last executing test programs:

8m1.217732919s ago: executing program 32 (id=853):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
r1 = gettid()
sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x800}, 0x42085)

6m29.741720198s ago: executing program 33 (id=3065):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0)

6m4.542236338s ago: executing program 34 (id=4255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
pivot_root(0x0, 0x0)

4m37.127869182s ago: executing program 35 (id=5110):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x1, 0x2d5, &(0x7f00000001c0)="$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")
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0)

4m37.108969632s ago: executing program 36 (id=5282):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @remote, @loopback}, 0xc)

4m36.151510768s ago: executing program 37 (id=5288):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

4m30.653445248s ago: executing program 38 (id=5311):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0xb)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f000000e0c0)={0x0, 0x0, &(0x7f000000e080)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x24, 0x1e, 0x1, 0x70bd25, 0x4000000, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)

4m29.648466215s ago: executing program 39 (id=5316):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m52.235150873s ago: executing program 40 (id=6094):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x2e)

2m0.117754244s ago: executing program 41 (id=7262):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

1m51.001241231s ago: executing program 42 (id=7913):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x4008032, 0xffffffffffffffff, 0x5f142000)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

1m18.708023715s ago: executing program 43 (id=8841):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_usb_connect(0x0, 0x35, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x3, 0xe0, 0x5f, 0x20, 0x499, 0x1001, 0xf814, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa3, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xde, 0x31, 0xde, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0xa, 0x3}}]}}]}}]}}, 0x0)

1m15.420555853s ago: executing program 9 (id=8981):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1m15.397047173s ago: executing program 9 (id=8985):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x6a)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)

1m14.56535861s ago: executing program 9 (id=9034):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000480)=ANY=[], 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

1m14.53385279s ago: executing program 9 (id=9036):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000031, 0x0)

1m14.439632909s ago: executing program 1 (id=9040):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

1m14.419092099s ago: executing program 1 (id=9042):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000000000000007d09e6d9ff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003007866726d30"], 0x58}}, 0x0)

1m14.345723939s ago: executing program 1 (id=9043):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
inotify_rm_watch(0xffffffffffffffff, 0x0)

1m14.345330209s ago: executing program 1 (id=9044):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="2c646566636f6e746578746d61636b6673666c6f6f723de5ad8bf8ac42af945deb00"/48], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m13.758628916s ago: executing program 9 (id=9052):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000b0000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb9afcfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b74da42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0f34d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf790842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc9da71c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd7040000000094235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa12d52d21b4b36326f88546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920386f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26ab471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf974fcf36cbf6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f63af851c66ee7e30393cd574d63105c687967ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a148c364c2098fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b263d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae89b873220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d4b55178bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a20ffffffff682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c51966504652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000003bba840af6f8027be80d975ac49b00f711dcc824e3b1ba21795d1dc80c87d9c042cb79706a556d58"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r1, 0xe0ffff, 0x4101, 0x3)

1m13.635377886s ago: executing program 1 (id=9055):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00w\x00\b\x00\b\x00', @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m13.465421945s ago: executing program 9 (id=9057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000010000000000007400", @ANYRES32=r2, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c000280050019000700000008000500010000000500170000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1m13.412605065s ago: executing program 44 (id=9057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000010000000000007400", @ANYRES32=r2, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c000280050019000700000008000500010000000500170000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1m13.141415335s ago: executing program 1 (id=9063):
r0 = socket(0x10, 0x2, 0x0)
r1 = dup2(r0, r0)
sendto$inet6(r1, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be", 0x13, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0)

1m13.127400224s ago: executing program 45 (id=9063):
r0 = socket(0x10, 0x2, 0x0)
r1 = dup2(r0, r0)
sendto$inet6(r1, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be", 0x13, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0)

1m4.732834404s ago: executing program 8 (id=9429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1m4.704365304s ago: executing program 8 (id=9431):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
lremovexattr(0x0, 0x0)

1m4.685715074s ago: executing program 8 (id=9433):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x16, 0x0, @val=@tcx={@void, @value}}, 0x40)

1m4.669127773s ago: executing program 8 (id=9434):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

1m4.548723303s ago: executing program 8 (id=9436):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x241)
pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000480)="80fd", 0x2}], 0x1, 0x0, 0x0)

1m4.160831972s ago: executing program 8 (id=9452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180))

1m4.125077932s ago: executing program 46 (id=9452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180))

55.033519619s ago: executing program 7 (id=9808):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"})

54.959450459s ago: executing program 7 (id=9812):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x30, 0x18, 0x1, 0xfffffffc, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

54.917034289s ago: executing program 7 (id=9817):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)

54.650562018s ago: executing program 7 (id=9827):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x3000400, &(0x7f0000000000)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x88100, 0x19e)
getdents(r0, 0x0, 0x0)

54.581541237s ago: executing program 7 (id=9832):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, 0x0, 0x4}, 0x20)

54.505673587s ago: executing program 7 (id=9837):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x4, 0x5, 0x5, 0x0, 0x1000})

54.435989687s ago: executing program 47 (id=9837):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x4, 0x5, 0x5, 0x0, 0x1000})

40.028864435s ago: executing program 4 (id=10269):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x3}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)

39.969572065s ago: executing program 4 (id=10272):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

39.969150684s ago: executing program 4 (id=10273):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
chroot(0x0)

39.941916714s ago: executing program 4 (id=10275):
r0 = socket$inet6(0xa, 0x3, 0x7d)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

39.941451555s ago: executing program 4 (id=10276):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

39.910808754s ago: executing program 4 (id=10279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)

23.898471946s ago: executing program 48 (id=10279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)

2.642150349s ago: executing program 5 (id=11371):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x3, 0x2, 0x1})

1.150429354s ago: executing program 6 (id=11415):
syz_emit_ethernet(0x32, &(0x7f0000000580)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "21c2087d"}}}}}}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "00d87a5be360cdf553bd6f25601ce33d79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0)

1.119447364s ago: executing program 6 (id=11417):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x34651}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

1.098713044s ago: executing program 0 (id=11419):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x5, 0x65)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

1.086609974s ago: executing program 6 (id=11420):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010)

1.001696523s ago: executing program 6 (id=11422):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}})

967.073664ms ago: executing program 0 (id=11425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000030000001c000000180001801400020076657468305f766c616e"], 0x2c}}, 0x4000)

930.603333ms ago: executing program 2 (id=11429):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
unshare(0x64000600)

922.268283ms ago: executing program 0 (id=11430):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)={[{@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@shortname_lower}, {@shortname_winnt}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_mixed}, {@shortname_winnt}]}, 0x1, 0x339, &(0x7f0000000200)="$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")
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

853.181973ms ago: executing program 5 (id=11432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xec}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40)

833.208793ms ago: executing program 2 (id=11433):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0)

790.193783ms ago: executing program 5 (id=11435):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19)

729.451642ms ago: executing program 2 (id=11436):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x80803, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x8001}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff80, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3, 0x0, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0), 0x1c)

729.183172ms ago: executing program 0 (id=11437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd)

723.078282ms ago: executing program 3 (id=11438):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup(r2)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x29, 0x5, 0x9, 0x6}]})

719.229152ms ago: executing program 2 (id=11439):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

633.441642ms ago: executing program 0 (id=11440):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

598.622342ms ago: executing program 3 (id=11441):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000940)=""/28, 0x1c)

293.011561ms ago: executing program 3 (id=11442):
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f000000c1c0)={0x2020}, 0x2020)

228.983681ms ago: executing program 3 (id=11443):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000400101c0"])

228.571931ms ago: executing program 2 (id=11444):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_delete(0x0)

206.731911ms ago: executing program 5 (id=11445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020480)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
unshare(0x8000480)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

193.999171ms ago: executing program 2 (id=11446):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000340)={&(0x7f00000002c0), 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000001680)=""/4102, 0x101e})

175.106611ms ago: executing program 5 (id=11447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20)

151.63145ms ago: executing program 6 (id=11448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4503000}]}}}]}]}], {0x14}}, 0xc0}}, 0x4800)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x10, 0x3a, 0x0, @remote, @local, {[], @ni={0x8b, 0x0, 0x0, 0x7, 0x7e20, 0x200000080}}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x4040014)

144.590101ms ago: executing program 3 (id=11449):
listen(0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
fdatasync(0xffffffffffffffff)

102.69258ms ago: executing program 5 (id=11450):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x13404c4, &(0x7f0000000d00)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYBLOB="1263a7b959383aa0a9fa10796416da755d29640e5041a395796348a83463470c07de0fe7c8e02a1a743587f58ffb22bbd585d0a5cbead9ca0823180dad88e609da79bbd442bddae537570748f21ac461994ea7754a096f9d50951ef0a07c555e2e53a20f4a407feef4892391f639afa0eccda43b87b58452d42073ba989bbdec9a81948e1f0c9cb8c0ad00fccafaefa58aadfc71bbd61088", @ANYRESDEC, @ANYRES64, @ANYRES8=r0, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x1)
renameat2(r1, &(0x7f00000001c0)='./bus/file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x4)

479.32µs ago: executing program 3 (id=11451):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_clone(0x60809580, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0)

197.75µs ago: executing program 0 (id=11452):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40)
syz_emit_ethernet(0xd41, &(0x7f0000002a00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0x5, 0x4, 0x3, 0x38, 0xd2b, 0x64, 0x0, 0x8, 0x21, 0x0, @remote, @private=0xa010100}, {{0x4e20, 0x4e20, 0x4, 0x1, 0xd, 0x0, 0x0, 0x2, 0x2, "dec107", 0x3, '\"&,'}, "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"}}}}}}, 0x0)

0s ago: executing program 6 (id=11453):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000006300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/120, 0x78}, 0x1ff}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40)

kernel console output (not intermixed with test programs):

.234199][T23129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  487.280705][T23117] EXT4-fs (loop2): unmounting filesystem.
[  487.293364][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9850'.
[  487.331772][T10395] usb 4-1: USB disconnect, device number 10
[  487.337694][   T28] audit: type=1400 audit(2000000016.804:3452): avc:  denied  { read write } for  pid=23162 comm="syz.4.9854" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  487.362027][   T28] audit: type=1400 audit(2000000016.804:3453): avc:  denied  { open } for  pid=23162 comm="syz.4.9854" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  487.390453][   T28] audit: type=1400 audit(2000000016.824:3454): avc:  denied  { unmount } for  pid=12543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  487.461536][   T28] audit: type=1400 audit(2000000016.924:3455): avc:  denied  { name_bind } for  pid=23182 comm="syz.4.9865" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  487.474827][T23185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  487.497684][T14081] Bluetooth: hci0: command 0x1003 tx timeout
[  487.506351][T14102] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  487.545511][   T28] audit: type=1400 audit(2000000017.004:3456): avc:  denied  { append } for  pid=23194 comm="syz.4.9870" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  487.587090][   T28] audit: type=1400 audit(2000000273.054:3457): avc:  denied  { create } for  pid=23198 comm="syz.0.9871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  487.617164][T23205] loop6: detected capacity change from 0 to 1024
[  487.623765][T23205] EXT4-fs: Ignoring removed orlov option
[  487.627925][   T28] audit: type=1400 audit(2000000273.084:3458): avc:  denied  { bind } for  pid=23198 comm="syz.0.9871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  487.636201][T23205] EXT4-fs: Ignoring removed oldalloc option
[  487.649618][T23203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9873'.
[  487.664497][T23207] loop0: detected capacity change from 0 to 1024
[  487.671242][T23205] EXT4-fs (loop6): Test dummy encryption mode enabled
[  487.678749][T23205] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  487.689990][T23205] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  487.713657][T23205] EXT4-fs (loop6): invalid journal inode
[  487.720494][T23207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  487.729557][T23205] EXT4-fs (loop6): can't get journal size
[  487.732115][T23207] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.757395][   T28] audit: type=1326 audit(2000000273.224:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23206 comm="syz.0.9875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d185d19 code=0x7ffc0000
[  487.783204][T23205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  487.804491][T14485] EXT4-fs (loop0): unmounting filesystem.
[  487.834423][T23227] loop0: detected capacity change from 0 to 512
[  487.841510][T23227] EXT4-fs: Ignoring removed bh option
[  487.841525][T21337] EXT4-fs (loop6): unmounting filesystem.
[  487.854306][T23227] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  487.863830][T23227] EXT4-fs (loop0): invalid journal inode
[  487.869393][T23227] EXT4-fs (loop0): can't get journal size
[  487.884328][T23227] EXT4-fs (loop0): 1 truncate cleaned up
[  487.890638][T23227] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  487.925115][T23227] incfs: Can't find or create .index dir in ./file0
[  487.931697][T23227] incfs: mount failed -28
[  487.945094][T14485] EXT4-fs (loop0): unmounting filesystem.
[  488.045828][T23265] loop6: detected capacity change from 0 to 512
[  488.061562][T23265] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.9900: casefold flag without casefold feature
[  488.074501][T23265] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.9900: couldn't read orphan inode 15 (err -117)
[  488.086612][T23270] syz.4.9902[23270] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  488.086693][T23270] syz.4.9902[23270] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  488.099358][T23265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  488.156792][T21337] EXT4-fs (loop6): unmounting filesystem.
[  488.213839][T23288] loop2: detected capacity change from 0 to 512
[  488.240958][T23288] EXT4-fs: Ignoring removed i_version option
[  488.258059][T23288] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9910: inode #1: comm syz.2.9910: iget: illegal inode #
[  488.273640][T23288] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9910: error while reading EA inode 1 err=-117
[  488.286752][T23288] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9910: inode #1: comm syz.2.9910: iget: illegal inode #
[  488.299953][T23288] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9910: error while reading EA inode 1 err=-117
[  488.313784][T23288] EXT4-fs (loop2): 1 orphan inode deleted
[  488.317283][T23298] loop4: detected capacity change from 0 to 512
[  488.319428][T23288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  488.342451][T23298] EXT4-fs error (device loop4): __ext4_iget:5057: inode #2: block 100663296: comm syz.4.9914: invalid block
[  488.364076][T23298] EXT4-fs (loop4): get root inode failed
[  488.371280][T23298] EXT4-fs (loop4): mount failed
[  488.396933][T23117] EXT4-fs (loop2): unmounting filesystem.
[  491.897994][T23332] loop4: detected capacity change from 0 to 512
[  491.904301][T23332] EXT4-fs: Ignoring removed i_version option
[  491.905978][T10395] kernel write not supported for file bpf-prog (pid: 10395 comm: kworker/0:7)
[  491.951732][T23332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9928: inode #1: comm syz.4.9928: iget: illegal inode #
[  491.985764][T23332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9928: error while reading EA inode 1 err=-117
[  492.016117][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9935'.
[  492.025258][T23332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9928: inode #1: comm syz.4.9928: iget: illegal inode #
[  492.059504][T23332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9928: error while reading EA inode 1 err=-117
[  492.078558][T23332] EXT4-fs (loop4): 1 orphan inode deleted
[  492.085588][T23332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  492.099400][T23348] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.106422][T23348] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.154618][T12543] EXT4-fs (loop4): unmounting filesystem.
[  492.251462][T23356] loop3: detected capacity change from 0 to 256
[  492.339252][T23365] loop3: detected capacity change from 0 to 512
[  492.357146][T23365] EXT4-fs: Ignoring removed mblk_io_submit option
[  492.367323][T23365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  492.410119][T23365] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.9942: corrupted in-inode xattr
[  492.437131][T23365] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.9942: couldn't read orphan inode 15 (err -117)
[  492.460488][T23365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  492.484814][T23321] loop0: detected capacity change from 0 to 131072
[  492.493436][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  492.493453][   T28] audit: type=1400 audit(2000000277.955:3471): avc:  denied  { setattr } for  pid=23364 comm="syz.3.9942" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  492.506878][T23321] F2FS-fs (loop0): invalid crc value
[  492.540786][T22244] EXT4-fs (loop3): unmounting filesystem.
[  492.547893][T23321] F2FS-fs (loop0): SIT is corrupted node# 0 vs 1
[  492.554419][T23321] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117)
[  492.556021][T23387] 9p: Unknown Cache mode readahead
[  492.671282][   T28] audit: type=1400 audit(2000000278.135:3472): avc:  denied  { sys_module } for  pid=23395 comm="syz.2.9954" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  492.821553][T23406] loop2: detected capacity change from 0 to 256
[  492.838827][T23406] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  492.921867][T23422] loop3: detected capacity change from 0 to 512
[  492.935601][T23422] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  492.949668][T23422] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  492.959004][T23422] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  492.974295][T23422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  492.984870][T23422] System zones: 0-2, 18-18, 34-34
[  492.990628][T23422] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  493.005630][T23422] EXT4-fs (loop3): 1 truncate cleaned up
[  493.012547][T23422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  493.013640][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9972'.
[  493.033640][   T28] audit: type=1400 audit(2000000278.496:3473): avc:  denied  { read } for  pid=23421 comm="syz.3.9966" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  493.056870][T23422] Invalid ELF header magic: != ELF
[  493.058421][   T28] audit: type=1400 audit(2000000278.496:3474): avc:  denied  { open } for  pid=23421 comm="syz.3.9966" path="/93/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  493.094680][   T28] audit: type=1400 audit(2000000278.506:3475): avc:  denied  { module_load } for  pid=23421 comm="syz.3.9966" path="/93/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=system permissive=1
[  493.120069][T22244] EXT4-fs (loop3): unmounting filesystem.
[  493.141406][T23444] loop0: detected capacity change from 0 to 512
[  493.148400][T23444] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  493.161430][T23444] EXT4-fs (loop0): 1 orphan inode deleted
[  493.167619][T23444] EXT4-fs (loop0): 1 truncate cleaned up
[  493.173260][T23444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  493.185509][T23444] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.9977: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  493.204361][T23444] EXT4-fs (loop0): Remounting filesystem read-only
[  493.212105][T23444] EXT4-fs error (device loop0): ext4_check_all_de:663: inode #12: block 7: comm syz.0.9977: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  493.231099][T23444] EXT4-fs (loop0): Remounting filesystem read-only
[  493.246175][T14485] EXT4-fs (loop0): unmounting filesystem.
[  493.278818][   T28] audit: type=1400 audit(2000000278.746:3476): avc:  denied  { getopt } for  pid=23452 comm="syz.3.9980" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  493.317577][T23461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9983'.
[  493.327307][T23461] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  493.551516][T23481] loop0: detected capacity change from 0 to 40427
[  493.558214][T23481] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  493.565775][T23481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  493.575101][T23481] F2FS-fs (loop0): invalid crc value
[  493.581362][T23481] F2FS-fs (loop0): Found nat_bits in checkpoint
[  493.617549][T23481] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  493.624496][T23481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  493.784183][T23517] loop3: detected capacity change from 0 to 256
[  493.796434][T23515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10001'.
[  493.806331][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10001'.
[  493.817051][T23517] FAT-fs (loop3): Directory bread(block 64) failed
[  493.823423][T23517] FAT-fs (loop3): Directory bread(block 65) failed
[  493.837172][T23517] FAT-fs (loop3): Directory bread(block 66) failed
[  493.843561][T23517] FAT-fs (loop3): Directory bread(block 67) failed
[  493.862094][T23526] loop0: detected capacity change from 0 to 2048
[  493.869486][T23517] FAT-fs (loop3): Directory bread(block 68) failed
[  493.876154][T23517] FAT-fs (loop3): Directory bread(block 69) failed
[  493.890504][T23517] FAT-fs (loop3): Directory bread(block 70) failed
[  493.897467][T23517] FAT-fs (loop3): Directory bread(block 71) failed
[  493.904100][T23517] FAT-fs (loop3): Directory bread(block 72) failed
[  493.910529][T23517] FAT-fs (loop3): Directory bread(block 73) failed
[  493.910714][T23534] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10017'.
[  493.931554][T23517] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  493.941585][T23526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  493.948750][T23517] FAT-fs (loop3): Filesystem has been set read-only
[  493.958415][T23517] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  493.971892][   T28] audit: type=1400 audit(2000000279.426:3477): avc:  denied  { write } for  pid=23525 comm="syz.0.10013" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  494.021782][T23545] loop4: detected capacity change from 0 to 512
[  494.045402][T23545] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  494.078065][   T28] audit: type=1400 audit(2000000279.536:3478): avc:  denied  { read } for  pid=23552 comm="syz.3.10024" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  494.079784][T23553] input: syz0 as /devices/virtual/input/input73
[  494.114555][   T28] audit: type=1400 audit(2000000279.536:3479): avc:  denied  { ioctl } for  pid=23552 comm="syz.3.10024" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  494.129595][T23545] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.10022: Failed to acquire dquot type 0
[  494.187528][T23545] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.10022: Failed to acquire dquot type 0
[  494.220874][T23545] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.10022: Failed to acquire dquot type 0
[  494.234777][T23545] EXT4-fs (loop4): 1 orphan inode deleted
[  494.240345][T23545] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  494.274590][T23545] ext4 filesystem being mounted at /1034/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.347295][T23567] ip6erspan0: tun_chr_ioctl cmd 1074025677
[  494.355440][T23567] ip6erspan0: linktype set to 1
[  494.361661][T12543] EXT4-fs (loop4): unmounting filesystem.
[  494.600179][T23582] loop4: detected capacity change from 0 to 1024
[  494.636149][T23582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  494.708049][T12543] EXT4-fs (loop4): unmounting filesystem.
[  495.002839][T23612] netlink: 'syz.2.10050': attribute type 3 has an invalid length.
[  495.013180][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10050'.
[  495.156755][T23621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10055'.
[  495.173834][T14485] EXT4-fs (loop0): unmounting filesystem.
[  495.203550][T23626] usb usb4: usbfs: process 23626 (syz.4.10057) did not claim interface 0 before use
[  495.335640][T23648] loop0: detected capacity change from 0 to 1024
[  495.378389][T23655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10070'.
[  495.388612][T23648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  495.404910][T23648] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.431531][T23659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10071'.
[  495.441214][T14485] EXT4-fs (loop0): unmounting filesystem.
[  495.476896][T23633] loop2: detected capacity change from 0 to 40427
[  495.490296][T23633] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  495.504397][T23633] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  495.540911][T23633] F2FS-fs (loop2): Found nat_bits in checkpoint
[  495.601096][T23633] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  495.608122][T23633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  495.729791][T23696] device vlan4 entered promiscuous mode
[  495.850242][T23708] loop2: detected capacity change from 0 to 2048
[  495.865600][T23710] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  495.894235][T23708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  495.935677][T23724] loop6: detected capacity change from 0 to 1024
[  495.944710][T23724] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  495.956749][T23729] loop3: detected capacity change from 0 to 128
[  495.963235][T23729] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  495.976540][T23729] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  495.986134][T21337] EXT4-fs (loop6): unmounting filesystem.
[  495.994565][T23117] EXT4-fs (loop2): unmounting filesystem.
[  496.037590][    T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  496.052549][T23742] loop6: detected capacity change from 0 to 2048
[  496.110884][T23742] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  496.125427][T23761] SELinux:  Context system_u:object_r:init_exec_t:s0 is not valid (left unmapped).
[  496.266154][T23769] loop4: detected capacity change from 0 to 8192
[  496.345290][T23785] loop2: detected capacity change from 0 to 128
[  496.369197][T23785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  496.384726][T23785] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  496.412527][T23117] EXT4-fs (loop2): unmounting filesystem.
[  496.417993][T23792] loop3: detected capacity change from 0 to 256
[  496.439121][T23792] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  496.519976][T23799] loop3: detected capacity change from 0 to 512
[  496.565118][T23799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  496.585429][T23799] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.602878][T23799] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.10133: corrupted inode contents
[  496.622022][T23799] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #2: comm syz.3.10133: mark_inode_dirty error
[  496.643369][T23799] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.10133: corrupted inode contents
[  496.657365][T23807] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.10133: corrupted inode contents
[  496.682549][T23807] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #2: comm syz.3.10133: mark_inode_dirty error
[  496.942820][T23807] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.10133: corrupted inode contents
[  497.766208][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  497.784744][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  497.784765][   T28] audit: type=1400 audit(2000000283.237:3493): avc:  denied  { bind } for  pid=23810 comm="syz.4.10137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  497.821068][T22244] EXT4-fs (loop3): unmounting filesystem.
[  497.835262][T23815] loop0: detected capacity change from 0 to 256
[  497.878633][T23820] loop0: detected capacity change from 0 to 128
[  497.885231][T23820] FAT-fs (loop0): Unrecognized mount option "00000000000000000000000" or missing value
[  497.931631][T21337] EXT4-fs (loop6): unmounting filesystem.
[  497.954763][   T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  497.962540][T23824] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add()
[  497.968170][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  497.991029][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  498.001087][   T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  498.014066][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  498.023030][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.038972][   T24] usb 3-1: invalid MIDI out EP 0
[  498.055021][   T24] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[  498.187539][T23847] netlink: 'syz.4.10153': attribute type 32 has an invalid length.
[  498.245958][   T24] usb 3-1: USB disconnect, device number 37
[  498.299087][T23857] loop4: detected capacity change from 0 to 2048
[  498.303395][T23859] loop6: detected capacity change from 0 to 512
[  498.306665][T23857] EXT4-fs: Ignoring removed mblk_io_submit option
[  498.325253][T23857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  498.325593][T23859] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  498.341333][T23857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10158: bg 0: block 234: padding at end of block bitmap is not set
[  498.342796][T23859] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.358019][T23857] EXT4-fs (loop4): Remounting filesystem read-only
[  498.389922][T12543] EXT4-fs (loop4): unmounting filesystem.
[  498.390836][   T28] audit: type=1400 audit(2000000283.847:3494): avc:  denied  { remove_name } for  pid=23858 comm="syz.6.10159" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  498.396882][T23859] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  498.418747][   T28] audit: type=1400 audit(2000000283.847:3495): avc:  denied  { rename } for  pid=23858 comm="syz.6.10159" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  498.428491][T23859] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  498.460487][T23859] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.10159: Failed to acquire dquot type 0
[  498.510845][T21337] EXT4-fs (loop6): unmounting filesystem.
[  498.607829][T23870] loop6: detected capacity change from 0 to 512
[  498.625353][T23870] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  498.634329][T23870] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.655957][T21337] EXT4-fs (loop6): unmounting filesystem.
[  498.669444][T23875] syz.6.10162[23875] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.669500][T23875] syz.6.10162[23875] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.700016][T23877] loop4: detected capacity change from 0 to 512
[  498.718342][T23881] loop3: detected capacity change from 0 to 128
[  498.726766][T23881] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  498.735310][T23881] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  498.774731][T23877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  498.793736][T23877] ext4 filesystem being mounted at /1065/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.794918][T22244] EXT4-fs (loop3): unmounting filesystem.
[  498.849806][   T28] audit: type=1400 audit(2000000284.307:3496): avc:  denied  { mounton } for  pid=23876 comm="syz.4.10163" path="/1065/file0/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  498.924599][   T28] audit: type=1400 audit(2000000284.337:3497): avc:  denied  { write } for  pid=23876 comm="syz.4.10163" name="bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  498.946488][   T28] audit: type=1400 audit(2000000284.337:3498): avc:  denied  { add_name } for  pid=23876 comm="syz.4.10163" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  498.967018][   T28] audit: type=1400 audit(2000000284.337:3499): avc:  denied  { setattr } for  pid=23876 comm="syz.4.10163" name="work" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  498.988924][   T28] audit: type=1400 audit(2000000284.337:3500): avc:  denied  { remove_name } for  pid=23876 comm="syz.4.10163" name="#21" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  499.032426][T12543] EXT4-fs (loop4): unmounting filesystem.
[  499.141653][T23926] __nla_validate_parse: 1 callbacks suppressed
[  499.141674][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10185'.
[  499.235192][T23941] loop6: detected capacity change from 0 to 128
[  499.252348][T23941] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  499.263031][T23941] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  499.303008][T23944] kvm [23943]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000004 data 0x0
[  499.315920][T23941] EXT4-fs warning (device loop6): ext4_group_add:1743: No reserved GDT blocks, can't resize
[  499.332549][T21337] EXT4-fs (loop6): unmounting filesystem.
[  499.414832][T23962] loop2: detected capacity change from 0 to 128
[  499.422597][T23962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  499.431231][T23962] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  499.486782][T23117] EXT4-fs (loop2): unmounting filesystem.
[  499.560055][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10210'.
[  499.866290][T24044] syzkaller0: tun_chr_ioctl cmd 1074025692
[  499.920981][T24055] loop3: detected capacity change from 0 to 512
[  499.928294][T24053] loop4: detected capacity change from 0 to 256
[  499.980565][T24055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  499.993168][T24055] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.008448][T24065] netlink: 165 bytes leftover after parsing attributes in process `syz.2.10247'.
[  500.074007][T22244] EXT4-fs (loop3): unmounting filesystem.
[  500.187022][T24049] loop0: detected capacity change from 0 to 40427
[  500.204043][T24049] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  500.211614][T24049] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  500.235413][T24049] F2FS-fs (loop0): invalid crc value
[  500.264063][T24049] F2FS-fs (loop0): Found nat_bits in checkpoint
[  500.344674][T24049] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  500.351716][T24049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  500.384195][T24097] loop4: detected capacity change from 0 to 256
[  500.398752][T24075] loop2: detected capacity change from 0 to 40427
[  500.405558][T24075] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  500.406961][T24097] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  500.412530][T24075] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  500.433255][T11194] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  500.433696][T24075] F2FS-fs (loop2): invalid crc value
[  500.447424][T11194] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  500.450450][T24075] F2FS-fs (loop2): Found nat_bits in checkpoint
[  500.533107][T24075] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  500.542964][T24075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  500.613359][T23117] syz-executor: attempt to access beyond end of device
[  500.613359][T23117] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  500.668914][T24120] netlink: 165 bytes leftover after parsing attributes in process `syz.4.10269'.
[  500.927914][T24150] loop6: detected capacity change from 0 to 1024
[  500.962899][T24150] EXT4-fs (loop6): orphan cleanup on readonly fs
[  500.987779][T24150] EXT4-fs (loop6): 1 truncate cleaned up
[  501.032862][T24150] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  501.105577][T24172] loop3: detected capacity change from 0 to 512
[  501.133505][T21337] EXT4-fs (loop6): unmounting filesystem.
[  501.182397][T24172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  501.217117][T24172] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.317293][T22244] EXT4-fs (loop3): unmounting filesystem.
[  501.342849][T24192] loop6: detected capacity change from 0 to 512
[  502.527749][    T8] tipc: Subscription rejected, illegal request
[  502.558631][T24192] EXT4-fs: Ignoring removed i_version option
[  502.570708][T24192] EXT4-fs: Ignoring removed nobh option
[  502.579154][T24192] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  502.615291][T24192] EXT4-fs (loop6): 1 truncate cleaned up
[  502.624437][T24192] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  502.674560][T21337] EXT4-fs (loop6): unmounting filesystem.
[  502.823667][T24231] loop6: detected capacity change from 0 to 512
[  502.855639][T24231] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.10318: bad orphan inode 11
[  502.882697][T24231] ext4_test_bit(bit=10, block=4) = 1
[  502.887908][T24231] is_bad_inode(inode)=0
[  502.891878][T24231] NEXT_ORPHAN(inode)=2080374784
[  502.896589][T24231] max_ino=32
[  502.899637][T24231] i_nlink=0
[  502.902660][T24231] EXT4-fs (loop6): 1 truncate cleaned up
[  502.908124][T24231] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  502.939015][T21337] EXT4-fs (loop6): unmounting filesystem.
[  503.018021][T24245] syz.6.10325[24245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.018105][T24245] syz.6.10325[24245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.128492][T24239] loop0: detected capacity change from 0 to 40427
[  503.147490][T24239] F2FS-fs (loop0): fault_injection options not supported
[  503.157513][T24239] F2FS-fs (loop0): invalid crc value
[  503.176073][T24239] F2FS-fs (loop0): Found nat_bits in checkpoint
[  503.183896][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  503.183913][   T28] audit: type=1400 audit(2000000288.648:3517): avc:  denied  { connect } for  pid=24251 comm="syz.6.10327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  503.278596][T24239] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  503.373343][T14485] syz-executor: attempt to access beyond end of device
[  503.373343][T14485] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  503.643707][T24290] loop0: detected capacity change from 0 to 256
[  503.681068][T24290] FAT-fs (loop0): Directory bread(block 64) failed
[  503.690448][T24290] FAT-fs (loop0): Directory bread(block 65) failed
[  503.700588][T24290] FAT-fs (loop0): Directory bread(block 66) failed
[  503.722173][T24290] FAT-fs (loop0): Directory bread(block 67) failed
[  503.728584][T24290] FAT-fs (loop0): Directory bread(block 68) failed
[  503.735389][T24290] FAT-fs (loop0): Directory bread(block 69) failed
[  503.741742][T24290] FAT-fs (loop0): Directory bread(block 70) failed
[  503.748199][T24290] FAT-fs (loop0): Directory bread(block 71) failed
[  503.757245][T24294] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  503.765681][T24290] FAT-fs (loop0): Directory bread(block 72) failed
[  503.772017][T24290] FAT-fs (loop0): Directory bread(block 73) failed
[  503.948422][   T28] audit: type=1400 audit(2000000289.408:3518): avc:  denied  { relabelfrom } for  pid=24305 comm="syz.0.10350" name="" dev="pipefs" ino=108328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  504.074149][T24318] SELinux:  Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped).
[  504.136510][T24325] loop6: detected capacity change from 0 to 512
[  504.143268][T24326] loop0: detected capacity change from 0 to 2048
[  504.150673][T24326] EXT4-fs: Ignoring removed mblk_io_submit option
[  504.157239][T24325] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  504.166493][T24325] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  504.175693][T24325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  504.194385][T24325] System zones: 0-2, 18-18, 34-34
[  504.209375][T24326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  504.218899][T24325] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  504.248961][T24325] EXT4-fs (loop6): 1 truncate cleaned up
[  504.258811][T24325] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  504.414190][   T28] audit: type=1400 audit(2000000289.878:3519): avc:  denied  { write } for  pid=24352 comm="syz.0.10372" path="socket:[109138]" dev="sockfs" ino=109138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  504.807353][T24373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10380'.
[  504.923090][T24379] xt_hashlimit: size too large, truncated to 1048576
[  505.488122][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10386'.
[  505.701801][T24412] loop6: detected capacity change from 0 to 512
[  505.732433][T24412] EXT4-fs (loop6): orphan cleanup on readonly fs
[  505.738618][T24412] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #4: comm syz.6.10397: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  505.808454][T24412] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.10397: Bad quota inode: 4, type: 1
[  505.874802][   T28] audit: type=1400 audit(2000000291.339:3520): avc:  denied  { unmount } for  pid=14485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  505.905283][T24412] EXT4-fs warning (device loop6): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  505.958669][T24412] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  506.111957][   T28] audit: type=1400 audit(2000000291.579:3521): avc:  denied  { read } for  pid=24452 comm="syz.6.10417" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  506.165298][T24458] syz.6.10419[24458] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  506.165383][T24458] syz.6.10419[24458] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  506.183855][   T28] audit: type=1400 audit(2000000291.579:3522): avc:  denied  { open } for  pid=24452 comm="syz.6.10417" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  506.227057][   T28] audit: type=1400 audit(2000000291.579:3523): avc:  denied  { ioctl } for  pid=24452 comm="syz.6.10417" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  506.322975][T24466] loop2: detected capacity change from 0 to 4096
[  506.494514][T24479] loop0: detected capacity change from 0 to 128
[  506.669662][T24493] loop2: detected capacity change from 0 to 512
[  506.737905][T24493] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  506.750546][T24460] loop3: detected capacity change from 0 to 40427
[  506.764035][T24460] F2FS-fs (loop3): fault_injection options not supported
[  506.783477][T24501] netlink: 'syz.0.10437': attribute type 8 has an invalid length.
[  506.810878][T24460] F2FS-fs (loop3): invalid crc value
[  506.819390][T24501] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  506.859467][T24460] F2FS-fs (loop3): Found nat_bits in checkpoint
[  506.953687][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10443'.
[  506.969174][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10444'.
[  507.060448][T24460] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  507.109675][T24526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10448'.
[  507.133337][T24526] bridge0: port 3(vlan2) entered blocking state
[  507.139415][T24526] bridge0: port 3(vlan2) entered disabled state
[  507.199282][T22244] syz-executor: attempt to access beyond end of device
[  507.199282][T22244] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  507.525392][T24549] loop3: detected capacity change from 0 to 512
[  507.539201][T24553] loop2: detected capacity change from 0 to 128
[  507.550852][T24549] EXT4-fs (loop3): orphan cleanup on readonly fs
[  507.561588][T24549] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.10451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  507.613064][T24549] EXT4-fs error (device loop3): ext4_quota_enable:6982: comm syz.3.10451: Bad quota inode: 4, type: 1
[  507.674651][T24549] EXT4-fs warning (device loop3): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  507.697429][T24568] loop2: detected capacity change from 0 to 512
[  507.713776][T24568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  507.723854][T24549] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  507.742313][T24568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.10466: bg 0: block 127: padding at end of block bitmap is not set
[  507.758410][T24568] EXT4-fs (loop2): 1 truncate cleaned up
[  507.822578][T24580] loop3: detected capacity change from 0 to 512
[  507.834403][T24580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  507.864986][T24580] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.10472: invalid block
[  507.886221][T24580] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10472: invalid indirect mapped block 4294967295 (level 1)
[  507.906458][T24580] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10472: invalid indirect mapped block 4294967295 (level 1)
[  507.933527][T24580] EXT4-fs (loop3): 2 truncates cleaned up
[  507.951969][T24580] EXT4-fs (loop3): shut down requested (2)
[  508.032923][T24595] loop3: detected capacity change from 0 to 8192
[  508.058532][T24595] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  508.109097][T22244] cgroup: fork rejected by pids controller in /syz3
[  508.433234][T24609] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.440092][T24609] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.447521][T24609] device bridge_slave_0 entered promiscuous mode
[  508.456566][T24609] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.463601][T24609] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.470893][T24609] device bridge_slave_1 entered promiscuous mode
[  508.551782][T24609] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.558662][T24609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.565804][T24609] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.572775][T24609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.631027][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  508.641897][  T225] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.654638][  T225] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.673639][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  508.685586][  T225] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.692453][  T225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.724421][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  508.732602][  T225] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.739462][  T225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.757017][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  508.765153][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  508.781475][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  508.796508][T24609] device veth0_vlan entered promiscuous mode
[  508.809103][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  508.824278][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  508.832202][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  508.858945][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  508.870524][T24609] device veth1_macvtap entered promiscuous mode
[  508.888067][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  508.902920][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  508.977559][T24632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10493'.
[  509.072611][  T610] device bridge_slave_1 left promiscuous mode
[  509.096204][  T610] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.117078][T24650] overlayfs: './file0' not a directory
[  509.122716][  T610] device bridge_slave_0 left promiscuous mode
[  509.128845][  T610] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.148200][  T610] device veth1_macvtap left promiscuous mode
[  509.170967][  T610] device veth0_vlan left promiscuous mode
[  509.208253][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[  509.216800][T24657] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[  509.223931][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10506'.
[  509.241388][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10506'.
[  509.448170][T24673] netlink: 312 bytes leftover after parsing attributes in process `syz.6.10512'.
[  509.643086][T24694] tipc: Invalid UDP bearer configuration
[  509.643116][T24694] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  509.674525][T24696] tap0: tun_chr_ioctl cmd 1074025677
[  509.679744][T24696] tap0: linktype set to 778
[  509.802888][   T28] audit: type=1326 audit(2000000295.270:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.6.10528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x0
[  510.086624][T24715] loop0: detected capacity change from 0 to 256
[  510.927042][T24735] loop6: detected capacity change from 0 to 40427
[  511.143359][T24743] loop6: detected capacity change from 0 to 512
[  511.149732][T24743] EXT4-fs: Ignoring removed oldalloc option
[  511.155791][T24743] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  511.181220][T24743] EXT4-fs (loop6): 1 truncate cleaned up
[  511.240211][T14102] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  511.240229][T14081] Bluetooth: hci0: command 0x1003 tx timeout
[  511.298101][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10551'.
[  511.314758][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10551'.
[  511.359055][T24769] loop2: detected capacity change from 0 to 256
[  511.387122][T24769] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  511.416933][   T28] audit: type=1400 audit(2000000296.880:3525): avc:  denied  { mounton } for  pid=24768 comm="syz.2.10553" path="/161/file2/file0" dev="loop2" ino=1049144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  511.480358][   T28] audit: type=1400 audit(2000000296.940:3526): avc:  denied  { remove_name } for  pid=23117 comm="syz-executor" name=".index" dev="loop2" ino=1049145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  511.529239][   T28] audit: type=1400 audit(2000000296.940:3527): avc:  denied  { rmdir } for  pid=23117 comm="syz-executor" name=".index" dev="loop2" ino=1049145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  511.586962][   T28] audit: type=1400 audit(2000000296.940:3528): avc:  denied  { unlink } for  pid=23117 comm="syz-executor" name="file0" dev="loop2" ino=1049151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  511.658435][T24791] device sit0 entered promiscuous mode
[  511.672936][T24791] netlink: 'syz.6.10565': attribute type 1 has an invalid length.
[  511.730102][T24791] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10565'.
[  511.797298][T24801] loop6: detected capacity change from 0 to 1024
[  511.810591][T24801] EXT4-fs: Ignoring removed orlov option
[  511.852668][T24806] loop2: detected capacity change from 0 to 128
[  511.876715][T24806] FAT-fs (loop2): Directory bread(block 32) failed
[  511.890246][T24806] FAT-fs (loop2): Directory bread(block 33) failed
[  511.906887][T24806] FAT-fs (loop2): Directory bread(block 34) failed
[  511.913326][T24806] FAT-fs (loop2): Directory bread(block 35) failed
[  511.929843][T24806] FAT-fs (loop2): Directory bread(block 36) failed
[  511.936315][T24806] FAT-fs (loop2): Directory bread(block 37) failed
[  511.950109][T24806] FAT-fs (loop2): Directory bread(block 38) failed
[  511.960187][T24806] FAT-fs (loop2): Directory bread(block 39) failed
[  511.970668][T24806] FAT-fs (loop2): Directory bread(block 40) failed
[  511.977319][T24806] FAT-fs (loop2): Directory bread(block 41) failed
[  511.992348][   T28] audit: type=1400 audit(2000000297.460:3529): avc:  denied  { bind } for  pid=24811 comm="syz.0.10573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  512.042427][T24817] loop0: detected capacity change from 0 to 128
[  512.067144][T24806] syz.2.10571: attempt to access beyond end of device
[  512.067144][T24806] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  512.093867][T24806] FAT-fs (loop2): Filesystem has been set read-only
[  512.104491][   T28] audit: type=1326 audit(2000000297.570:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d185d19 code=0x7ffc0000
[  512.106903][T24806] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  512.148789][   T28] audit: type=1326 audit(2000000297.600:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6d185d19 code=0x7ffc0000
[  512.181310][   T28] audit: type=1326 audit(2000000297.600:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d185d19 code=0x7ffc0000
[  512.204929][   T28] audit: type=1326 audit(2000000297.600:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6d185d19 code=0x7ffc0000
[  512.322643][T24832] loop0: detected capacity change from 0 to 256
[  512.331663][T24832] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  512.470796][T24836] loop2: detected capacity change from 0 to 512
[  512.491266][T24836] EXT4-fs: Ignoring removed bh option
[  512.530909][T24836] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  512.851293][T24857] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10592'.
[  513.025536][T24868] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  513.042464][T24868] FAT-fs (loop6): unable to read boot sector
[  513.079103][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10600'.
[  513.088092][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10600'.
[  513.134617][T24877] loop6: detected capacity change from 0 to 1024
[  513.156316][T24834] loop0: detected capacity change from 0 to 131072
[  513.164197][T24834] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  513.172659][T24834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  513.181612][T24834] F2FS-fs (loop0): invalid crc value
[  513.190050][T24834] F2FS-fs (loop0): Found nat_bits in checkpoint
[  513.197365][T24877] EXT4-fs (loop6): shut down requested (0)
[  513.216685][T24877] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  513.235194][T24877] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  513.249978][T24834] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  513.257209][T24834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  513.328705][T24834] F2FS-fs (loop0): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0
[  513.341361][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10604'.
[  513.350973][T24889] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10604'.
[  513.521261][T24901] loop6: detected capacity change from 0 to 256
[  513.551474][T24901] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  513.568665][T24901] FAT-fs (loop6): error, clusters badly computed (0 != 128)
[  513.583210][T24901] FAT-fs (loop6): error, clusters badly computed (1 != 129)
[  513.599786][T24901] FAT-fs (loop6): error, clusters badly computed (2 != 130)
[  513.618071][T24901] FAT-fs (loop6): error, clusters badly computed (3 != 131)
[  513.629666][T24901] FAT-fs (loop6): error, clusters badly computed (4 != 132)
[  513.643345][T24901] FAT-fs (loop6): error, clusters badly computed (5 != 133)
[  513.790323][T24928] syz.6.10621[24928] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  513.790405][T24928] syz.6.10621[24928] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  514.247386][T24980] loop2: detected capacity change from 0 to 512
[  514.278300][T24980] EXT4-fs: Ignoring removed oldalloc option
[  514.285956][T24980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  514.315103][T24980] EXT4-fs (loop2): 1 truncate cleaned up
[  514.412210][T24996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10654'.
[  514.465008][T25002] loop2: detected capacity change from 0 to 256
[  514.474093][T25004] syz.0.10658[25004] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  514.474176][T25004] syz.0.10658[25004] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  514.499730][T25002] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  514.539210][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10659'.
[  514.623292][T25014] loop0: detected capacity change from 0 to 512
[  514.635594][T25014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  514.646006][T25014] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.10663: casefold flag without casefold feature
[  514.661042][T25014] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.10663: couldn't read orphan inode 15 (err -117)
[  515.769638][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  515.769655][   T28] audit: type=1400 audit(2134218029.242:3552): avc:  denied  { create } for  pid=25013 comm="syz.0.10663" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  516.761889][   T28] audit: type=1400 audit(2134218029.272:3553): avc:  denied  { setattr } for  pid=25013 comm="syz.0.10663" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  517.815362][T14485] EXT4-fs unmount: 25 callbacks suppressed
[  517.815382][T14485] EXT4-fs (loop0): unmounting filesystem.
[  517.816757][T25027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10669'.
[  517.850633][T25032] loop3: detected capacity change from 0 to 256
[  517.856898][T25032] exfat: Unknown parameter 'um0�P�a000000000'
[  517.878365][T25037] loop2: detected capacity change from 0 to 256
[  517.900773][T25037] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18bdb, utbl_chksum : 0xe619d30d)
[  517.927940][   T28] audit: type=1400 audit(2134218031.393:3554): avc:  denied  { setattr } for  pid=25033 comm="syz.2.10671" name="file0" dev="incremental-fs" ino=1049162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  517.946885][T25042] loop0: detected capacity change from 0 to 256
[  517.965584][T25042] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  518.084509][T25028] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.114348][T25028] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.121862][T25028] device bridge_slave_0 entered promiscuous mode
[  518.128899][T25028] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.135748][T25028] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.144995][T25028] device bridge_slave_1 entered promiscuous mode
[  518.249027][T25068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10686'.
[  518.319343][T25028] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.320657][T25074] loop0: detected capacity change from 0 to 1024
[  518.326198][T25028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.339519][T25028] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.343047][T25074] EXT4-fs: Ignoring removed nomblk_io_submit option
[  518.346364][T25028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.406622][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  518.418084][  T225] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.425979][T25074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  518.443086][T25087] loop3: detected capacity change from 0 to 512
[  518.444498][  T225] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.456134][T25087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  518.467943][T25087] EXT4-fs (loop3): 1 truncate cleaned up
[  518.473790][T25087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  518.474484][T14485] EXT4-fs (loop0): unmounting filesystem.
[  518.496778][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  518.509714][   T28] audit: type=1400 audit(2134218031.983:3555): avc:  denied  { link } for  pid=25086 comm="syz.3.10694" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  518.539559][T24609] EXT4-fs (loop3): unmounting filesystem.
[  518.542619][  T610] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.552003][  T610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.553464][T25094] loop0: detected capacity change from 0 to 128
[  518.567145][   T28] audit: type=1400 audit(2134218031.983:3556): avc:  denied  { ioctl } for  pid=25086 comm="syz.3.10694" path="/30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  518.613276][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  518.628810][  T610] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.635688][  T610] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.650323][T25100] netlink: 'syz.3.10699': attribute type 16 has an invalid length.
[  518.654623][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  518.675190][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  518.676314][T25100] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10699'.
[  518.706580][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  518.729824][T25028] device veth0_vlan entered promiscuous mode
[  518.740386][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  518.761549][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  518.781120][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  518.816065][T25028] device veth1_macvtap entered promiscuous mode
[  518.827497][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  518.844300][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  518.867560][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  519.036831][T25126] loop2: detected capacity change from 0 to 256
[  519.048567][T25126] exfat: Deprecated parameter 'namecase'
[  519.088314][T25126] exfat: Deprecated parameter 'namecase'
[  519.113077][T25126] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  519.155016][T25132] syz.6.10711[25132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  519.155094][T25132] syz.6.10711[25132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  519.230075][   T43] device veth3 left promiscuous mode
[  519.260403][   T43] bridge0: port 1(veth3) entered disabled state
[  519.277996][   T43] device veth1_macvtap left promiscuous mode
[  519.296984][   T43] device veth0_vlan left promiscuous mode
[  519.357319][T25158] loop5: detected capacity change from 0 to 512
[  519.364458][T25158] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  519.377733][T25158] EXT4-fs (loop5): 1 truncate cleaned up
[  519.383520][T25158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  519.406628][T25028] EXT4-fs (loop5): unmounting filesystem.
[  519.548577][T25186] 9pnet: p9_errstr2errno: server reported unknown error 
[  519.579340][T25188] loop2: detected capacity change from 0 to 256
[  519.614202][T25188] incfs: Can't find or create .incomplete dir in ./file0
[  519.621514][T25188] incfs: mount failed -28
[  519.628742][T25188] incfs: Can't find or create .incomplete dir in ./file0
[  519.635992][T25188] incfs: mount failed -28
[  519.711295][   T28] audit: type=1326 audit(2134218033.183:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.5.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f11f85d19 code=0x7ffc0000
[  519.757074][   T28] audit: type=1326 audit(2134218033.183:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.5.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f11f85d19 code=0x7ffc0000
[  519.793092][T25182] loop0: detected capacity change from 0 to 40427
[  519.794890][   T28] audit: type=1326 audit(2134218033.183:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.5.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f11f85d19 code=0x7ffc0000
[  519.823248][T25182] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  519.830864][   T28] audit: type=1326 audit(2134218033.183:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.5.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f11f85d19 code=0x7ffc0000
[  519.830898][   T28] audit: type=1326 audit(2134218033.183:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.5.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f11f85d19 code=0x7ffc0000
[  519.881300][T25182] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  519.895033][T25211] loop2: detected capacity change from 0 to 2048
[  519.903982][T25182] F2FS-fs (loop0): Found nat_bits in checkpoint
[  519.912157][T25211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  519.942110][T23117] EXT4-fs (loop2): unmounting filesystem.
[  519.980350][T25182] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  519.987384][T25182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  520.103170][T25237] syz.2.10757[25237] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  520.103261][T25237] syz.2.10757[25237] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  520.132709][T25239] loop2: detected capacity change from 0 to 256
[  520.156893][T25239] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  520.184544][T25243] loop2: detected capacity change from 0 to 512
[  520.191387][T25243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  520.202846][T25243] EXT4-fs (loop2): 1 truncate cleaned up
[  520.208685][T25243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  520.222292][T25243] incfs: ino conflict with backing FS 2
[  520.309713][T23117] EXT4-fs (loop2): unmounting filesystem.
[  520.327936][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  520.507911][   T24] usb 6-1: Using ep0 maxpacket: 16
[  520.514440][   T24] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.545482][   T24] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.565686][   T24] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  520.587861][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  520.600558][   T24] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  520.617834][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.633307][   T24] usb 6-1: config 0 descriptor??
[  520.728671][T25254] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.738036][T25254] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.745507][T25254] device bridge_slave_0 entered promiscuous mode
[  520.774353][T25254] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.781510][T25254] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.789022][T25254] device bridge_slave_1 entered promiscuous mode
[  520.811652][T25253] loop0: detected capacity change from 0 to 40427
[  520.818554][T25253] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  520.826119][T25253] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  520.835228][T25253] F2FS-fs (loop0): invalid crc value
[  520.842150][T25253] F2FS-fs (loop0): Found nat_bits in checkpoint
[  520.906556][T25253] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  520.913651][T25253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  520.916630][T25254] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.927819][T25254] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.934904][T25254] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.941715][T25254] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.978414][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  520.986337][  T610] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.995299][  T610] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.018189][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  521.028038][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  521.036114][  T610] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.042986][  T610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.054651][   T24] hid-generic 0003:045E:05DA.007C: ignoring exceeding usage max
[  521.064321][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  521.090884][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  521.098845][   T24] hid-generic 0003:045E:05DA.007C: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.5-1/input0
[  521.113576][  T610] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.120454][  T610] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.156082][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  521.168533][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  521.188090][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  521.196056][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  521.208747][   T43] device bridge_slave_1 left promiscuous mode
[  521.214699][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.222398][   T43] device bridge_slave_0 left promiscuous mode
[  521.228470][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.282841][   T24] usb 6-1: USB disconnect, device number 29
[  521.333542][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  521.348197][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  521.372501][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  521.380910][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  521.388967][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  521.396370][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  521.408748][T25254] device veth0_vlan entered promiscuous mode
[  521.438773][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  521.458117][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  521.467849][T25254] device veth1_macvtap entered promiscuous mode
[  521.483096][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  521.497428][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  521.507777][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  521.518942][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  521.529897][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  521.629679][T25292] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.636659][T25292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.738785][T25310] SELinux:  policydb version 0 does not match my version range 15-33
[  521.746764][T25310] SELinux: failed to load policy
[  521.825362][T25319] loop5: detected capacity change from 0 to 1024
[  521.837954][T25319] EXT4-fs: Ignoring removed i_version option
[  521.853586][T25319] EXT4-fs (loop5): Test dummy encryption mode enabled
[  521.885019][T25319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  521.914513][T25331] device batadv_slave_1 entered promiscuous mode
[  521.936409][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  521.936427][   T28] audit: type=1400 audit(2134218035.404:3570): avc:  denied  { read write } for  pid=25332 comm="syz.0.10792" name="usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  521.937790][T25319] fscrypt: AES-256-XTS using blk-crypto-fallback
[  521.942449][   T28] audit: type=1400 audit(2134218035.404:3571): avc:  denied  { open } for  pid=25332 comm="syz.0.10792" path="/dev/usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  522.004269][T25330] device batadv_slave_1 left promiscuous mode
[  522.011726][   T28] audit: type=1400 audit(2134218035.474:3572): avc:  denied  { ioctl } for  pid=25332 comm="syz.0.10792" path="/dev/usbmon1" dev="devtmpfs" ino=156 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  522.048101][T25028] EXT4-fs (loop5): unmounting filesystem.
[  522.088710][T25343] loop3: detected capacity change from 0 to 16
[  522.097398][T25343] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[  522.112782][T25347] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  522.125788][T25347] FAT-fs (loop13): unable to read boot sector
[  522.134869][T25316] loop2: detected capacity change from 0 to 40427
[  522.143580][T25316] F2FS-fs (loop2): fault_injection options not supported
[  522.150641][T25351] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  522.151525][T25352] loop0: detected capacity change from 0 to 512
[  522.158860][T25316] F2FS-fs (loop2): invalid crc value
[  522.166423][T25352] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.10800: casefold flag without casefold feature
[  522.182188][T25352] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.10800: couldn't read orphan inode 15 (err -117)
[  522.198537][T25352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  522.216643][T25316] F2FS-fs (loop2): Found nat_bits in checkpoint
[  522.237272][T25361] loop3: detected capacity change from 0 to 512
[  522.248363][T25361] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.10802: inode #1: comm syz.3.10802: iget: illegal inode #
[  522.279346][T25361] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.10802: error while reading EA inode 1 err=-117
[  522.283562][T14485] EXT4-fs (loop0): unmounting filesystem.
[  522.291892][T25361] EXT4-fs (loop3): 1 orphan inode deleted
[  522.302695][T25361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  522.312445][T25316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  522.324848][T25370] loop5: detected capacity change from 0 to 512
[  522.331644][T25370] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  522.348588][T25370] EXT4-fs (loop5): orphan cleanup on readonly fs
[  522.355533][T25370] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10807: bg 0: block 248: padding at end of block bitmap is not set
[  522.370042][T25361] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.10802: unexpected EA_INODE flag
[  522.381960][T25370] Quota error (device loop5): write_blk: dquota write failed
[  522.389275][T25370] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  522.399523][T25370] EXT4-fs error (device loop5): ext4_acquire_dquot:6788: comm syz.5.10807: Failed to acquire dquot type 1
[  522.411279][T25370] EXT4-fs (loop5): 1 truncate cleaned up
[  522.419075][T24609] EXT4-fs (loop3): unmounting filesystem.
[  522.424842][T25370] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  522.455216][T25254] syz-executor: attempt to access beyond end of device
[  522.455216][T25254] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  522.478558][T25378] syz.3.10809[25378] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  522.478632][T25378] syz.3.10809[25378] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  522.492040][T25370] EXT4-fs error (device loop5): __ext4_remount:6436: comm syz.5.10807: Abort forced by user
[  522.521943][T25028] EXT4-fs (loop5): unmounting filesystem.
[  522.547025][T25382] loop5: detected capacity change from 0 to 512
[  522.559331][T25380] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  522.577461][T25380] FAT-fs (loop1): unable to read boot sector
[  522.584801][T25387] loop6: detected capacity change from 0 to 256
[  522.600529][T25382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  522.611084][T25387] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  522.639568][T25387] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  522.653948][T25382] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  522.665852][T25382] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.770694][T25420] loop6: detected capacity change from 0 to 2048
[  522.806551][T25028] EXT4-fs (loop5): unmounting filesystem.
[  522.813214][T25420] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  522.857735][T21337] EXT4-fs (loop6): unmounting filesystem.
[  522.942495][   T28] audit: type=1400 audit(2134218036.404:3573): avc:  denied  { getopt } for  pid=25439 comm="syz.6.10832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  522.973233][T25448] loop3: detected capacity change from 0 to 128
[  522.990851][T25448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  523.017270][T25448] System zones: 1-3, 19-19, 35-36
[  523.048406][T25448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  523.066856][   T28] audit: type=1400 audit(2134218036.534:3574): avc:  denied  { append } for  pid=25454 comm="syz.5.10840" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  523.092847][T25448] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  523.128036][T25448] EXT4-fs warning (device loop3): ext4_group_extend:1870: can't shrink FS - resize aborted
[  523.146311][T24609] EXT4-fs (loop3): unmounting filesystem.
[  523.244147][T25475] loop2: detected capacity change from 0 to 512
[  523.251615][T25475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  523.261434][T25475] EXT4-fs (loop2): orphan cleanup on readonly fs
[  523.269162][T25475] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.10849: bg 0: block 248: padding at end of block bitmap is not set
[  523.283669][T25475] Quota error (device loop2): write_blk: dquota write failed
[  523.283730][T25481] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10851'.
[  523.290912][T25475] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  523.290941][T25475] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.10849: Failed to acquire dquot type 1
[  523.321131][T25475] EXT4-fs (loop2): 1 truncate cleaned up
[  523.321683][T25483] loop3: detected capacity change from 0 to 256
[  523.326782][T25475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  523.354039][T25475] EXT4-fs error (device loop2): __ext4_remount:6436: comm syz.2.10849: Abort forced by user
[  523.372389][T25254] EXT4-fs (loop2): unmounting filesystem.
[  523.389471][   T28] audit: type=1326 audit(2134218036.864:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25486 comm="syz.2.10854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8236385d19 code=0x0
[  523.413126][   T60] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  523.529018][T25497] loop3: detected capacity change from 0 to 128
[  523.551252][T25499] loop3: detected capacity change from 0 to 1024
[  523.557898][T25499] EXT4-fs: Ignoring removed nomblk_io_submit option
[  523.568972][T25499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  523.587673][T24609] EXT4-fs (loop3): unmounting filesystem.
[  523.597096][   T60] usb 6-1: Using ep0 maxpacket: 16
[  523.603272][   T60] usb 6-1: config 0 has no interfaces?
[  523.610099][   T60] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  523.619317][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.627534][   T60] usb 6-1: Product: syz
[  523.631563][   T60] usb 6-1: Manufacturer: syz
[  523.635938][   T60] usb 6-1: SerialNumber: syz
[  523.641052][   T60] r8152-cfgselector 6-1: config 0 descriptor??
[  523.704609][T25511] loop3: detected capacity change from 0 to 128
[  523.712614][T25511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  523.721214][T25511] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  523.764248][T24609] EXT4-fs (loop3): unmounting filesystem.
[  523.777841][T25514] xt_hashlimit: size too large, truncated to 1048576
[  524.291738][T25548] loop3: detected capacity change from 0 to 128
[  524.311698][T25548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  524.325194][T25553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10882'.
[  524.337125][T25548] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  524.368909][T25553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10882'.
[  524.382170][T25548] EXT4-fs (loop3): shut down requested (2)
[  524.397001][T24609] EXT4-fs (loop3): unmounting filesystem.
[  524.656936][T25586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10897'.
[  524.694666][T25590] loop3: detected capacity change from 0 to 1024
[  524.737529][T25590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  524.772710][T24609] EXT4-fs (loop3): unmounting filesystem.
[  525.381463][T25688] netlink: '+}[@': attribute type 3 has an invalid length.
[  525.400578][T25692] loop3: detected capacity change from 0 to 256
[  525.404395][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[  525.407145][T25692] exfat: Deprecated parameter 'namecase'
[  525.418454][T25692] exfat: Deprecated parameter 'utf8'
[  525.426138][T25692] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  525.458857][T25698] device batadv_slave_1 entered promiscuous mode
[  525.466577][T25698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10945'.
[  525.492177][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10947'.
[  525.501145][T25703] device bridge_slave_1 left promiscuous mode
[  525.507312][T25703] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.514874][T25703] device bridge_slave_0 left promiscuous mode
[  525.520945][T25703] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.789114][T25732] loop3: detected capacity change from 0 to 2048
[  525.817902][T25732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  525.826242][T25732] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  525.846865][T24609] EXT4-fs (loop3): unmounting filesystem.
[  525.861669][T25743] loop3: detected capacity change from 0 to 256
[  525.870617][T25743] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  525.893920][T25743] syz.3.10962: attempt to access beyond end of device
[  525.893920][T25743] loop3: rw=524288, sector=440, nr_sectors = 256 limit=256
[  525.906175][T25745] device ip6erspan0 entered promiscuous mode
[  525.909617][T25743] syz.3.10962: attempt to access beyond end of device
[  525.909617][T25743] loop3: rw=524288, sector=696, nr_sectors = 256 limit=256
[  525.927594][T25743] syz.3.10962: attempt to access beyond end of device
[  525.927594][T25743] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  525.941058][T25743] syz.3.10962: attempt to access beyond end of device
[  525.941058][T25743] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  525.954441][T25743] syz.3.10962: attempt to access beyond end of device
[  525.954441][T25743] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  525.967657][T25743] syz.3.10962: attempt to access beyond end of device
[  525.967657][T25743] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  525.981424][T25746] syz.3.10962: attempt to access beyond end of device
[  525.981424][T25746] loop3: rw=2049, sector=272, nr_sectors = 8 limit=256
[  525.984414][T25743] syz.3.10962: attempt to access beyond end of device
[  525.984414][T25743] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  526.008392][T25743] syz.3.10962: attempt to access beyond end of device
[  526.008392][T25743] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  526.130583][   T24] usb 6-1: USB disconnect, device number 30
[  526.168231][T25764] loop2: detected capacity change from 0 to 256
[  526.224977][T25766] loop6: detected capacity change from 0 to 16
[  526.247090][T25766] erofs: Unknown parameter '����	!��o���W_�K'
[  526.349251][T25762] loop5: detected capacity change from 0 to 40427
[  526.352178][T25770] loop6: detected capacity change from 0 to 1024
[  526.362740][T25762] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  526.370507][T25762] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  526.379424][T25762] F2FS-fs (loop5): invalid crc value
[  526.385618][T25770] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  526.401295][T25762] F2FS-fs (loop5): Found nat_bits in checkpoint
[  526.413010][T21337] EXT4-fs (loop6): unmounting filesystem.
[  526.488539][T25762] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  526.495922][T25762] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  526.502836][T25783] loop6: detected capacity change from 0 to 2048
[  526.560517][T25783] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  526.607905][T21337] EXT4-fs (loop6): unmounting filesystem.
[  526.643680][T25798] netlink: 'syz.2.10984': attribute type 34 has an invalid length.
[  526.728290][T25806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10988'.
[  527.003049][T25854] loop6: detected capacity change from 0 to 1024
[  527.015836][T25854] EXT4-fs: Ignoring removed bh option
[  527.047793][T25854] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  527.092017][T21337] EXT4-fs (loop6): unmounting filesystem.
[  527.098174][T25838] loop2: detected capacity change from 0 to 40427
[  527.104863][T25838] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  527.112956][T25838] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  527.128971][T25838] F2FS-fs (loop2): invalid crc value
[  527.143611][T25838] F2FS-fs (loop2): Found nat_bits in checkpoint
[  527.151280][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  527.151295][   T28] audit: type=1326 audit(2134218552.628:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.6.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  527.182636][   T28] audit: type=1326 audit(2134218552.638:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.6.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  527.194308][T25838] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  527.213029][T25838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  527.227125][   T28] audit: type=1326 audit(2134218552.648:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.6.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  527.251030][   T28] audit: type=1326 audit(2134218552.648:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.6.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  527.274779][   T28] audit: type=1326 audit(2134218552.648:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.6.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  527.276146][   T43] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  527.307814][   T43] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  527.486684][ T5153] Bluetooth: hci0: command 0x1003 tx timeout
[  527.486737][T14102] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  527.892268][T25915] loop3: detected capacity change from 0 to 512
[  527.908566][T25915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  527.917432][T25915] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  527.943690][T24609] EXT4-fs (loop3): unmounting filesystem.
[  528.102527][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11043'.
[  528.112378][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11043'.
[  528.145219][T25943] loop3: detected capacity change from 0 to 256
[  528.153974][T25943] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  528.170065][   T28] audit: type=1400 audit(2134218553.638:3595): avc:  denied  { rename } for  pid=25942 comm="syz.3.11047" name="file1" dev="loop3" ino=1049187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  528.202111][T25945] tmpfs: Unknown parameter 'noswap'
[  528.232789][T25949] loop3: detected capacity change from 0 to 512
[  528.239950][T25949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  528.252172][T25949] EXT4-fs (loop3): 1 orphan inode deleted
[  528.257823][T25949] EXT4-fs (loop3): 1 truncate cleaned up
[  528.263281][T25949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  528.274539][T25949] EXT4-fs error (device loop3): empty_inline_dir:1877: inode #12: block 7: comm syz.3.11050: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[  528.293413][T25949] EXT4-fs (loop3): Remounting filesystem read-only
[  528.299846][T25949] EXT4-fs warning (device loop3): empty_inline_dir:1884: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  528.314601][T25949] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.11050: iget: bad extra_isize 46 (inode size 256)
[  528.332005][T25949] EXT4-fs (loop3): Remounting filesystem read-only
[  528.353365][T25962] xt_CT: You must specify a L4 protocol and not use inversions on it
[  528.362045][T24609] EXT4-fs (loop3): unmounting filesystem.
[  528.442857][T25973] loop6: detected capacity change from 0 to 128
[  528.480918][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11063'.
[  528.517600][   T28] audit: type=1326 audit(2134218553.988:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25980 comm="syz.6.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  528.554245][   T28] audit: type=1326 audit(2134218554.008:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25980 comm="syz.6.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  528.566550][T25971] loop3: detected capacity change from 0 to 40427
[  528.578293][   T28] audit: type=1326 audit(2134218554.008:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25980 comm="syz.6.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  528.585851][T25971] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  528.607312][   T28] audit: type=1326 audit(2134218554.008:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25980 comm="syz.6.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bfad85d19 code=0x7ffc0000
[  528.638506][T25983] device batadv_slave_1 entered promiscuous mode
[  528.639526][T25971] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  528.654061][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11066'.
[  528.655542][T25971] F2FS-fs (loop3): Found nat_bits in checkpoint
[  528.714421][T25971] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  528.721455][T25971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  528.981828][T26016] loop3: detected capacity change from 0 to 2048
[  528.986386][T26018] netlink: 277 bytes leftover after parsing attributes in process `syz.6.11080'.
[  529.010079][T26016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  529.038627][T26024] loop6: detected capacity change from 0 to 1024
[  529.038910][T24609] EXT4-fs (loop3): unmounting filesystem.
[  529.045213][T26024] EXT4-fs: Ignoring removed bh option
[  529.063376][T26024] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal
[  529.073616][T26027] SELinux:  policydb version 0 does not match my version range 15-33
[  529.081590][T26027] SELinux: failed to load policy
[  529.118074][T26031] loop6: detected capacity change from 0 to 1024
[  529.130575][T26031] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  529.137053][T26034] syz.3.11086[26034] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  529.139381][T26034] syz.3.11086[26034] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  529.151206][T21337] EXT4-fs (loop6): unmounting filesystem.
[  529.224120][T26047] syz.6.11090[26047] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  529.224198][T26047] syz.6.11090[26047] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  529.288714][T26055] loop5: detected capacity change from 0 to 2048
[  529.319841][T26055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  529.342477][T25028] EXT4-fs (loop5): unmounting filesystem.
[  529.491469][T26073] loop5: detected capacity change from 0 to 40427
[  529.500465][T26073] F2FS-fs (loop5): Found nat_bits in checkpoint
[  529.547457][T26073] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  529.560812][T26076] bio_check_eod: 26191 callbacks suppressed
[  529.560828][T26076] f2fs_ckpt-7:5: attempt to access beyond end of device
[  529.560828][T26076] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  529.654084][T26088] loop6: detected capacity change from 0 to 512
[  529.660516][T26088] EXT4-fs: Ignoring removed orlov option
[  529.678241][T26088] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  529.687497][T26088] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  529.724075][T26088] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #19: comm syz.6.11109: corrupted inode contents
[  529.736175][T26088] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #19: comm syz.6.11109: mark_inode_dirty error
[  529.747638][T26088] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #19: comm syz.6.11109: corrupted inode contents
[  529.759628][T26088] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2954: inode #19: comm syz.6.11109: mark_inode_dirty error
[  529.771652][T26088] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2957: inode #19: comm syz.6.11109: mark inode dirty (error -117)
[  529.784248][T26088] EXT4-fs warning (device loop6): ext4_evict_inode:299: xattr delete (err -117)
[  529.804666][T21337] EXT4-fs (loop6): unmounting filesystem.
[  529.846084][T26092] loop5: detected capacity change from 0 to 40427
[  529.853054][T26092] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  529.860764][T26092] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  529.869661][T26092] F2FS-fs (loop5): invalid crc value
[  529.876195][T26092] F2FS-fs (loop5): Found nat_bits in checkpoint
[  529.919165][T26092] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  529.926097][T26092] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  530.030013][   T43] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  530.039220][   T43] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  530.092250][T26107] input input74: cannot allocate more than FF_MAX_EFFECTS effects
[  530.104414][T26105] loop2: detected capacity change from 0 to 2048
[  530.149349][T26113] loop6: detected capacity change from 0 to 512
[  530.156416][T26113] EXT4-fs warning (device loop6): ext4_multi_mount_protect:298: Invalid MMP block in superblock
[  530.168916][T26105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  530.190217][T25254] EXT4-fs (loop2): unmounting filesystem.
[  530.304386][T26126] loop6: detected capacity change from 0 to 8192
[  530.357265][T26126]  loop6: p1 < > p3 < > p4
[  530.361600][T26126] loop6: partition table partially beyond EOD, truncated
[  530.368551][T26126] loop6: p1 start 4294967040 is beyond EOD, truncated
[  530.375848][T26126] loop6: p4 size 50331776 extends beyond EOD, truncated
[  530.716655][ T2516] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  530.765799][T26175] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11144'.
[  530.797849][T26179] loop6: detected capacity change from 0 to 512
[  530.805681][T26179] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.11146: casefold flag without casefold feature
[  530.818434][T26179] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.11146: couldn't read orphan inode 15 (err -117)
[  530.830297][T26179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  530.842969][T26179] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.11146: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  530.864782][T21337] EXT4-fs (loop6): unmounting filesystem.
[  530.897744][ T2516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.909059][ T2516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.919936][ T2516] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  530.928929][ T2516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.939011][ T2516] usb 3-1: config 0 descriptor??
[  531.064925][T26187] loop6: detected capacity change from 0 to 40427
[  531.072603][T26187] F2FS-fs (loop6): invalid crc value
[  531.079650][T26187] F2FS-fs (loop6): Found nat_bits in checkpoint
[  531.129091][T26187] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  531.163520][T26187] syz.6.11149: attempt to access beyond end of device
[  531.163520][T26187] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  531.339387][T26225] loop5: detected capacity change from 0 to 256
[  531.345789][T26225] exfat: Deprecated parameter 'utf8'
[  531.351016][T26225] exfat: Deprecated parameter 'utf8'
[  531.356217][T26225] exfat: Deprecated parameter 'utf8'
[  531.357688][ T2516] hid-steam 0003:28DE:1142.007D: unknown main item tag 0x0
[  531.364037][T26225] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  531.368401][ T2516] hid-steam 0003:28DE:1142.007D: unknown main item tag 0x0
[  531.387710][ T2516] hid-steam 0003:28DE:1142.007D: unknown main item tag 0x0
[  531.394770][ T2516] hid-steam 0003:28DE:1142.007D: unknown main item tag 0x0
[  531.401979][ T2516] hid-steam 0003:28DE:1142.007D: unknown main item tag 0x0
[  531.411091][ T2516] hid-steam 0003:28DE:1142.007D: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  531.572451][T10397] usb 3-1: USB disconnect, device number 38
[  531.579155][T26233] loop5: detected capacity change from 0 to 40427
[  531.585833][T26233] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  531.593499][T26233] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  531.603879][T26233] F2FS-fs (loop5): Found nat_bits in checkpoint
[  531.638309][T26233] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  531.645167][T26233] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  531.783639][T26241] usb usb9: check_ctrlrecip: process 26241 (syz.5.11170) requesting ep 01 but needs 81
[  531.793404][T26241] usb usb9: usbfs: process 26241 (syz.5.11170) did not claim interface 0 before use
[  532.077444][T26252] loop5: detected capacity change from 0 to 256
[  532.083863][T26252] exfat: Deprecated parameter 'namecase'
[  532.089506][T26252] exfat: Deprecated parameter 'utf8'
[  532.094632][T26252] exfat: Deprecated parameter 'namecase'
[  532.100223][T26252] exfat: Deprecated parameter 'utf8'
[  532.108010][T26252] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  532.167814][T26266] loop5: detected capacity change from 0 to 256
[  532.257976][T26281] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  532.380081][T26298] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off.
[  532.398057][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  532.398103][   T28] audit: type=1400 audit(2134221135.868:3631): avc:  denied  { unmount } for  pid=24609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  532.407125][T26300] loop3: detected capacity change from 0 to 512
[  532.430336][T26300] EXT4-fs: Ignoring removed i_version option
[  532.436452][T26300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  532.450669][T26300] EXT4-fs (loop3): 1 truncate cleaned up
[  532.456296][T26300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  532.477312][T24609] EXT4-fs (loop3): unmounting filesystem.
[  532.526675][T10397] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  532.550278][T26295] loop2: detected capacity change from 0 to 40427
[  532.557371][T26295] F2FS-fs (loop2): fault_type options not supported
[  532.564723][T26295] F2FS-fs (loop2): invalid crc value
[  532.571008][T26295] F2FS-fs (loop2): Found nat_bits in checkpoint
[  532.615907][T26295] F2FS-fs (loop2): Start checkpoint disabled!
[  532.622641][T26295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  532.642881][   T28] audit: type=1400 audit(2134221136.108:3632): avc:  denied  { bind } for  pid=26306 comm="syz.3.11200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  532.716698][T10397] usb 6-1: Using ep0 maxpacket: 16
[  532.722745][T10397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.736072][T26317] loop2: detected capacity change from 0 to 128
[  532.742203][T10397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.752449][T10397] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  532.761564][T10397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.770526][T26317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  532.779862][T10397] usb 6-1: config 0 descriptor??
[  532.784919][T26317] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  532.828524][T25254] EXT4-fs (loop2): unmounting filesystem.
[  532.949648][T26324] loop3: detected capacity change from 0 to 40427
[  532.956501][T26324] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  532.963410][T26324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  532.972308][T26324] F2FS-fs (loop3): invalid crc value
[  532.978781][T26324] F2FS-fs (loop3): Found nat_bits in checkpoint
[  533.024266][T26324] F2FS-fs (loop3): Start checkpoint disabled!
[  533.031120][T26324] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  533.038385][T26324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  533.094415][   T28] audit: type=1400 audit(2134221136.558:3633): avc:  denied  { read } for  pid=26338 comm="syz.2.11213" name=".pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  533.117801][   T28] audit: type=1400 audit(2134221136.558:3634): avc:  denied  { open } for  pid=26338 comm="syz.2.11213" path="/91/file0/.pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  533.187728][  T610] kworker/u4:5: attempt to access beyond end of device
[  533.187728][  T610] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  533.203018][T10397] hid-multitouch 0003:1FD2:6007.007E: unknown main item tag 0x1
[  533.211026][   T28] audit: type=1400 audit(2134221136.678:3635): avc:  denied  { audit_write } for  pid=26346 comm="syz.2.11218" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  533.212143][T10397] hid-multitouch 0003:1FD2:6007.007E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  533.287696][T26353] loop2: detected capacity change from 0 to 512
[  533.294480][T26353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  533.307369][T26353] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  533.315145][T26353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  533.323077][T14102] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  533.328928][T14081] Bluetooth: hci0: command 0x1003 tx timeout
[  533.331300][T26353] System zones: 0-1, 15-15, 18-18, 34-34
[  533.341264][T26353] EXT4-fs (loop2): orphan cleanup on readonly fs
[  533.347868][T26353] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  533.358631][T26353] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  533.372996][T26353] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  533.379812][T26353] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.11221: bg 0: block 40: padding at end of block bitmap is not set
[  533.395390][T26353] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  533.405096][T26353] EXT4-fs (loop2): 1 truncate cleaned up
[  533.410647][T26353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  533.425393][   T28] audit: type=1400 audit(2134221136.898:3636): avc:  denied  { read } for  pid=26352 comm="syz.2.11221" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  533.448158][T26353] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.11221: bad symlink.
[  533.459485][T10395] usb 6-1: USB disconnect, device number 31
[  533.742866][   T28] audit: type=1400 audit(2134221137.208:3637): avc:  denied  { attach_queue } for  pid=26414 comm="syz.3.11248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  533.784973][T26423] loop6: detected capacity change from 0 to 128
[  533.794700][T26423] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.837469][T26427] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3
[  533.949407][T26418] loop0: detected capacity change from 0 to 40427
[  533.956258][T26418] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  533.964376][T26418] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  533.979249][T26418] F2FS-fs (loop0): invalid crc value
[  533.985468][T26443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11260'.
[  533.994599][T26443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11260'.
[  534.007765][T26418] F2FS-fs (loop0): Found nat_bits in checkpoint
[  534.044576][T26431] loop6: detected capacity change from 0 to 40427
[  534.051405][T26431] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  534.057783][T26418] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  534.060225][T26431] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  534.065894][T26418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  534.083558][T26431] F2FS-fs (loop6): Found nat_bits in checkpoint
[  534.091677][T26418] syz.0.11250: attempt to access beyond end of device
[  534.091677][T26418] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  534.123640][   T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  534.139610][   T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  534.141806][T26453] incfs: Can't find or create .index dir in ./file0
[  534.155024][   T28] audit: type=1400 audit(2134221137.609:3638): avc:  denied  { watch watch_reads } for  pid=26452 comm="syz.5.11262" path="/91/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  534.166553][   T43] kworker/u4:2: attempt to access beyond end of device
[  534.166553][   T43] loop0: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  534.178451][   T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  534.199411][T26453] incfs: mount failed -22
[  534.203851][T26431] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  534.216465][T26431] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  534.222255][   T28] audit: type=1400 audit(2134221137.609:3639): avc:  denied  { mounton } for  pid=26452 comm="syz.5.11262" path="/91/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  534.358150][T26461] xt_TCPMSS: Only works on TCP SYN packets
[  534.397675][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.402345][T21337] syz-executor: attempt to access beyond end of device
[  534.402345][T21337] loop6: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  534.411843][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.422549][T21337] syz-executor: attempt to access beyond end of device
[  534.422549][T21337] loop6: rw=2051, sector=57344, nr_sectors = 20480 limit=40427
[  534.434973][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  534.448435][T21337] syz-executor: attempt to access beyond end of device
[  534.448435][T21337] loop6: rw=2051, sector=81920, nr_sectors = 4096 limit=40427
[  534.459264][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  534.473925][T21337] F2FS-fs (loop6): Issue discard(6144, 6144, 512) failed, ret: -5
[  534.481796][T21337] F2FS-fs (loop6): Issue discard(7168, 7168, 2560) failed, ret: -5
[  534.482713][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.489521][T21337] F2FS-fs (loop6): Issue discard(10240, 10240, 512) failed, ret: -5
[  534.498298][   T24] usb 3-1: config 0 descriptor??
[  534.725451][T26489] loop5: detected capacity change from 0 to 512
[  534.745031][T26489] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.11277: corrupted inode contents
[  534.759893][T26489] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #16: comm syz.5.11277: mark_inode_dirty error
[  534.774287][T26489] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.11277: corrupted inode contents
[  534.774711][T26493] loop3: detected capacity change from 0 to 128
[  534.786455][T26489] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.11277: mark_inode_dirty error
[  534.803710][T26489] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.11277: corrupted inode contents
[  534.815963][T26489] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  534.836068][   T43] kworker/u4:2: attempt to access beyond end of device
[  534.836068][   T43] loop3: rw=1, sector=145, nr_sectors = 97 limit=128
[  534.836480][T26489] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.11277: corrupted inode contents
[  534.866586][T26489] EXT4-fs error (device loop5): ext4_truncate:4313: inode #16: comm syz.5.11277: mark_inode_dirty error
[  534.878029][T26489] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  534.890426][T26489] EXT4-fs (loop5): 1 truncate cleaned up
[  534.896393][T26489] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  534.926568][   T43] EXT4-fs error (device loop5): ext4_release_dquot:6811: comm kworker/u4:2: Failed to release dquot type 1
[  534.939303][   T24] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0
[  534.956584][   T24] plantronics 0003:047F:FFFF.007F: No inputs registered, leaving
[  534.965484][   T24] plantronics 0003:047F:FFFF.007F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  535.209638][T26533] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  535.247127][   T60] usb 3-1: USB disconnect, device number 39
[  535.292139][T26549] loop5: detected capacity change from 0 to 512
[  535.318665][T26549] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  535.499049][T26581] loop5: detected capacity change from 0 to 512
[  535.508969][T26581] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  535.801569][T26597] loop2: detected capacity change from 0 to 256
[  535.969464][T26603] loop2: detected capacity change from 0 to 40427
[  535.976278][T26603] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  535.983837][T26603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  535.992734][T26603] F2FS-fs (loop2): invalid crc value
[  535.999413][T26603] F2FS-fs (loop2): Found nat_bits in checkpoint
[  536.033703][T26603] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  536.041029][T26603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  536.706454][T26649] loop5: detected capacity change from 0 to 40427
[  536.715484][T26649] F2FS-fs (loop5): Found nat_bits in checkpoint
[  536.749869][T26649] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  536.782574][T25028] syz-executor: attempt to access beyond end of device
[  536.782574][T25028] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  536.889715][T26655] loop5: detected capacity change from 0 to 2048
[  536.911431][T26655] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  536.934605][T26661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11348'.
[  537.261186][T26674] netlink: 'syz.2.11354': attribute type 10 has an invalid length.
[  537.628878][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  537.628896][   T28] audit: type=1400 audit(2134221141.099:3644): avc:  denied  { shutdown } for  pid=26694 comm="syz.0.11363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  537.673479][T26699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11365'.
[  537.850210][T26705] loop0: detected capacity change from 0 to 40427
[  537.856953][T26705] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  537.864495][T26705] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  537.874938][T26705] F2FS-fs (loop0): Found nat_bits in checkpoint
[  537.910364][T26705] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  537.917345][T26705] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  537.946307][T26705] syz.0.11368: attempt to access beyond end of device
[  537.946307][T26705] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  537.971472][T26705] syz.0.11368: attempt to access beyond end of device
[  537.971472][T26705] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  538.009329][T14485] syz-executor: attempt to access beyond end of device
[  538.009329][T14485] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  538.251902][T26730] loop2: detected capacity change from 0 to 256
[  538.252292][T26729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11377'.
[  538.258355][T26730] exfat: Deprecated parameter 'utf8'
[  538.272150][T26730] exfat: Deprecated parameter 'namecase'
[  538.278282][T26730] exfat: Deprecated parameter 'utf8'
[  538.286152][T26730] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  538.307864][T26730] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  538.317358][T10395] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  538.325050][T26730] exFAT-fs (loop2): hint_cluster is invalid (1)
[  538.331603][T26730] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000)
[  538.340206][T26730] exFAT-fs (loop2): error, failed to bmap (inode : ffff888117f86e30 iblock : 9, err : -5)
[  538.350125][T26730] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  538.357484][T26730] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  538.359775][T26739] loop3: detected capacity change from 0 to 512
[  538.377425][T26739] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  538.446332][   T43] kworker/u4:2: attempt to access beyond end of device
[  538.446332][   T43] loop2: rw=1, sector=34359738488, nr_sectors = 8 limit=256
[  538.496841][T26753] netlink: 165 bytes leftover after parsing attributes in process `syz.3.11387'.
[  538.505972][T10395] usb 6-1: Using ep0 maxpacket: 16
[  538.507392][T26755] loop2: detected capacity change from 0 to 2048
[  538.512049][T10395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.537975][T10395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.547730][T10395] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  538.556741][T10395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.567115][T10395] usb 6-1: config 0 descriptor??
[  538.573203][   T28] audit: type=1400 audit(2134221142.039:3645): avc:  denied  { execute } for  pid=26754 comm="syz.2.11388" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  538.598396][   T28] audit: type=1400 audit(2134221142.039:3646): avc:  denied  { execute_no_trans } for  pid=26754 comm="syz.2.11388" path="/132/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  538.598998][    T8] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  538.637931][    T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  538.650090][    T8] EXT4-fs (loop2): This should not happen!! Data will be lost
[  538.650090][    T8] 
[  538.659937][    T8] EXT4-fs (loop2): Total free blocks count 0
[  538.665746][    T8] EXT4-fs (loop2): Free/Dirty block details
[  538.671547][    T8] EXT4-fs (loop2): free_blocks=2415919104
[  538.677728][    T8] EXT4-fs (loop2): dirty_blocks=16
[  538.682971][    T8] EXT4-fs (loop2): Block reservation details
[  538.688974][    T8] EXT4-fs (loop2): i_reserved_data_blocks=1
[  538.709530][T26765] loop2: detected capacity change from 0 to 1024
[  538.716268][T26765] EXT4-fs: Ignoring removed i_version option
[  538.722857][T26765] EXT4-fs (loop2): Test dummy encryption mode enabled
[  538.990365][T26782] loop6: detected capacity change from 0 to 512
[  538.999201][T10395] appleir 0003:05AC:8241.0080: unknown main item tag 0x0
[  539.006788][T10395] appleir 0003:05AC:8241.0080: unknown main item tag 0x0
[  539.013758][T10395] appleir 0003:05AC:8241.0080: unknown main item tag 0x0
[  539.021270][T10395] appleir 0003:05AC:8241.0080: unknown main item tag 0x0
[  539.028290][T10395] appleir 0003:05AC:8241.0080: unknown main item tag 0x0
[  539.035532][T10395] appleir 0003:05AC:8241.0080: No inputs registered, leaving
[  539.044635][T26782] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.056710][T10395] appleir 0003:05AC:8241.0080: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0
[  539.070917][T26782] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.11398: corrupted inode contents
[  539.084239][T26782] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #2: comm syz.6.11398: mark_inode_dirty error
[  539.096254][T26782] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.11398: corrupted inode contents
[  539.109576][T26782] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.11398: corrupted inode contents
[  539.121767][T26782] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #2: comm syz.6.11398: mark_inode_dirty error
[  539.133406][T26782] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.11398: corrupted inode contents
[  539.145538][T26782] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.11398: mark_inode_dirty error
[  539.157533][T26782] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.11398: corrupted inode contents
[  539.169725][T26782] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #2: comm syz.6.11398: mark_inode_dirty error
[  539.182580][T26782] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.11398: corrupted inode contents
[  539.224739][T26786] loop6: detected capacity change from 0 to 256
[  539.234577][T26786] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  539.286921][T10395] usb 6-1: USB disconnect, device number 32
[  539.318869][T26794] loop6: detected capacity change from 0 to 512
[  539.325632][T26794] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  539.337977][T26794] EXT4-fs (loop6): 1 truncate cleaned up
[  539.388292][T26799] loop6: detected capacity change from 0 to 1024
[  539.396863][T26799] EXT4-fs: Ignoring removed i_version option
[  539.404055][T26799] EXT4-fs (loop6): Test dummy encryption mode enabled
[  539.457207][T26809] loop2: detected capacity change from 0 to 512
[  539.476958][T26809] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  539.489733][T26809] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  539.511356][T26809] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.11409: Corrupt directory, running e2fsck is recommended
[  539.516572][T26820] loop3: detected capacity change from 0 to 256
[  539.530391][T26809] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  539.546373][T26809] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.11409: corrupted in-inode xattr
[  539.566025][T26809] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.11409: couldn't read orphan inode 15 (err -117)
[  539.598211][T26809] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  539.613047][T26809] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  539.623484][T26809] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.11409: Corrupt directory, running e2fsck is recommended
[  539.736507][T26846] syz.0.11425[26846] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.736592][T26846] syz.0.11425[26846] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  539.775456][T26854] loop0: detected capacity change from 0 to 256
[  539.793083][   T28] audit: type=1400 audit(2134221143.259:3647): avc:  denied  { map } for  pid=26851 comm="syz.3.11431" path="socket:[120544]" dev="sockfs" ino=120544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  539.820576][T26854] FAT-fs (loop0): Directory bread(block 64) failed
[  539.828204][T26854] FAT-fs (loop0): Directory bread(block 65) failed
[  539.836348][   T28] audit: type=1400 audit(2134221143.259:3648): avc:  denied  { read accept } for  pid=26851 comm="syz.3.11431" path="socket:[120544]" dev="sockfs" ino=120544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  539.855810][T26854] FAT-fs (loop0): Directory bread(block 66) failed
[  539.867702][T26854] FAT-fs (loop0): Directory bread(block 67) failed
[  539.877096][T26854] FAT-fs (loop0): Directory bread(block 68) failed
[  539.883587][T26854] FAT-fs (loop0): Directory bread(block 69) failed
[  539.892574][T26854] FAT-fs (loop0): Directory bread(block 70) failed
[  539.899945][T26854] FAT-fs (loop0): Directory bread(block 71) failed
[  539.908158][T26854] FAT-fs (loop0): Directory bread(block 72) failed
[  539.915358][T26854] FAT-fs (loop0): Directory bread(block 73) failed
[  539.934578][   T28] audit: type=1400 audit(2134221143.399:3649): avc:  denied  { setopt } for  pid=26863 comm="syz.2.11436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  540.020998][T26874] xt_hashlimit: size too large, truncated to 1048576
[  540.112663][T26878] loop3: detected capacity change from 0 to 512
[  540.136443][T26878] EXT4-fs: Mount option(s) incompatible with ext3
[  540.587186][T26899] loop5: detected capacity change from 0 to 512
[  540.593887][T26899] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  540.626299][T26899] EXT4-fs (loop5): 1 truncate cleaned up
[  540.639372][   T28] audit: type=1400 audit(2134221144.109:3650): avc:  denied  { rename } for  pid=26898 comm="syz.5.11450" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  540.639521][T26899] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.11450: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  540.662244][   T28] audit: type=1400 audit(2134221144.109:3651): avc:  denied  { reparent } for  pid=26898 comm="syz.5.11450" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  540.708735][T26908] ==================================================================
[  540.716639][T26908] BUG: KASAN: use-after-free in dev_map_generic_redirect+0x9f/0x7d0
[  540.724451][T26908] Read of size 8 at addr ffff88812a5c7380 by task syz.0.11452/26908
[  540.732259][T26908] 
[  540.734437][T26908] CPU: 1 PID: 26908 Comm: syz.0.11452 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0
[  540.744238][T26908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  540.753610][T26912] loop6: detected capacity change from 0 to 128
[  540.754127][T26908] Call Trace:
[  540.754137][T26908]  <TASK>
[  540.763106][T26912] ext4 filesystem being mounted at /550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  540.763327][T26908]  dump_stack_lvl+0x151/0x1b7
[  540.802502][T26908]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  540.807794][T26908]  ? _printk+0xd1/0x111
[  540.811795][T26908]  ? __virt_addr_valid+0x242/0x2f0
[  540.816737][T26908]  print_report+0x158/0x4e0
[  540.821066][T26908]  ? __virt_addr_valid+0x242/0x2f0
[  540.826017][T26908]  ? kasan_complete_mode_report_info+0x90/0x1b0
[  540.832092][T26908]  ? dev_map_generic_redirect+0x9f/0x7d0
[  540.837563][T26908]  kasan_report+0x13c/0x170
[  540.841897][T26908]  ? dev_map_generic_redirect+0x9f/0x7d0
[  540.847368][T26908]  __asan_report_load8_noabort+0x14/0x20
[  540.852833][T26908]  dev_map_generic_redirect+0x9f/0x7d0
[  540.858130][T26908]  ? kasan_quarantine_put+0x34/0x1a0
[  540.863250][T26908]  ? kfree+0x7a/0xf0
[  540.866987][T26908]  ? bq_enqueue+0x3e0/0x3e0
[  540.871323][T26908]  ? bpf_prog_run_generic_xdp+0xa35/0x1200
[  540.876979][T26908]  xdp_do_generic_redirect+0x42e/0xb40
[  540.882261][T26908]  do_xdp_generic+0x53e/0x800
[  540.886772][T26908]  ? generic_xdp_tx+0x560/0x560
[  540.891460][T26908]  ? tun_get_user+0x2340/0x3a90
[  540.896143][T26908]  tun_get_user+0x238a/0x3a90
[  540.900659][T26908]  ? avc_has_perm_noaudit+0x430/0x430
[  540.905868][T26908]  ? tun_do_read+0x2000/0x2000
[  540.910463][T26908]  ? ref_tracker_alloc+0x31d/0x450
[  540.915540][T26908]  ? file_has_perm+0x508/0x6c0
[  540.920140][T26908]  ? ref_tracker_dir_print+0x160/0x160
[  540.925439][T26908]  ? futex_wait_setup+0x330/0x330
[  540.930298][T26908]  ? tun_get+0xe9/0x120
[  540.934286][T26908]  tun_chr_write_iter+0x129/0x210
[  540.939161][T26908]  vfs_write+0xaf6/0xed0
[  540.943231][T26908]  ? file_end_write+0x1c0/0x1c0
[  540.947916][T26908]  ? do_futex+0x55a/0x9a0
[  540.952087][T26908]  ? __fget_files+0x2cb/0x330
[  540.956607][T26908]  ? __fdget_pos+0x204/0x390
[  540.961018][T26908]  ? ksys_write+0x77/0x2c0
[  540.965281][T26908]  ksys_write+0x199/0x2c0
[  540.969442][T26908]  ? __this_cpu_preempt_check+0x13/0x20
[  540.974821][T26908]  ? xfd_validate_state+0x6f/0x170
[  540.979772][T26908]  ? __ia32_sys_read+0x90/0x90
[  540.984499][T26908]  ? fpregs_restore_userregs+0x130/0x290
[  540.989959][T26908]  __x64_sys_write+0x7b/0x90
[  540.994419][T26908]  x64_sys_call+0x2f/0x9a0
[  540.998638][T26908]  do_syscall_64+0x3b/0xb0
[  541.002888][T26908]  ? clear_bhb_loop+0x55/0xb0
[  541.007404][T26908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.013133][T26908] RIP: 0033:0x7f9c6d1847cf
[  541.017402][T26908] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  541.036915][T26908] RSP: 002b:00007f9c6e034000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  541.045159][T26908] RAX: ffffffffffffffda RBX: 00007f9c6d375fa0 RCX: 00007f9c6d1847cf
[  541.052969][T26908] RDX: 0000000000000d41 RSI: 0000000020002a00 RDI: 00000000000000c8
[  541.060780][T26908] RBP: 00007f9c6d201a20 R08: 0000000000000000 R09: 0000000000000000
[  541.068593][T26908] R10: 0000000000000d41 R11: 0000000000000293 R12: 0000000000000000
[  541.076401][T26908] R13: 0000000000000000 R14: 00007f9c6d375fa0 R15: 00007fff848a9258
[  541.084219][T26908]  </TASK>
[  541.087106][T26908] 
[  541.089246][T26908] Allocated by task 25028:
[  541.093676][T26908]  kasan_set_track+0x4b/0x70
[  541.098100][T26908]  kasan_save_alloc_info+0x1f/0x30
[  541.103046][T26908]  __kasan_kmalloc+0x9c/0xb0
[  541.107473][T26908]  __kmalloc_node+0xb4/0x1e0
[  541.111899][T26908]  kvmalloc_node+0x221/0x640
[  541.116326][T26908]  alloc_fdtable+0x163/0x2a0
[  541.120755][T26908]  dup_fd+0x6a6/0x950
[  541.124573][T26908]  copy_files+0x76/0xe0
[  541.128565][T26908]  copy_process+0x11e9/0x3530
[  541.133076][T26908]  kernel_clone+0x229/0x890
[  541.137419][T26908]  __x64_sys_clone+0x231/0x280
[  541.142019][T26908]  x64_sys_call+0x1b0/0x9a0
[  541.146359][T26908]  do_syscall_64+0x3b/0xb0
[  541.150610][T26908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.156346][T26908] 
[  541.158516][T26908] Freed by task 26456:
[  541.162416][T26908]  kasan_set_track+0x4b/0x70
[  541.166843][T26908]  kasan_save_free_info+0x2b/0x40
[  541.171702][T26908]  ____kasan_slab_free+0x131/0x180
[  541.176650][T26908]  __kasan_slab_free+0x11/0x20
[  541.181271][T26908]  __kmem_cache_free+0x21d/0x410
[  541.186021][T26908]  kfree+0x7a/0xf0
[  541.189579][T26908]  kvfree+0x35/0x40
[  541.193224][T26908]  put_files_struct+0x2a8/0x320
[  541.197914][T26908]  exit_files+0x80/0xa0
[  541.201904][T26908]  do_exit+0xb9e/0x2b80
[  541.205898][T26908]  do_group_exit+0x21a/0x2d0
[  541.210323][T26908]  get_signal+0x169d/0x1820
[  541.214663][T26908]  arch_do_signal_or_restart+0xb0/0x16f0
[  541.220220][T26908]  exit_to_user_mode_loop+0x74/0xa0
[  541.225253][T26908]  exit_to_user_mode_prepare+0x5a/0xa0
[  541.230547][T26908]  syscall_exit_to_user_mode+0x26/0x130
[  541.235930][T26908]  do_syscall_64+0x47/0xb0
[  541.240183][T26908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.245999][T26908] 
[  541.248166][T26908] Last potentially related work creation:
[  541.253724][T26908]  kasan_save_stack+0x3b/0x60
[  541.258235][T26908]  __kasan_record_aux_stack+0xb4/0xc0
[  541.263442][T26908]  kasan_record_aux_stack_noalloc+0xb/0x10
[  541.269085][T26908]  kvfree_call_rcu+0x9f/0x800
[  541.273596][T26908]  trie_update_elem+0x7f6/0xc10
[  541.278283][T26908]  bpf_map_update_value+0x23a/0x410
[  541.283411][T26908]  generic_map_update_batch+0x595/0x8c0
[  541.288787][T26908]  bpf_map_do_batch+0x4cc/0x630
[  541.293471][T26908]  __sys_bpf+0x66b/0x7f0
[  541.297552][T26908]  __x64_sys_bpf+0x7c/0x90
[  541.301803][T26908]  x64_sys_call+0x87f/0x9a0
[  541.306143][T26908]  do_syscall_64+0x3b/0xb0
[  541.310395][T26908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.316127][T26908] 
[  541.318295][T26908] Second to last potentially related work creation:
[  541.324718][T26908]  kasan_save_stack+0x3b/0x60
[  541.329231][T26908]  __kasan_record_aux_stack+0xb4/0xc0
[  541.334438][T26908]  kasan_record_aux_stack_noalloc+0xb/0x10
[  541.340079][T26908]  kvfree_call_rcu+0x9f/0x800
[  541.344593][T26908]  kernfs_unlink_open_file+0x327/0x3d0
[  541.349888][T26908]  kernfs_fop_release+0x253/0x310
[  541.354749][T26908]  __fput+0x1e5/0x870
[  541.358574][T26908]  ____fput+0x15/0x20
[  541.362385][T26908]  task_work_run+0x24d/0x2e0
[  541.366812][T26908]  exit_to_user_mode_loop+0x94/0xa0
[  541.371847][T26908]  exit_to_user_mode_prepare+0x5a/0xa0
[  541.377145][T26908]  syscall_exit_to_user_mode+0x26/0x130
[  541.382522][T26908]  do_syscall_64+0x47/0xb0
[  541.386774][T26908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.392502][T26908] 
[  541.394672][T26908] The buggy address belongs to the object at ffff88812a5c7380
[  541.394672][T26908]  which belongs to the cache kmalloc-96 of size 96
[  541.408388][T26908] The buggy address is located 0 bytes inside of
[  541.408388][T26908]  96-byte region [ffff88812a5c7380, ffff88812a5c73e0)
[  541.421232][T26908] 
[  541.423402][T26908] The buggy address belongs to the physical page:
[  541.429655][T26908] page:ffffea0004a971c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a5c7
[  541.439720][T26908] flags: 0x4000000000000200(slab|zone=1)
[  541.445198][T26908] raw: 4000000000000200 ffffea00044db400 dead000000000004 ffff888100042900
[  541.453613][T26908] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[  541.462027][T26908] page dumped because: kasan: bad access detected
[  541.468285][T26908] page_owner tracks the page as allocated
[  541.473830][T26908] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 355, tgid 355 (kworker/1:3), ts 342521944760, free_ts 342519038446
[  541.493280][T26908]  post_alloc_hook+0x213/0x220
[  541.497872][T26908]  prep_new_page+0x1b/0x110
[  541.502221][T26908]  get_page_from_freelist+0x2980/0x2a10
[  541.507595][T26908]  __alloc_pages+0x234/0x610
[  541.512021][T26908]  alloc_slab_page+0x6c/0xf0
[  541.516445][T26908]  new_slab+0x90/0x3e0
[  541.520352][T26908]  ___slab_alloc+0x6f9/0xb80
[  541.524778][T26908]  __slab_alloc+0x5d/0xa0
[  541.528946][T26908]  __kmem_cache_alloc_node+0x207/0x2a0
[  541.534237][T26908]  kmalloc_trace+0x2a/0xa0
[  541.538499][T26908]  dst_cow_metrics_generic+0x55/0x1c0
[  541.543725][T26908]  icmp6_dst_alloc+0x363/0x510
[  541.548298][T26908]  ndisc_send_skb+0x28b/0xdc0
[  541.552811][T26908]  ndisc_send_ns+0xc8/0x150
[  541.557151][T26908]  addrconf_dad_work+0xb1b/0x16b0
[  541.562012][T26908]  process_one_work+0x73d/0xcb0
[  541.566700][T26908] page last free stack trace:
[  541.571214][T26908]  free_unref_page_prepare+0x83d/0x850
[  541.576505][T26908]  free_unref_page+0xb2/0x5c0
[  541.581018][T26908]  __free_pages+0x61/0xf0
[  541.585184][T26908]  __free_slab+0xce/0x1a0
[  541.589360][T26908]  __unfreeze_partials+0x165/0x1a0
[  541.594297][T26908]  put_cpu_partial+0xa9/0x100
[  541.598814][T26908]  __slab_free+0x1c8/0x280
[  541.603238][T26908]  ___cache_free+0xc6/0xd0
[  541.607493][T26908]  qlist_free_all+0xc5/0x140
[  541.612035][T26908]  kasan_quarantine_reduce+0x15a/0x180
[  541.617327][T26908]  __kasan_slab_alloc+0x24/0x80
[  541.622013][T26908]  slab_post_alloc_hook+0x53/0x2c0
[  541.626961][T26908]  kmem_cache_alloc_node+0x188/0x330
[  541.632081][T26908]  __alloc_skb+0xcc/0x2d0
[  541.636248][T26908]  alloc_skb_with_frags+0xa6/0x680
[  541.641194][T26908]  sock_alloc_send_pskb+0x915/0xa50
[  541.646234][T26908] 
[  541.648399][T26908] Memory state around the buggy address:
[  541.653871][T26908]  ffff88812a5c7280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  541.661768][T26908]  ffff88812a5c7300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  541.669666][T26908] >ffff88812a5c7380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  541.677570][T26908]                    ^
[  541.681601][T26908]  ffff88812a5c7400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  541.689478][T26908]  ffff88812a5c7480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  541.697368][T26908] ==================================================================
[  541.705350][T26908] Disabling lock debugging due to kernel taint