29] audit: type=1326 audit(212.929:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.042946][   T29] audit: type=1326 audit(212.929:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.066153][   T29] audit: type=1326 audit(212.929:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.089207][   T29] audit: type=1326 audit(212.929:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.112352][   T29] audit: type=1326 audit(212.929:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.135341][   T29] audit: type=1326 audit(212.929:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.158347][   T29] audit: type=1326 audit(212.929:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.181450][   T29] audit: type=1326 audit(212.929:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.1.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  213.490150][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.665533][T15891] loop3: detected capacity change from 0 to 1024
[  213.688171][T15891] EXT4-fs: Ignoring removed orlov option
[  213.726148][T15891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.751472][T15898] __nla_validate_parse: 15 callbacks suppressed
[  213.751494][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5108'.
[  213.820483][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.846633][T15894] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5107'.
[  213.930089][T15912] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.5121'.
[  213.939443][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5121'.
[  214.009515][T15914] loop1: detected capacity change from 0 to 8192
[  214.017971][T15918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15918 comm=syz.7.5115
[  214.134497][T15931] veth4: entered promiscuous mode
[  214.139709][T15931] veth4: entered allmulticast mode
[  214.280452][T15935] lo speed is unknown, defaulting to 1000
[  215.000829][T15950] loop3: detected capacity change from 0 to 8192
[  215.091665][T15960] ref_ctr_offset mismatch. inode: 0x16b2 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0
[  215.119760][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5135'.
[  215.255134][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5135'.
[  215.470464][T15989] loop9: detected capacity change from 0 to 8192
[  215.584272][T16003] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5151'.
[  215.711337][T16001] lo speed is unknown, defaulting to 1000
[  215.893270][T16032] veth8: entered promiscuous mode
[  215.898721][T16032] veth8: entered allmulticast mode
[  215.905494][T16028] ref_ctr_offset mismatch. inode: 0x1585 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0
[  216.344009][T16078] loop1: detected capacity change from 0 to 128
[  216.358982][T16078] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.371917][T16078] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #2: comm syz.1.5184: corrupted xattr block 5: invalid header
[  216.385526][T16078] SELinux: (dev loop1, type ext4) getxattr errno 117
[  216.393352][T16078] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.887683][T16101] pim6reg: entered allmulticast mode
[  216.896853][T16101] pim6reg: left allmulticast mode
[  217.089383][T16112] lo speed is unknown, defaulting to 1000
[  217.352677][T16140] lo speed is unknown, defaulting to 1000
[  217.361809][T16152] netlink: 'syz.1.5226': attribute type 4 has an invalid length.
[  217.369759][T16152] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5226'.
[  217.437500][T16152] .`: renamed from bond0
[  217.558501][T16160] lo speed is unknown, defaulting to 1000
[  217.873911][T16171] lo speed is unknown, defaulting to 1000
[  217.946422][T16190] loop3: detected capacity change from 0 to 512
[  218.180749][T16198] loop9: detected capacity change from 0 to 128
[  218.263833][T16190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.330803][   T29] kauditd_printk_skb: 683 callbacks suppressed
[  218.330822][   T29] audit: type=1400 audit(218.309:7615): avc:  denied  { create } for  pid=16186 comm="syz.3.5225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  218.362965][T16190] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.5225: corrupted inode contents
[  218.410316][T16190] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.5225: mark_inode_dirty error
[  218.548163][T16190] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.5225: corrupted inode contents
[  218.602895][T16190] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.5225: mark_inode_dirty error
[  218.726571][T16203] syz.9.5228: attempt to access beyond end of device
[  218.726571][T16203] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128
[  218.740795][T16202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5230'.
[  218.817107][T16187] syz.3.5225 (16187) used greatest stack depth: 5960 bytes left
[  218.856513][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.989627][T16203] syz.9.5228: attempt to access beyond end of device
[  218.989627][T16203] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  219.033505][T16203] syz.9.5228: attempt to access beyond end of device
[  219.033505][T16203] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128
[  219.061021][   T29] audit: type=1326 audit(219.029:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.084068][   T29] audit: type=1326 audit(219.029:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.107400][   T29] audit: type=1326 audit(219.029:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.130595][   T29] audit: type=1326 audit(219.029:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.153560][   T29] audit: type=1326 audit(219.029:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.172451][T16203] syz.9.5228: attempt to access beyond end of device
[  219.172451][T16203] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128
[  219.176465][   T29] audit: type=1326 audit(219.029:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.212831][   T29] audit: type=1326 audit(219.029:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.235855][   T29] audit: type=1326 audit(219.029:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.258841][   T29] audit: type=1326 audit(219.029:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.8.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  219.344621][T16203] syz.9.5228: attempt to access beyond end of device
[  219.344621][T16203] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128
[  219.358230][T16203] syz.9.5228: attempt to access beyond end of device
[  219.358230][T16203] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128
[  219.371848][T16203] syz.9.5228: attempt to access beyond end of device
[  219.371848][T16203] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128
[  219.385345][T16203] syz.9.5228: attempt to access beyond end of device
[  219.385345][T16203] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128
[  219.399187][T16203] syz.9.5228: attempt to access beyond end of device
[  219.399187][T16203] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128
[  219.412721][T16203] syz.9.5228: attempt to access beyond end of device
[  219.412721][T16203] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128
[  219.663564][ T9467] Bluetooth: hci0: Frame reassembly failed (-84)
[  220.254933][T16239] loop9: detected capacity change from 0 to 2048
[  220.309925][T16239] Alternate GPT is invalid, using primary GPT.
[  220.316404][T16239]  loop9: p2 p3 p7
[  220.838677][T16265] SELinux: failed to load policy
[  220.868744][T16268] vlan4: entered allmulticast mode
[  220.873920][T16268] bridge_slave_0: entered allmulticast mode
[  220.988861][T16273] lo speed is unknown, defaulting to 1000
[  221.065674][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5263'.
[  221.082846][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5263'.
[  221.252821][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5279'.
[  221.275745][T16291] loop9: detected capacity change from 0 to 2048
[  221.342720][T16291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.376826][T16305] netlink: 'syz.8.5270': attribute type 4 has an invalid length.
[  221.384993][T16305] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5270'.
[  221.414762][T16291] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  221.442088][T16305] .`: renamed from bond0
[  221.503699][T16291] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28
[  221.516281][T16291] EXT4-fs (loop9): This should not happen!! Data will be lost
[  221.516281][T16291] 
[  221.526708][T16291] EXT4-fs (loop9): Total free blocks count 0
[  221.532749][T16291] EXT4-fs (loop9): Free/Dirty block details
[  221.539418][T16291] EXT4-fs (loop9): free_blocks=2415919104
[  221.545186][T16291] EXT4-fs (loop9): dirty_blocks=32
[  221.550374][T16291] EXT4-fs (loop9): Block reservation details
[  221.556370][T16291] EXT4-fs (loop9): i_reserved_data_blocks=2
[  221.594934][T16313] pim6reg: entered allmulticast mode
[  221.604669][T16313] pim6reg: left allmulticast mode
[  221.662258][ T4034] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  221.717796][ T7914] Bluetooth: hci0: command 0x1003 tx timeout
[  221.723858][ T6642] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  221.770241][T16319] lo speed is unknown, defaulting to 1000
[  221.776806][T16322] loop9: detected capacity change from 0 to 512
[  221.876594][T16322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.001416][T16335] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5281'.
[  222.026864][T16322] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  222.150566][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.274971][T16351] loop3: detected capacity change from 0 to 164
[  222.282582][T16351] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  222.371306][T16351] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  222.786120][T16390] loop9: detected capacity change from 0 to 7
[  222.803995][T16390] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.824052][T16390] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.832065][T16390]  loop9: unable to read partition table
[  222.878487][T16390] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  222.878487][T16390] 
) failed (rc=-5)
[  223.001599][T16394] lo speed is unknown, defaulting to 1000
[  223.372427][   T29] kauditd_printk_skb: 308 callbacks suppressed
[  223.372511][   T29] audit: type=1400 audit(223.349:7933): avc:  denied  { write } for  pid=16403 comm="syz.8.5308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  223.513201][ T4026] Bluetooth: hci0: Frame reassembly failed (-84)
[  223.750477][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5317'.
[  223.821653][   T29] audit: type=1326 audit(223.799:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.9.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f953f749 code=0x7ffc0000
[  223.882571][   T29] audit: type=1326 audit(223.829:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.9.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f57f953f749 code=0x7ffc0000
[  223.906349][   T29] audit: type=1326 audit(223.829:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.9.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f953f749 code=0x7ffc0000
[  223.959784][   T29] audit: type=1400 audit(223.919:7937): avc:  denied  { write } for  pid=16439 comm="syz.9.5324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  223.980553][   T29] audit: type=1400 audit(223.939:7938): avc:  denied  { create } for  pid=16443 comm="syz.9.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  224.030358][T16446] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5326'.
[  224.201054][   T29] audit: type=1400 audit(224.179:7939): avc:  denied  { block_suspend } for  pid=16469 comm="syz.9.5338" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  224.423836][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5351'.
[  224.432887][T16481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5351'.
[  224.441977][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5351'.
[  224.647558][   T29] audit: type=1326 audit(224.619:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.9.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57f95365e7 code=0x7ffc0000
[  224.671243][   T29] audit: type=1326 audit(224.619:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.9.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57f94db829 code=0x7ffc0000
[  224.694819][   T29] audit: type=1326 audit(224.619:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.9.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57f95365e7 code=0x7ffc0000
[  225.386761][T16545] netlink: 'syz.1.5369': attribute type 30 has an invalid length.
[  225.467364][T16555] atomic_op ffff888107431d28 conn xmit_atomic 0000000000000000
[  225.547686][ T7914] Bluetooth: hci0: command 0x1003 tx timeout
[  225.553944][ T6642] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  225.739743][T16580] loop9: detected capacity change from 0 to 128
[  225.746909][T16580] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  226.165452][T16597] netlink: 'syz.9.5393': attribute type 3 has an invalid length.
[  226.429614][T16615] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  227.130445][T16658] __nla_validate_parse: 4 callbacks suppressed
[  227.130464][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5419'.
[  227.339175][T16676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5427'.
[  227.402751][T16681] loop3: detected capacity change from 0 to 1024
[  227.417809][T16671] lo speed is unknown, defaulting to 1000
[  227.428879][T16681] EXT4-fs: Ignoring removed orlov option
[  227.453614][T16681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.490395][T16679] lo speed is unknown, defaulting to 1000
[  227.511236][T16690] loop9: detected capacity change from 0 to 1024
[  227.518233][T16690] EXT4-fs: Ignoring removed nomblk_io_submit option
[  227.531577][T16690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.886904][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.969024][T16706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16706 comm=syz.8.5438
[  228.528273][   T29] kauditd_printk_skb: 92 callbacks suppressed
[  228.528288][   T29] audit: type=1400 audit(228.509:8035): avc:  denied  { mounton } for  pid=16755 comm="syz.8.5457" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  228.528259][T16756] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported
[  228.665420][   T29] audit: type=1326 audit(228.639:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.738550][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5464'.
[  228.745948][   T29] audit: type=1326 audit(228.639:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.771128][   T29] audit: type=1326 audit(228.679:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.794799][   T29] audit: type=1326 audit(228.679:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.818448][   T29] audit: type=1326 audit(228.679:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.842240][   T29] audit: type=1326 audit(228.679:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.865534][   T29] audit: type=1326 audit(228.679:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.889173][   T29] audit: type=1326 audit(228.679:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  228.912952][   T29] audit: type=1326 audit(228.679:8044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.8.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  229.166315][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.399182][T16804] pim6reg: entered allmulticast mode
[  229.412429][T16804] pim6reg: left allmulticast mode
[  229.910857][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5490'.
[  229.976797][T16839] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5493'.
[  230.323988][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5508'.
[  230.333021][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5508'.
[  230.964715][T16895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16895 comm=syz.3.5517
[  230.977351][T16895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16895 comm=syz.3.5517
[  231.024841][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5516'.
[  231.101666][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5516'.
[  231.950418][T16965] lo speed is unknown, defaulting to 1000
[  232.178172][T16983] loop3: detected capacity change from 0 to 512
[  232.230010][T16983] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  232.262426][T16983] EXT4-fs (loop3): orphan cleanup on readonly fs
[  232.298608][T16983] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.5555: corrupted inode contents
[  232.342948][T16983] EXT4-fs (loop3): Remounting filesystem read-only
[  232.372972][T16983] EXT4-fs (loop3): 1 truncate cleaned up
[  232.379030][ T4021] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  232.389653][ T4021] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  232.438833][ T4021] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  232.471730][T16983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  232.636321][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.946285][T17050] loop3: detected capacity change from 0 to 1024
[  232.983830][T17054] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5587'.
[  233.015998][T17050] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  233.071033][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'.
[  233.086758][T17050] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  233.150413][T17050] EXT4-fs (loop3): invalid journal inode
[  233.204215][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5591'.
[  233.209307][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5592'.
[  233.222921][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5592'.
[  233.232024][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5592'.
[  233.257958][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5591'.
[  233.275594][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5592'.
[  233.284666][T17065] netlink: 'syz.9.5592': attribute type 6 has an invalid length.
[  233.313030][T17063] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5591'.
[  233.343416][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5597'.
[  233.927246][T17125] netem: unknown loss type 13
[  233.932835][T17125] netem: change failed
[  234.006052][   T29] kauditd_printk_skb: 190 callbacks suppressed
[  234.006070][   T29] audit: type=1400 audit(233.979:8229): avc:  denied  { create } for  pid=17133 comm="syz.7.5621" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1
[  234.019821][T17130] loop3: detected capacity change from 0 to 512
[  234.069453][   T29] audit: type=1326 audit(234.029:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  234.093308][   T29] audit: type=1326 audit(234.029:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3026a2f749 code=0x7ffc0000
[  234.118508][   T29] audit: type=1326 audit(234.049:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.142188][   T29] audit: type=1326 audit(234.049:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.165790][   T29] audit: type=1326 audit(234.099:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.189420][   T29] audit: type=1326 audit(234.099:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.227135][   T29] audit: type=1326 audit(234.119:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.250238][   T29] audit: type=1326 audit(234.119:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.273575][   T29] audit: type=1326 audit(234.119:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.1.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09821ef749 code=0x7ffc0000
[  234.285990][T17130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.395774][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.798667][T17173] netlink: 'syz.9.5639': attribute type 12 has an invalid length.
[  234.885851][T17184] gretap0: left promiscuous mode
[  234.896272][ T9828] Bluetooth: hci0: Frame reassembly failed (-84)
[  234.911107][T17184] 8021q: adding VLAN 0 to HW filter on device .`
[  234.920227][T17184] 8021q: adding VLAN 0 to HW filter on device team0
[  234.929864][T17184] dummy0: entered promiscuous mode
[  234.935339][T17184] batman_adv: batadv0: Interface activated: dummy0
[  234.942093][T17184] batadv0: mtu less than device minimum
[  234.948545][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  234.959641][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  234.970778][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  234.981721][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  234.992602][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  235.003585][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  235.014570][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  235.025713][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  235.036676][T17184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  235.702351][T17241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17241 comm=syz.9.5666
[  235.950134][T17264] lo speed is unknown, defaulting to 1000
[  235.956829][T17266] loop9: detected capacity change from 0 to 512
[  235.969712][T17266] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.998748][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.074019][T17280] lo: Caught tx_queue_len zero misconfig
[  236.079847][T17280] sch_fq: defrate 0 ignored.
[  236.096679][T17284] loop9: detected capacity change from 0 to 1024
[  236.104116][T17284] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  236.119118][T17284] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.5684: lblock 2 mapped to illegal pblock 2 (length 1)
[  236.134784][T17284] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.5684: lblock 0 mapped to illegal pblock 48 (length 1)
[  236.150004][T17284] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5684: Failed to acquire dquot type 0
[  236.168438][T17284] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  236.178571][T17284] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.5684: mark_inode_dirty error
[  236.198173][T17284] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  236.212581][T17284] EXT4-fs (loop9): 1 orphan inode deleted
[  236.218806][T17284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.231126][T13526] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:73: lblock 1 mapped to illegal pblock 1 (length 1)
[  236.231339][T13526] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:73: Failed to release dquot type 0
[  236.275348][ T4009] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm kworker/u8:24: lblock 2 mapped to illegal pblock 2 (length 1)
[  236.291028][ T4009] EXT4-fs error (device loop9): ext4_write_dquot:6966: comm kworker/u8:24: Failed to commit dquot type 0
[  236.309615][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.340668][ T8351] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  236.361925][ T8351] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  236.372564][ T8351] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  236.425280][T17296] lo speed is unknown, defaulting to 1000
[  236.565260][T17306] netlink: 'syz.7.5693': attribute type 10 has an invalid length.
[  236.908082][ T6642] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  236.908998][ T7914] Bluetooth: hci0: command 0x1003 tx timeout
[  237.780949][T17367] loop9: detected capacity change from 0 to 736
[  237.915861][T17378] loop3: detected capacity change from 0 to 512
[  238.046395][T17378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.178682][T17397] lo: entered allmulticast mode
[  238.269942][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.319510][T17408] netlink: 'syz.3.5733': attribute type 1 has an invalid length.
[  238.330270][T17412] atomic_op ffff888101929928 conn xmit_atomic 0000000000000000
[  238.336856][T17408] 8021q: adding VLAN 0 to HW filter on device bond4
[  238.488396][T17432] __nla_validate_parse: 11 callbacks suppressed
[  238.488415][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5741'.
[  238.618698][T17451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17451 comm=syz.3.5752
[  238.659619][T17457] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  238.671672][T17457] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  239.294272][T17551] ip6gre1: entered allmulticast mode
[  239.938212][   T29] kauditd_printk_skb: 644 callbacks suppressed
[  239.938232][   T29] audit: type=1326 audit(239.879:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  239.968043][   T29] audit: type=1326 audit(239.879:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  239.991684][   T29] audit: type=1326 audit(239.879:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.014867][   T29] audit: type=1326 audit(239.879:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.038719][   T29] audit: type=1326 audit(239.879:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.062414][   T29] audit: type=1326 audit(239.879:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.086064][   T29] audit: type=1326 audit(239.879:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.7.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.435327][   T29] audit: type=1326 audit(240.409:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.7.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.459020][   T29] audit: type=1326 audit(240.409:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.7.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.482674][   T29] audit: type=1326 audit(240.409:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.7.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc283f749 code=0x7ffc0000
[  240.573417][T17667] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.5796'.
[  241.055175][T17693] netlink: 'syz.9.5805': attribute type 6 has an invalid length.
[  241.224857][T17713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5816'.
[  241.703081][T17747] lo speed is unknown, defaulting to 1000
[  241.762073][T17762] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported
[  241.764608][T17766] pim6reg: entered allmulticast mode
[  241.805957][T17766] pim6reg: left allmulticast mode
[  242.372029][T17802] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5845'.
[  242.381091][T17802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5845'.
[  242.418494][T17802] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5845'.
[  242.454402][T17804] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported
[  242.801976][T17824] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5857'.
[  242.828651][T17824] hsr_slave_0: left promiscuous mode
[  242.838929][T17824] hsr_slave_1: left promiscuous mode
[  242.910949][T17832] netlink: 'syz.9.5861': attribute type 2 has an invalid length.
[  242.941613][T17832] loop9: detected capacity change from 0 to 256
[  243.001970][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5874'.
[  243.002611][T17837] loop3: detected capacity change from 0 to 2048
[  243.031984][T17832] FAT-fs (loop9): IO charset macgaelic not found
[  243.055782][T17837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.168168][ T3316] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  243.227290][ T3316] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  243.247082][T17849] loop9: detected capacity change from 0 to 1024
[  243.289435][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.349200][T17849] EXT4-fs: Ignoring removed orlov option
[  243.433291][T17849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.737957][T17872] ==================================================================
[  243.746088][T17872] BUG: KCSAN: data-race in filemap_read / filemap_read
[  243.753146][T17872] 
[  243.755492][T17872] read to 0xffff8881918a3828 of 8 bytes by task 17849 on cpu 1:
[  243.763138][T17872]  filemap_read+0x6f/0xa00
[  243.767578][T17872]  generic_file_read_iter+0x79/0x330
[  243.772902][T17872]  ext4_file_read_iter+0x1cc/0x290
[  243.778059][T17872]  copy_splice_read+0x442/0x660
[  243.782929][T17872]  splice_direct_to_actor+0x290/0x680
[  243.788332][T17872]  do_splice_direct+0xda/0x150
[  243.793119][T17872]  do_sendfile+0x380/0x650
[  243.797560][T17872]  __x64_sys_sendfile64+0x105/0x150
[  243.802782][T17872]  x64_sys_call+0x2db1/0x3000
[  243.807575][T17872]  do_syscall_64+0xd8/0x2c0
[  243.812127][T17872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.818136][T17872] 
[  243.820493][T17872] write to 0xffff8881918a3828 of 8 bytes by task 17872 on cpu 0:
[  243.828248][T17872]  filemap_read+0x974/0xa00
[  243.832798][T17872]  generic_file_read_iter+0x79/0x330
[  243.838125][T17872]  ext4_file_read_iter+0x1cc/0x290
[  243.843285][T17872]  copy_splice_read+0x442/0x660
[  243.848151][T17872]  splice_direct_to_actor+0x290/0x680
[  243.853550][T17872]  do_splice_direct+0xda/0x150
[  243.858341][T17872]  do_sendfile+0x380/0x650
[  243.862872][T17872]  __x64_sys_sendfile64+0x105/0x150
[  243.868118][T17872]  x64_sys_call+0x2db1/0x3000
[  243.872833][T17872]  do_syscall_64+0xd8/0x2c0
[  243.877371][T17872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.883302][T17872] 
[  243.885640][T17872] value changed: 0x000000000000011e -> 0x000000000000011f
[  243.892783][T17872] 
[  243.895134][T17872] Reported by Kernel Concurrency Sanitizer on:
[  243.901324][T17872] CPU: 0 UID: 0 PID: 17872 Comm: syz.9.5876 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  243.912745][T17872] Tainted: [W]=WARN
[  243.916567][T17872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.926726][T17872] ==================================================================
[  244.066051][ T8351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.