last executing test programs:

47.602379404s ago: executing program 3 (id=385):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

47.546163465s ago: executing program 3 (id=388):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)

47.467620056s ago: executing program 3 (id=392):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10)
bind$can_raw(r2, &(0x7f0000000080), 0x10)

47.381966657s ago: executing program 3 (id=398):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

47.263671789s ago: executing program 3 (id=404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58)
close(r2)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

46.972589543s ago: executing program 3 (id=411):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
stat(&(0x7f0000000280)='./file0\x00', 0x0)

46.972241793s ago: executing program 32 (id=411):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
stat(&(0x7f0000000280)='./file0\x00', 0x0)

46.438100121s ago: executing program 2 (id=422):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3000000000975ece494e857638ddd31d8b58c6f8c5f7e48f6dc0a4f9658c3a0041ef168c8172f82c7e7caed2"], 0x54}}, 0x0)

46.197283685s ago: executing program 2 (id=435):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

46.132772896s ago: executing program 2 (id=439):
r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x39b}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

46.031966888s ago: executing program 2 (id=442):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

45.86813808s ago: executing program 2 (id=445):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)

45.565651025s ago: executing program 2 (id=446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

45.518468846s ago: executing program 33 (id=446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

19.294440212s ago: executing program 4 (id=1157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20)

19.294215392s ago: executing program 4 (id=1158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x3, &(0x7f0000000600)=[{0x2d}, {0x2}, {0x6}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

19.169914054s ago: executing program 4 (id=1161):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0)
add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r0)

19.169343834s ago: executing program 4 (id=1164):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x3, 0x11f4, &(0x7f0000001280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

19.071050946s ago: executing program 4 (id=1168):
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000c4}, 0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigpending(0x0, 0x0)
semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0)

18.826443929s ago: executing program 4 (id=1175):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

18.826296779s ago: executing program 34 (id=1175):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

16.446721406s ago: executing program 0 (id=1245):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
sigaltstack(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,errerrors=remount-rs,errors=continue,\x00'/70], 0x1, 0x2f8, &(0x7f0000000680)="$eJzs3TFra2UYB/C38Ta9VO69mQRdfNFFl0OtX8AgLRQDSm1EHYRTeqohMSk5AZPi0N3F2dGxOLoJ4hfoB3B36yKdCoJHmsQ2rS1qb9O09PeD8D7Jn4TnJZzDsxzew4+//bK5nSfbaS+U3omhFEIoHYdQGVYjcxPrXCiHSXvhzV+//+6bDz/59L1qrbayHuNqdePt5Rjj01d//urrH177pffiRz8+/WkhHFQ+O/x9+beDlw5ePvxz44tGHht5bHd6MY3zodNLN1tZ3GrkzSTGD1pZmmex0c6z7km+2Rnn263Ozs4gpu2tJ4s73SzPY9oexGY2iL1O7HUHMf08bbRjkiTxyWLg39T319fT6qy74Ab8URTFFVG3W03nwuOw8I+kvj/1vgCAO+f/zP+la8z/lfAf5v/T+d78f7vM/w/ByfxfHl+/55n/AQAAAAAAAAAAAADgPjguimdFUTz7e734mnV/TJf//2GbeHDvcQhHe/16vz5aR/nqWm1lKQ5Vzr511O/XXzjN3xrl8Xw+HxbH+fKleTm88fooP8nefb92IV8IW9PfPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMJfHUpef7J8nFfH6cj96trtVWli493/9ReOXRrW4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK4tH+w201Yr616/CKEYOvuk/Hw/eMPF3t1oQ3FlUQ4h3IE2FJPFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPvODv2edScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMUj7YbaatVtadYjHrPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwnfwUAAP//6KbT4w==")
semget$private(0x0, 0x6, 0x0)

16.385856517s ago: executing program 0 (id=1254):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="380100001000130780ffffff00000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0)

16.370120657s ago: executing program 0 (id=1258):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20)

16.319687598s ago: executing program 0 (id=1261):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x3, 0x11f4, &(0x7f0000001280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

16.15903547s ago: executing program 0 (id=1277):
r0 = socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a75, 0x100, 0x2, 0x333}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0x6c, 0x0)

15.926296944s ago: executing program 0 (id=1278):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

15.926097354s ago: executing program 35 (id=1278):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.256673621s ago: executing program 6 (id=1926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffff7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.166432342s ago: executing program 6 (id=1928):
r0 = io_uring_setup(0xc34, &(0x7f0000000240)={0x0, 0x269d, 0x0, 0x2})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000800)="28d4b4", 0x3, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
close_range(r0, 0xffffffffffffffff, 0x0)

1.066193994s ago: executing program 5 (id=1932):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000eea000000000000000f0000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)

1.044278264s ago: executing program 5 (id=1936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x71d332ae74d5342f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x52}, 0x0)

958.494265ms ago: executing program 5 (id=1938):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340))
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)

947.496906ms ago: executing program 5 (id=1940):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000000}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)

944.416196ms ago: executing program 1 (id=1941):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

834.482387ms ago: executing program 5 (id=1942):
syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

630.43407ms ago: executing program 1 (id=1946):
r0 = epoll_create1(0x0)
r1 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x60002011})

628.12433ms ago: executing program 5 (id=1957):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
listen(r1, 0x1)
accept4(r1, 0x0, 0x0, 0x0)

585.617891ms ago: executing program 7 (id=1949):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10)
get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0))

537.999962ms ago: executing program 1 (id=1950):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
socket$vsock_stream(0x28, 0x1, 0x0)
creat(&(0x7f0000000200)='./file2\x00', 0x20)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

528.169842ms ago: executing program 8 (id=1951):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b})
sendmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000010c0)="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", 0x601}], 0x1, 0x0, 0x1238}}], 0x1, 0x801)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001580)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x1000)

475.783933ms ago: executing program 7 (id=1953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

475.418473ms ago: executing program 7 (id=1954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

398.364304ms ago: executing program 8 (id=1955):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/210, 0xd2}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)

386.364145ms ago: executing program 1 (id=1956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0f, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10)
close_range(r2, r3, 0x0)

366.036495ms ago: executing program 7 (id=1958):
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

360.322235ms ago: executing program 8 (id=1959):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffff7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

329.058885ms ago: executing program 6 (id=1960):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

324.162895ms ago: executing program 1 (id=1970):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

282.382956ms ago: executing program 8 (id=1971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0f, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10)
close_range(r2, r3, 0x0)

273.579176ms ago: executing program 6 (id=1961):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1)
renameat2(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

262.211946ms ago: executing program 8 (id=1962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0)
close_range(r2, r3, 0x200000000000000)

165.061137ms ago: executing program 6 (id=1963):
r0 = epoll_create1(0x0)
r1 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x60002011})

164.545148ms ago: executing program 1 (id=1975):
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

164.091428ms ago: executing program 8 (id=1976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

163.545188ms ago: executing program 7 (id=1977):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r1, 0x0)

176.461µs ago: executing program 6 (id=1964):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fallocate(r0, 0x0, 0x1, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))

0s ago: executing program 7 (id=1965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000eea000000000000000f0000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)

kernel console output (not intermixed with test programs):

.272042][ T4624] FAT-fs (loop1): bogus sectors per cluster 0
[   53.278294][ T4624] FAT-fs (loop1): Can't find a valid FAT filesystem
[   53.293044][ T4632] loop4: detected capacity change from 0 to 256
[   53.300653][ T4636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.316083][ T4632] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   53.326001][ T4533] 8021q: adding VLAN 0 to HW filter on device team0
[   53.346252][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.456'.
[   53.356745][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.363887][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.380117][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.387241][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.413674][ T4636] vlan2: entered promiscuous mode
[   53.418875][ T4636] gretap0: entered promiscuous mode
[   53.467720][ T4648] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   53.518334][   T29] audit: type=1326 audit(1744558096.723:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.541735][   T29] audit: type=1326 audit(1744558096.723:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.565108][   T29] audit: type=1326 audit(1744558096.733:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.588631][   T29] audit: type=1326 audit(1744558096.733:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.612024][   T29] audit: type=1326 audit(1744558096.733:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.648335][   T29] audit: type=1326 audit(1744558096.733:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.671756][   T29] audit: type=1326 audit(1744558096.733:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.695153][   T29] audit: type=1326 audit(1744558096.733:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   53.784254][ T4533] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.801499][ T4676] loop5: detected capacity change from 0 to 764
[   53.808614][ T4626] chnl_net:caif_netlink_parms(): no params data found
[   53.993297][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.000545][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.009993][ T4626] bridge_slave_0: entered allmulticast mode
[   54.017168][ T4626] bridge_slave_0: entered promiscuous mode
[   54.026668][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.033847][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.042223][ T4626] bridge_slave_1: entered allmulticast mode
[   54.049413][ T4626] bridge_slave_1: entered promiscuous mode
[   54.066331][ T4709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'.
[   54.075346][ T4709] netlink: 108 bytes leftover after parsing attributes in process `syz.4.468'.
[   54.085384][ T4709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'.
[   54.094969][ T4709] netlink: 108 bytes leftover after parsing attributes in process `syz.4.468'.
[   54.104011][ T4709] netlink: 84 bytes leftover after parsing attributes in process `syz.4.468'.
[   54.134900][ T4626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.158703][ T4716] loop4: detected capacity change from 0 to 256
[   54.169913][ T4626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.178174][ T4716] FAT-fs (loop4): bogus sectors per cluster 0
[   54.185320][ T4716] FAT-fs (loop4): Can't find a valid FAT filesystem
[   54.229504][ T4626] team0: Port device team_slave_0 added
[   54.256511][ T4626] team0: Port device team_slave_1 added
[   54.283397][ T4533] veth0_vlan: entered promiscuous mode
[   54.308601][ T4626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.315607][ T4626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.341691][ T4626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.354305][ T4626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.361424][ T4626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.387554][ T4626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.410185][ T4729] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   54.459631][ T4736] loop1: detected capacity change from 0 to 764
[   54.469651][ T4533] veth1_vlan: entered promiscuous mode
[   54.490559][ T4626] hsr_slave_0: entered promiscuous mode
[   54.497456][ T4626] hsr_slave_1: entered promiscuous mode
[   54.503275][ T4626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.511650][ T4626] Cannot create hsr debugfs directory
[   54.539027][ T4533] veth0_macvtap: entered promiscuous mode
[   54.576119][ T4746] loop5: detected capacity change from 0 to 512
[   54.583994][ T4746] EXT4-fs (loop5): orphan cleanup on readonly fs
[   54.591049][ T4533] veth1_macvtap: entered promiscuous mode
[   54.604240][ T4746] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.481: bg 0: block 248: padding at end of block bitmap is not set
[   54.606776][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.628968][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.638829][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.649326][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.659183][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.669680][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.679532][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.690016][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.699990][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.705990][ T4746] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.481: Failed to acquire dquot type 1
[   54.710428][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.732812][ T4533] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.744068][ T4746] EXT4-fs (loop5): 1 truncate cleaned up
[   54.755521][ T4746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   54.769346][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.779904][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.789783][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.800338][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.802153][ T4746] syz.5.481 (4746) used greatest stack depth: 9208 bytes left
[   54.810146][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.810164][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.810177][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.810192][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.810211][ T4533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.810226][ T4533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.811072][ T4533] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.899128][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.934592][ T4533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.943447][ T4533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.952262][ T4533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.961057][ T4533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.020249][ T4626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.061697][ T4626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.107802][ T4626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.181301][ T4626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.247539][ T4790] serio: Serial port ptm0
[   55.273581][ T4626] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.283433][ T4626] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.292693][ T4626] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.302051][ T4626] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.346234][ T4799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.497'.
[   55.355338][ T4799] netlink: 108 bytes leftover after parsing attributes in process `syz.6.497'.
[   55.368505][ T4799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.497'.
[   55.378221][ T4799] netlink: 108 bytes leftover after parsing attributes in process `syz.6.497'.
[   55.387461][ T4799] netlink: 84 bytes leftover after parsing attributes in process `syz.6.497'.
[   55.412113][ T4803] loop4: detected capacity change from 0 to 512
[   55.421527][ T4626] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.435922][ T4803] EXT4-fs (loop4): orphan cleanup on readonly fs
[   55.449344][ T4803] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.500: bg 0: block 248: padding at end of block bitmap is not set
[   55.450276][ T4626] 8021q: adding VLAN 0 to HW filter on device team0
[   55.473037][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.480296][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.491952][ T4803] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.500: Failed to acquire dquot type 1
[   55.527317][ T4803] EXT4-fs (loop4): 1 truncate cleaned up
[   55.537155][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.555681][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.562814][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.615659][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.626777][ T4816] syz.6.506: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   55.641422][ T4816] CPU: 0 UID: 0 PID: 4816 Comm: syz.6.506 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) 
[   55.641451][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   55.641494][ T4816] Call Trace:
[   55.641500][ T4816]  <TASK>
[   55.641509][ T4816]  dump_stack_lvl+0xf6/0x150
[   55.641536][ T4816]  dump_stack+0x15/0x1a
[   55.641552][ T4816]  warn_alloc+0x145/0x1b0
[   55.641577][ T4816]  ? audit_log_end+0x1d0/0x1e0
[   55.641632][ T4816]  ? __vmalloc_node_range_noprof+0x8a/0xe80
[   55.641670][ T4816]  __vmalloc_node_range_noprof+0xac/0xe80
[   55.641772][ T4816]  ? __list_add_valid_or_report+0x38/0xe0
[   55.641814][ T4816]  ? __set_next_task_fair+0x5e/0x160
[   55.641890][ T4816]  ? __switch_to+0x476/0x9f0
[   55.641925][ T4816]  ? _raw_spin_unlock+0x26/0x50
[   55.641993][ T4816]  ? should_fail_ex+0x31/0x270
[   55.642019][ T4816]  ? should_failslab+0x8f/0xb0
[   55.642052][ T4816]  vmalloc_user_noprof+0x59/0x70
[   55.642150][ T4816]  ? xskq_create+0x79/0xd0
[   55.642177][ T4816]  xskq_create+0x79/0xd0
[   55.642205][ T4816]  xsk_init_queue+0x82/0xd0
[   55.642232][ T4816]  xsk_setsockopt+0x37d/0x550
[   55.642288][ T4816]  ? __pfx_xsk_setsockopt+0x10/0x10
[   55.642315][ T4816]  __sys_setsockopt+0x187/0x200
[   55.642385][ T4816]  __x64_sys_setsockopt+0x66/0x80
[   55.642411][ T4816]  x64_sys_call+0x2a09/0x2e10
[   55.642433][ T4816]  do_syscall_64+0xc9/0x1c0
[   55.642503][ T4816]  ? clear_bhb_loop+0x25/0x80
[   55.642574][ T4816]  ? clear_bhb_loop+0x25/0x80
[   55.642596][ T4816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.642621][ T4816] RIP: 0033:0x7f1487bad169
[   55.642636][ T4816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.642674][ T4816] RSP: 002b:00007f1486217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   55.642751][ T4816] RAX: ffffffffffffffda RBX: 00007f1487dc5fa0 RCX: 00007f1487bad169
[   55.642764][ T4816] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   55.642778][ T4816] RBP: 00007f1487c2e990 R08: 0000000000000004 R09: 0000000000000000
[   55.642790][ T4816] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.642801][ T4816] R13: 0000000000000000 R14: 00007f1487dc5fa0 R15: 00007ffc0ea1ece8
[   55.642853][ T4816]  </TASK>
[   55.642881][ T4816] Mem-Info:
[   55.849881][ T4821] loop1: detected capacity change from 0 to 512
[   55.851581][ T4816] active_anon:5169 inactive_anon:1 isolated_anon:0
[   55.851581][ T4816]  active_file:4551 inactive_file:2060 isolated_file:0
[   55.851581][ T4816]  unevictable:0 dirty:326 writeback:0
[   55.851581][ T4816]  slab_reclaimable:2875 slab_unreclaimable:15915
[   55.851581][ T4816]  mapped:28294 shmem:765 pagetables:1052
[   55.851581][ T4816]  sec_pagetables:0 bounce:0
[   55.851581][ T4816]  kernel_misc_reclaimable:0
[   55.851581][ T4816]  free:1909299 free_pcp:3427 free_cma:0
[   55.874940][ T4821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.880088][ T4816] Node 0 active_anon:20676kB inactive_anon:4kB active_file:18204kB inactive_file:8240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113176kB dirty:1304kB writeback:0kB shmem:3060kB writeback_tmp:0kB kernel_stack:3024kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   55.931302][ T4821] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.937427][ T4816] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   56.003610][ T4816] lowmem_reserve[]: 0 2882 7860 7860
[   56.009006][ T4816] Node 0 DMA32 free:2947692kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951320kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB
[   56.034338][ T4829] loop5: detected capacity change from 0 to 128
[   56.037541][ T4816] lowmem_reserve[]: 0 0 4978 4978
[   56.037577][ T4816] Node 0 Normal free:4674144kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:20560kB inactive_anon:4kB active_file:18204kB inactive_file:8240kB unevictable:0kB writepending:1304kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:9744kB local_pcp:4472kB free_cma:0kB
[   56.079397][ T4816] lowmem_reserve[]: 0 0 0 0
[   56.084001][ T4816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   56.097165][ T4816] Node 0 DMA32: 3*4kB (M) 0*8kB 2*16kB (M) 4*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947692kB
[   56.113088][ T4816] Node 0 Normal: 2*4kB (UE) 3*8kB (UME) 0*16kB 2*32kB (UM) 25*64kB (UM) 42*128kB (UME) 29*256kB (UME) 19*512kB (ME) 11*1024kB (UME) 11*2048kB (UME) 1127*4096kB (UM) = 4674208kB
[   56.130870][ T4816] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   56.140282][ T4816] 7399 total pagecache pages
[   56.144971][ T4816] 1 pages in swap cache
[   56.149241][ T4816] Free swap  = 124992kB
[   56.153464][ T4816] Total swap = 124996kB
[   56.157687][ T4816] 2097051 pages RAM
[   56.161514][ T4816] 0 pages HighMem/MovableOnly
[   56.166216][ T4816] 80820 pages reserved
[   56.174307][ T4626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.188590][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.229357][ T4833] serio: Serial port ptm0
[   56.299872][ T4626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.398510][ T4626] veth0_vlan: entered promiscuous mode
[   56.406558][ T4626] veth1_vlan: entered promiscuous mode
[   56.424041][ T4626] veth0_macvtap: entered promiscuous mode
[   56.431860][ T4626] veth1_macvtap: entered promiscuous mode
[   56.442482][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.453076][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.463030][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.473566][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.483522][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.494121][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.503950][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.514534][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.524536][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.534987][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.544857][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.555346][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.567112][ T4626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.579295][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.589894][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.599743][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.610462][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.620445][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.630996][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.640857][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.651325][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.661214][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.671731][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.681611][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.692050][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.703093][ T4626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.715479][ T4626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.724266][ T4626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.733150][ T4626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.742388][ T4626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.798186][ T4859] serio: Serial port ptm0
[   57.202386][ T4890] loop6: detected capacity change from 0 to 8192
[   57.209229][ T4890] vfat: Unknown parameter '&�#�0�!T�.yՄ��������*���#�'
[   57.249070][ T4894] serio: Serial port ptm0
[   57.447071][ T4914] openvswitch: netlink: Message has 6 unknown bytes.
[   57.893490][ T4939] serio: Serial port ptm0
[   57.912281][ T4941] loop6: detected capacity change from 0 to 512
[   57.937484][ T4941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.951984][ T4941] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.980455][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.065154][   T29] kauditd_printk_skb: 808 callbacks suppressed
[   58.065170][   T29] audit: type=1400 audit(1744558101.273:1720): avc:  denied  { connect } for  pid=4951 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.091267][   T29] audit: type=1400 audit(1744558101.273:1721): avc:  denied  { write } for  pid=4951 comm="syz.4.557" path="socket:[9849]" dev="sockfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.159498][   T29] audit: type=1400 audit(1744558101.333:1722): avc:  denied  { write } for  pid=4957 comm="syz.4.559" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   58.238707][ T4960] loop1: detected capacity change from 0 to 8192
[   58.245676][ T4960] vfat: Unknown parameter '&�#�0�!T�.yՄ��������*���#�'
[   58.417273][   T29] audit: type=1326 audit(1744558101.633:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.437890][ T4982] loop0: detected capacity change from 0 to 512
[   58.443325][   T29] audit: type=1326 audit(1744558101.633:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.470614][   T29] audit: type=1326 audit(1744558101.633:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.494027][   T29] audit: type=1326 audit(1744558101.633:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.517511][   T29] audit: type=1326 audit(1744558101.633:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.541802][   T29] audit: type=1326 audit(1744558101.633:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.565283][   T29] audit: type=1326 audit(1744558101.633:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   58.606260][ T4982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.619697][ T4982] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.658848][ T4626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.680265][ T4993] loop1: detected capacity change from 0 to 1024
[   58.687164][ T4993] EXT4-fs: Ignoring removed orlov option
[   58.692888][ T4993] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.722133][ T4993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.922830][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.947547][ T5008] loop1: detected capacity change from 0 to 1024
[   58.954256][ T5008] EXT4-fs: inline encryption not supported
[   58.962303][ T5008] EXT4-fs: Ignoring removed orlov option
[   58.969675][ T5008] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   58.987863][ T5008] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   58.997257][ T5008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.022319][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.054239][ T5016] loop5: detected capacity change from 0 to 512
[   59.062084][ T5016] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   59.092070][ T5016] EXT4-fs (loop5): 1 truncate cleaned up
[   59.101320][ T5016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.133868][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.397951][ T5079] loop4: detected capacity change from 0 to 1024
[   60.421225][ T5079] EXT4-fs: inline encryption not supported
[   60.439332][ T5079] EXT4-fs: Ignoring removed orlov option
[   60.457590][ T5079] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   60.496323][ T5079] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   60.517276][ T5079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.594113][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.717637][    C1] hrtimer: interrupt took 28064 ns
[   60.953220][ T5110] loop4: detected capacity change from 0 to 1024
[   60.980833][ T5110] EXT4-fs: Ignoring removed orlov option
[   60.986596][ T5110] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.068119][ T5110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.155496][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.448387][ T5158] loop6: detected capacity change from 0 to 1024
[   61.455314][ T5158] EXT4-fs: Ignoring removed orlov option
[   61.461009][ T5158] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.477380][ T5158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.544060][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.510280][ T5205] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   62.547463][ T5208] loop6: detected capacity change from 0 to 256
[   62.556898][ T5208] msdos: Bad value for 'dmask'
[   62.829791][ T5246] loop1: detected capacity change from 0 to 8192
[   62.851072][ T5254] rtc_cmos 00:00: Alarms can be up to one day in the future
[   63.516303][ T5284] syz.1.675 uses obsolete (PF_INET,SOCK_PACKET)
[   63.526351][   T29] kauditd_printk_skb: 400 callbacks suppressed
[   63.526399][   T29] audit: type=1326 audit(1744558106.743:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.585108][   T29] audit: type=1326 audit(1744558106.773:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.608506][   T29] audit: type=1326 audit(1744558106.773:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.631972][   T29] audit: type=1326 audit(1744558106.773:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.655914][   T29] audit: type=1326 audit(1744558106.773:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.679631][   T29] audit: type=1326 audit(1744558106.773:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.702964][   T29] audit: type=1326 audit(1744558106.773:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.726330][   T29] audit: type=1326 audit(1744558106.773:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.749701][   T29] audit: type=1326 audit(1744558106.783:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.773123][   T29] audit: type=1326 audit(1744558106.783:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.5.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   63.797004][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   63.804672][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   63.812376][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   63.820076][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   63.827474][   T10] rtc rtc0: __rtc_set_alarm: err=-22
[   63.834483][ T5290] Cannot find add_set index 0 as target
[   64.233013][ T5325] rtc_cmos 00:00: Alarms can be up to one day in the future
[   64.342467][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.702'.
[   64.528580][ T5366] netlink: 28 bytes leftover after parsing attributes in process `syz.6.706'.
[   64.537660][ T5366] netlink: 'syz.6.706': attribute type 7 has an invalid length.
[   64.545646][ T5366] netlink: 'syz.6.706': attribute type 8 has an invalid length.
[   64.553514][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.706'.
[   64.622873][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[   64.635601][ T5377] Cannot find add_set index 0 as target
[   64.653443][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[   64.698608][ T5389] netlink: 18 bytes leftover after parsing attributes in process `syz.4.711'.
[   64.758757][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future
[   64.766598][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future
[   64.774191][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future
[   64.781770][ T3384] rtc_cmos 00:00: Alarms can be up to one day in the future
[   64.789104][ T3384] rtc rtc0: __rtc_set_alarm: err=-22
[   64.874454][ T5400] loop5: detected capacity change from 0 to 8192
[   65.071039][ T5416] loop4: detected capacity change from 0 to 512
[   65.152940][ T5416] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   65.200060][ T5416] EXT4-fs (loop4): mount failed
[   65.308143][ T5438] loop6: detected capacity change from 0 to 8192
[   65.574656][ T5485] loop0: detected capacity change from 0 to 512
[   65.583864][ T5485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   65.611039][ T5485] EXT4-fs (loop0): 1 truncate cleaned up
[   65.620307][ T5485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.743292][ T4626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.810398][ T5503] loop6: detected capacity change from 0 to 512
[   65.819043][ T5503] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   65.819939][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'.
[   65.843054][ T5503] EXT4-fs (loop6): 1 truncate cleaned up
[   65.858764][ T5503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.884407][ T5508] 9pnet: Could not find request transport: 0xffffffffffffffff
[   65.920081][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.921566][ T5511] netlink: 18 bytes leftover after parsing attributes in process `syz.1.742'.
[   66.115103][ T5532] netlink: 18 bytes leftover after parsing attributes in process `syz.6.755'.
[   66.161154][ T5533] loop4: detected capacity change from 0 to 8192
[   66.167746][ T5537] loop1: detected capacity change from 0 to 512
[   66.198098][ T5537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.228581][ T5537] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   66.239254][ T5541] loop6: detected capacity change from 0 to 512
[   66.293487][ T5541] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   66.310975][ T5541] EXT4-fs (loop6): mount failed
[   66.321062][ T5543] SELinux: ebitmap: truncated map
[   66.357328][ T5543] SELinux: failed to load policy
[   66.421382][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'.
[   66.513765][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.563387][ T5571] loop1: detected capacity change from 0 to 512
[   66.589407][ T5571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   66.601415][ T5571] EXT4-fs (loop1): 1 truncate cleaned up
[   66.609522][ T5571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.689011][ T5581] loop5: detected capacity change from 0 to 512
[   66.701941][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.716952][ T5581] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   66.733800][ T5581] EXT4-fs (loop5): mount failed
[   66.810190][ T5589] SELinux: ebitmap: truncated map
[   66.818167][ T5589] SELinux: failed to load policy
[   66.866759][ T5601] loop0: detected capacity change from 0 to 1024
[   66.892106][ T5605] loop1: detected capacity change from 0 to 512
[   66.900754][ T5611] hub 9-0:1.0: USB hub found
[   66.901956][ T5605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   66.911214][ T5611] hub 9-0:1.0: 8 ports detected
[   66.954059][ T5605] EXT4-fs (loop1): 1 truncate cleaned up
[   67.060015][ T5635] loop0: detected capacity change from 0 to 2048
[   67.097555][ T5648] unsupported nla_type 52263
[   67.172851][ T5655] SELinux: ebitmap: truncated map
[   67.191210][ T5655] SELinux: failed to load policy
[   67.229794][ T5663] loop4: detected capacity change from 0 to 512
[   67.242158][ T5663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   67.293838][ T5672] loop5: detected capacity change from 0 to 512
[   67.304062][ T5663] EXT4-fs (loop4): 1 truncate cleaned up
[   67.310711][ T5672] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   67.321088][ T5663] EXT4-fs mount: 6 callbacks suppressed
[   67.321101][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.347908][ T5672] EXT4-fs (loop5): 1 truncate cleaned up
[   67.354168][ T5672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.361127][ T5677] tipc: Started in network mode
[   67.372614][ T5677] tipc: Node identity ac14140f, cluster identity 4711
[   67.386031][ T5677] tipc: New replicast peer: 255.255.255.255
[   67.394311][ T5677] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.410012][ T5670] SELinux: ebitmap: truncated map
[   67.416080][ T5677] tipc: Disabling bearer <udp:syz2>
[   67.437267][ T5670] SELinux: failed to load policy
[   67.454698][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.479507][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.647287][ T5698] loop5: detected capacity change from 0 to 2048
[   67.676270][ T5709] hub 9-0:1.0: USB hub found
[   67.682079][ T5698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.685228][ T5709] hub 9-0:1.0: 8 ports detected
[   67.701146][ T5712] loop6: detected capacity change from 0 to 512
[   67.712331][ T5712] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   67.728377][ T5712] EXT4-fs (loop6): 1 truncate cleaned up
[   67.738278][ T5712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.739133][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.812490][ T5721] vlan2: entered allmulticast mode
[   67.861557][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.897645][ T5731] loop5: detected capacity change from 0 to 1024
[   67.926576][ T5731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.048071][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.097104][ T5758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.119053][ T5762] loop4: detected capacity change from 0 to 512
[   68.168270][ T5762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.213462][ T5762] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   68.268816][ T5781] syz.5.836 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   68.518238][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.553604][ T5803] syz_tun: entered allmulticast mode
[   68.590698][ T5802] syz_tun: left allmulticast mode
[   68.652742][   T29] kauditd_printk_skb: 49 callbacks suppressed
[   68.652759][   T29] audit: type=1326 audit(1744558111.863:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   68.718746][   T29] audit: type=1326 audit(1744558111.893:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   68.742144][   T29] audit: type=1326 audit(1744558111.893:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   68.765870][   T29] audit: type=1326 audit(1744558111.893:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   68.788107][ T5815] loop1: detected capacity change from 0 to 1024
[   68.789876][   T29] audit: type=1326 audit(1744558111.893:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   68.832130][ T5811] loop0: detected capacity change from 0 to 512
[   68.841300][ T5815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.847262][ T5817] vlan0: entered allmulticast mode
[   68.863232][ T5811] EXT4-fs (loop0): 1 orphan inode deleted
[   68.869459][ T5811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.882030][  T418] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   68.891800][  T418] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1
[   68.907671][ T5811] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.925408][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.937247][ T4626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.953587][ T5823] loop5: detected capacity change from 0 to 128
[   68.971730][ T5823] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   68.986445][ T5823] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.026801][   T29] audit: type=1400 audit(1744558112.233:2191): avc:  denied  { append } for  pid=5822 comm="syz.5.865" path="/80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   69.119439][ T4406] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.178295][   T29] audit: type=1400 audit(1744558112.393:2192): avc:  denied  { write } for  pid=5848 comm="syz.5.860" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   69.186320][ T5852] loop4: detected capacity change from 0 to 1024
[   69.327347][   T29] audit: type=1326 audit(1744558112.533:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   69.350828][   T29] audit: type=1326 audit(1744558112.533:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   69.414217][ T5852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.434991][ T5868] syz_tun: entered allmulticast mode
[   69.463364][ T5866] syz_tun: left allmulticast mode
[   69.499314][ T5873] loop1: detected capacity change from 0 to 128
[   69.542817][ T5873] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   69.556592][ T5884] netlink: 'syz.6.878': attribute type 10 has an invalid length.
[   69.560521][ T5873] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.567575][ T5884] batman_adv: batadv0: Adding interface: team0
[   69.602618][ T5884] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.615936][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.627863][ T5884] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   69.665528][ T5884] netlink: 'syz.6.878': attribute type 10 has an invalid length.
[   69.673333][ T5884] __nla_validate_parse: 7 callbacks suppressed
[   69.673348][ T5884] netlink: 2 bytes leftover after parsing attributes in process `syz.6.878'.
[   69.689603][ T5884] team0: entered promiscuous mode
[   69.694672][ T5884] team_slave_0: entered promiscuous mode
[   69.700430][ T5884] team_slave_1: entered promiscuous mode
[   69.733053][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[   69.743138][ T5884] batman_adv: batadv0: Interface activated: team0
[   69.749783][ T5884] batman_adv: batadv0: Interface deactivated: team0
[   69.756498][ T5884] batman_adv: batadv0: Removing interface: team0
[   69.771830][ T5894] loop0: detected capacity change from 0 to 2048
[   69.773873][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.799907][ T5897] loop5: detected capacity change from 0 to 512
[   69.807440][ T5884] bridge0: port 3(team0) entered blocking state
[   69.813745][ T5884] bridge0: port 3(team0) entered disabled state
[   69.821870][ T5884] team0: entered allmulticast mode
[   69.827052][ T5884] team_slave_0: entered allmulticast mode
[   69.832948][ T5884] team_slave_1: entered allmulticast mode
[   69.840531][ T5894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.855194][ T5897] EXT4-fs (loop5): orphan cleanup on readonly fs
[   69.862029][ T5897] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.885: bad orphan inode 13
[   69.902546][ T5884] bridge0: port 3(team0) entered blocking state
[   69.909121][ T5884] bridge0: port 3(team0) entered forwarding state
[   69.917726][ T5897] ext4_test_bit(bit=12, block=18) = 1
[   69.923130][ T5897] is_bad_inode(inode)=0
[   69.927375][ T5897] NEXT_ORPHAN(inode)=2130706432
[   69.932262][ T5897] max_ino=32
[   69.935601][ T5897] i_nlink=1
[   69.939263][ T5897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.963819][ T5897] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[   69.982227][ T5907] syz_tun: entered allmulticast mode
[   70.008840][ T5911] loop6: detected capacity change from 0 to 512
[   70.019004][ T5911] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   70.036826][ T5906] syz_tun: left allmulticast mode
[   70.067854][ T5911] EXT4-fs (loop6): 1 truncate cleaned up
[   70.077611][ T5897] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   70.107064][ T5911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.142820][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.215608][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.239779][ T5666] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   70.504841][ T5938] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[   70.642204][  T418] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1184 with error 28
[   70.654845][  T418] EXT4-fs (loop0): This should not happen!! Data will be lost
[   70.654845][  T418] 
[   70.664899][  T418] EXT4-fs (loop0): Total free blocks count 0
[   70.671734][  T418] EXT4-fs (loop0): Free/Dirty block details
[   70.677745][  T418] EXT4-fs (loop0): free_blocks=2415919504
[   70.683496][  T418] EXT4-fs (loop0): dirty_blocks=1184
[   70.688861][  T418] EXT4-fs (loop0): Block reservation details
[   70.694887][  T418] EXT4-fs (loop0): i_reserved_data_blocks=74
[   70.750107][ T4626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.018814][ T5989] netlink: 'syz.1.919': attribute type 10 has an invalid length.
[   71.059689][ T5989] bridge0: port 3(team0) entered disabled state
[   71.070126][ T5990] netlink: 'syz.1.919': attribute type 10 has an invalid length.
[   71.078066][ T5990] netlink: 2 bytes leftover after parsing attributes in process `syz.1.919'.
[   71.083806][ T5989] team0: left allmulticast mode
[   71.091798][ T5989] team_slave_0: left allmulticast mode
[   71.097432][ T5989] team_slave_1: left allmulticast mode
[   71.102921][ T5989] team0: left promiscuous mode
[   71.107741][ T5989] team_slave_0: left promiscuous mode
[   71.113291][ T5989] team_slave_1: left promiscuous mode
[   71.118895][ T5989] bridge0: port 3(team0) entered disabled state
[   71.138772][ T5989] batman_adv: batadv0: Adding interface: team0
[   71.144968][ T5989] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.170362][ T5989] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   71.187565][ T5990] team0: entered promiscuous mode
[   71.192718][ T5990] team_slave_0: entered promiscuous mode
[   71.198508][ T5990] team_slave_1: entered promiscuous mode
[   71.234241][ T5992] loop4: detected capacity change from 0 to 512
[   71.243699][ T5992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   71.261483][ T5990] 8021q: adding VLAN 0 to HW filter on device team0
[   71.268803][ T5990] batman_adv: batadv0: Interface activated: team0
[   71.275519][ T5990] batman_adv: batadv0: Interface deactivated: team0
[   71.276828][ T5992] EXT4-fs (loop4): 1 truncate cleaned up
[   71.282317][ T5990] batman_adv: batadv0: Removing interface: team0
[   71.291329][ T5992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.327825][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.339557][ T5990] bridge0: port 3(team0) entered blocking state
[   71.345924][ T5990] bridge0: port 3(team0) entered disabled state
[   71.352388][ T5990] team0: entered allmulticast mode
[   71.357568][ T5990] team_slave_0: entered allmulticast mode
[   71.363369][ T5990] team_slave_1: entered allmulticast mode
[   71.374235][ T5990] bridge0: port 3(team0) entered blocking state
[   71.380591][ T5990] bridge0: port 3(team0) entered forwarding state
[   71.438438][ T6007] loop4: detected capacity change from 0 to 128
[   71.451952][ T6007] vfat: Unknown parameter '������������'
[   71.548103][ T6019] loop4: detected capacity change from 0 to 2048
[   71.585854][ T6026] loop6: detected capacity change from 0 to 512
[   71.593175][ T6019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.611710][ T6030] loop1: detected capacity change from 0 to 512
[   71.633049][ T6030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   71.657783][ T6026] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.673022][ T6026] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.687638][ T6030] EXT4-fs (loop1): 1 truncate cleaned up
[   71.693717][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.749771][ T6026] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.939: corrupted inode contents
[   71.761718][ T6026] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.939: mark_inode_dirty error
[   71.817639][ T6026] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.939: corrupted inode contents
[   71.864124][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.875394][ T6026] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.939: mark_inode_dirty error
[   71.894549][ T6042] netlink: 'syz.5.942': attribute type 10 has an invalid length.
[   71.905746][ T6042] batman_adv: batadv0: Adding interface: team0
[   71.911923][ T6042] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.937254][ T6042] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   71.951160][ T6042] netlink: 'syz.5.942': attribute type 10 has an invalid length.
[   71.959006][ T6042] netlink: 2 bytes leftover after parsing attributes in process `syz.5.942'.
[   71.968710][ T6042] team0: entered promiscuous mode
[   71.973897][ T6042] team_slave_0: entered promiscuous mode
[   71.979749][ T6042] team_slave_1: entered promiscuous mode
[   71.987626][ T6042] 8021q: adding VLAN 0 to HW filter on device team0
[   71.994947][ T6042] batman_adv: batadv0: Interface activated: team0
[   72.001713][ T6042] batman_adv: batadv0: Interface deactivated: team0
[   72.008490][ T6042] batman_adv: batadv0: Removing interface: team0
[   72.025333][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.035390][ T6042] bridge0: port 3(team0) entered blocking state
[   72.041733][ T6042] bridge0: port 3(team0) entered disabled state
[   72.063078][ T6042] team0: entered allmulticast mode
[   72.068302][ T6042] team_slave_0: entered allmulticast mode
[   72.074048][ T6042] team_slave_1: entered allmulticast mode
[   72.082127][ T6042] bridge0: port 3(team0) entered blocking state
[   72.088440][ T6042] bridge0: port 3(team0) entered forwarding state
[   72.139866][ T6054] loop5: detected capacity change from 0 to 512
[   72.155911][ T6054] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.178276][ T6058] smc: net device bond0 applied user defined pnetid SYZ2
[   72.178839][ T6054] EXT4-fs (loop5): 1 truncate cleaned up
[   72.194316][ T6054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.209078][ T6058] smc: net device bond0 erased user defined pnetid SYZ2
[   72.244354][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.951'.
[   72.305994][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.341380][ T6067] loop1: detected capacity change from 0 to 128
[   72.348716][ T6067] vfat: Unknown parameter '������������'
[   72.418410][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[   72.465991][ T6071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   72.468850][ T6078] loop5: detected capacity change from 0 to 512
[   72.507784][ T6078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.523441][ T6078] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.549926][ T6078] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.969: corrupted inode contents
[   72.561809][ T6078] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.969: mark_inode_dirty error
[   72.576993][   T37] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   72.592332][ T6078] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.969: corrupted inode contents
[   72.607180][   T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1248 with error 28
[   72.619716][   T37] EXT4-fs (loop4): This should not happen!! Data will be lost
[   72.619716][   T37] 
[   72.629437][   T37] EXT4-fs (loop4): Total free blocks count 0
[   72.635539][   T37] EXT4-fs (loop4): Free/Dirty block details
[   72.641440][   T37] EXT4-fs (loop4): free_blocks=2415919504
[   72.647214][   T37] EXT4-fs (loop4): dirty_blocks=1248
[   72.652671][   T37] EXT4-fs (loop4): Block reservation details
[   72.658721][   T37] EXT4-fs (loop4): i_reserved_data_blocks=78
[   72.668987][ T6078] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.969: mark_inode_dirty error
[   72.682135][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.712373][ T6088] netlink: 'syz.4.960': attribute type 10 has an invalid length.
[   72.741529][ T6088] bridge0: port 3(team0) entered disabled state
[   72.748644][ T6088] team0: left allmulticast mode
[   72.753541][ T6088] team_slave_0: left allmulticast mode
[   72.758937][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.763680][ T6092] netlink: 'syz.4.960': attribute type 10 has an invalid length.
[   72.768180][ T6088] team_slave_1: left allmulticast mode
[   72.775949][ T6092] netlink: 2 bytes leftover after parsing attributes in process `syz.4.960'.
[   72.781426][ T6088] team0: left promiscuous mode
[   72.794970][ T6088] team_slave_0: left promiscuous mode
[   72.800493][ T6088] team_slave_1: left promiscuous mode
[   72.806273][ T6088] bridge0: port 3(team0) entered disabled state
[   72.820915][ T6088] batman_adv: batadv0: Adding interface: team0
[   72.827194][ T6088] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.852894][ T6088] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   72.877421][ T6092] team0: entered promiscuous mode
[   72.882572][ T6092] team_slave_0: entered promiscuous mode
[   72.888419][ T6092] team_slave_1: entered promiscuous mode
[   72.898713][ T6092] 8021q: adding VLAN 0 to HW filter on device team0
[   72.909741][ T6092] batman_adv: batadv0: Interface activated: team0
[   72.916267][ T6092] batman_adv: batadv0: Interface deactivated: team0
[   72.922971][ T6092] batman_adv: batadv0: Removing interface: team0
[   72.933657][   T23] Process accounting resumed
[   72.943445][ T6092] bridge0: port 3(team0) entered blocking state
[   72.949793][ T6092] bridge0: port 3(team0) entered disabled state
[   72.966390][ T6092] team0: entered allmulticast mode
[   72.971577][ T6092] team_slave_0: entered allmulticast mode
[   72.977446][ T6092] team_slave_1: entered allmulticast mode
[   72.995765][ T6092] bridge0: port 3(team0) entered blocking state
[   73.002280][ T6092] bridge0: port 3(team0) entered forwarding state
[   73.097070][ T6113] smc: net device bond0 applied user defined pnetid SYZ2
[   73.110649][ T6113] smc: net device bond0 erased user defined pnetid SYZ2
[   73.141450][ T6117] loop1: detected capacity change from 0 to 512
[   73.191628][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.215170][ T6117] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.271236][ T6117] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.975: corrupted inode contents
[   73.288684][ T6117] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.975: mark_inode_dirty error
[   73.301318][ T6117] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.975: corrupted inode contents
[   73.314782][ T6117] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.975: mark_inode_dirty error
[   73.327626][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'.
[   73.339602][ T6130] erspan0: entered promiscuous mode
[   73.344935][ T6130] macvtap1: entered promiscuous mode
[   73.350363][ T6130] macvtap1: entered allmulticast mode
[   73.355896][ T6130] erspan0: entered allmulticast mode
[   73.380954][ T6130] erspan0: left allmulticast mode
[   73.386435][ T6130] erspan0: left promiscuous mode
[   73.394310][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.535346][ T6148] SELinux:  Context � is not valid (left unmapped).
[   73.655440][ T6163] loop4: detected capacity change from 0 to 512
[   73.682488][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.703871][ T6163] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.740262][ T6163] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.994: corrupted inode contents
[   73.758193][ T6163] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.994: mark_inode_dirty error
[   73.770643][ T6163] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.994: corrupted inode contents
[   73.787679][ T6163] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.994: mark_inode_dirty error
[   73.842720][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.904954][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   73.904967][   T29] audit: type=1326 audit(1744558117.113:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   73.937637][   T29] audit: type=1326 audit(1744558117.113:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   73.961115][   T29] audit: type=1326 audit(1744558117.113:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   73.984757][   T29] audit: type=1326 audit(1744558117.113:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   74.062514][   T29] audit: type=1326 audit(1744558117.273:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2850d169 code=0x7ffc0000
[   74.062696][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1012'.
[   74.086019][   T29] audit: type=1326 audit(1744558117.273:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f3d2850d169 code=0x7ffc0000
[   74.118505][   T29] audit: type=1326 audit(1744558117.273:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2850d169 code=0x7ffc0000
[   74.128963][ T6200] erspan0: entered promiscuous mode
[   74.153868][ T6200] macvtap1: entered promiscuous mode
[   74.159380][ T6200] macvtap1: entered allmulticast mode
[   74.164792][ T6200] erspan0: entered allmulticast mode
[   74.174260][ T6203] erspan0: left allmulticast mode
[   74.179488][ T6203] erspan0: left promiscuous mode
[   74.405058][   T29] audit: type=1400 audit(1744558117.613:2252): avc:  denied  { append } for  pid=6224 comm="syz.0.1021" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.442273][ T6226] loop9: detected capacity change from 0 to 7
[   74.451711][ T6226] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.479808][ T6226] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.487801][ T6226]  loop9: unable to read partition table
[   74.493880][ T6226] loop_reread_partitions: partition scan of loop9 (�被�����ބ;���*��U�������) failed (rc=-5)
[   74.602102][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1033'.
[   74.611214][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1033'.
[   74.638437][ T6255] bond1: entered promiscuous mode
[   74.643549][ T6255] bond1: entered allmulticast mode
[   74.703253][   T29] audit: type=1326 audit(1744558117.913:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   74.726862][   T29] audit: type=1326 audit(1744558117.913:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786e26d169 code=0x7ffc0000
[   74.763161][ T6255] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.776807][ T6255] bond1 (unregistering): Released all slaves
[   75.036673][ T6295] xt_CT: You must specify a L4 protocol and not use inversions on it
[   75.269327][ T6316] openvswitch: netlink: Message has 6 unknown bytes.
[   75.442548][ T6338] loop5: detected capacity change from 0 to 128
[   75.455823][ T6338] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.473776][ T6338] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.489906][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1074'.
[   75.519270][ T4406] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   75.998875][ T6376] syzkaller1: entered promiscuous mode
[   76.004453][ T6376] syzkaller1: entered allmulticast mode
[   76.023962][ T6392] loop9: detected capacity change from 0 to 7
[   76.030401][ T6392] Buffer I/O error on dev loop9, logical block 0, async page read
[   76.038669][ T6392] Buffer I/O error on dev loop9, logical block 0, async page read
[   76.046578][ T6392]  loop9: unable to read partition table
[   76.053218][ T6392] loop_reread_partitions: partition scan of loop9 (�被�����ބ;���*��U�������) failed (rc=-5)
[   76.146527][ T6402] loop0: detected capacity change from 0 to 128
[   76.163282][ T6402] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.179578][ T6402] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.210403][ T6409] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.211982][ T4626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.258800][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1102'.
[   76.267826][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1102'.
[   76.289438][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'.
[   76.308232][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'.
[   76.337219][ T6423] bond1: entered promiscuous mode
[   76.342383][ T6423] bond1: entered allmulticast mode
[   76.347910][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.359005][ T6423] bond1 (unregistering): Released all slaves
[   76.515832][ T6441] loop1: detected capacity change from 0 to 128
[   76.523798][ T6441] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.538267][ T6441] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.572210][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'.
[   76.591025][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.779424][ T6464] bond1: entered promiscuous mode
[   76.784504][ T6464] bond1: entered allmulticast mode
[   76.791583][ T6464] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.803354][ T6464] bond1 (unregistering): Released all slaves
[   76.815235][ T6470] loop4: detected capacity change from 0 to 1024
[   76.838987][ T6470] EXT4-fs: Ignoring removed oldalloc option
[   76.868642][ T6470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.932683][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.954370][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'.
[   76.980735][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1132'.
[   76.999979][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'.
[   77.119963][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1148'.
[   77.992187][ T6507] syzkaller1: entered promiscuous mode
[   77.997733][ T6507] syzkaller1: entered allmulticast mode
[   78.349355][ T6561] loop4: detected capacity change from 0 to 8192
[   78.389130][ T6551] syzkaller1: entered promiscuous mode
[   78.394700][ T6551] syzkaller1: entered allmulticast mode
[   78.563863][ T6579] netlink: 'syz.1.1174': attribute type 27 has an invalid length.
[   78.600867][ T6579] bridge0: port 3(team0) entered disabled state
[   78.607268][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.614483][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.655034][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.666769][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.691825][ T6579] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.700957][ T6579] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.710431][ T6579] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.719860][ T6579] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.748635][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.756788][ T6581] bridge0: port 3(team0) entered blocking state
[   78.763083][ T6581] bridge0: port 3(team0) entered forwarding state
[   78.770052][ T6581] 8021q: adding VLAN 0 to HW filter on device team0
[   78.779798][ T6581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.796229][   T31] bridge0: port 3(team0) entered disabled state
[   78.948604][   T29] kauditd_printk_skb: 83 callbacks suppressed
[   78.948621][   T29] audit: type=1326 audit(1744558122.163:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   78.978210][   T29] audit: type=1326 audit(1744558122.163:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   79.001627][   T29] audit: type=1326 audit(1744558122.163:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   79.025239][   T29] audit: type=1326 audit(1744558122.163:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   79.042838][ T6582] chnl_net:caif_netlink_parms(): no params data found
[   79.048634][   T29] audit: type=1326 audit(1744558122.163:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   79.048682][   T29] audit: type=1326 audit(1744558122.163:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29a46d169 code=0x7ffc0000
[   79.102985][   T29] audit: type=1400 audit(1744558122.283:2344): avc:  denied  { unlink } for  pid=2986 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.192926][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.200117][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.207707][ T6582] bridge_slave_0: entered allmulticast mode
[   79.214183][ T6582] bridge_slave_0: entered promiscuous mode
[   79.226941][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.234038][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.241474][ T6582] bridge_slave_1: entered allmulticast mode
[   79.248160][ T6582] bridge_slave_1: entered promiscuous mode
[   79.282721][ T6631] loop6: detected capacity change from 0 to 128
[   79.293508][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.294063][   T29] audit: type=1400 audit(1744558122.503:2345): avc:  denied  { create } for  pid=6634 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   79.304121][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.332813][ T6631] vfat: Unknown parameter ''
[   79.339188][   T29] audit: type=1400 audit(1744558122.553:2346): avc:  denied  { write } for  pid=6634 comm="syz.0.1194" path="socket:[14781]" dev="sockfs" ino=14781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   79.363522][   T29] audit: type=1400 audit(1744558122.553:2347): avc:  denied  { nlmsg_read } for  pid=6634 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   79.410350][ T6582] team0: Port device team_slave_0 added
[   79.439172][ T6582] team0: Port device team_slave_1 added
[   79.478315][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.485358][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.511610][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.529916][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.537104][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.563054][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.595702][ T6582] hsr_slave_0: entered promiscuous mode
[   79.601870][ T6582] hsr_slave_1: entered promiscuous mode
[   79.608202][ T6582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.620277][ T6582] Cannot create hsr debugfs directory
[   79.778722][ T6582] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   79.791121][ T6582] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   79.818613][ T6582] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   79.831871][ T6678] xt_hashlimit: size too large, truncated to 1048576
[   79.838746][ T6678] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[   79.846067][ T6582] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   79.929700][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.943251][ T6582] 8021q: adding VLAN 0 to HW filter on device team0
[   79.962757][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.969869][ T4817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.987254][ T4817] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.994418][ T4817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.116382][ T6698] xt_hashlimit: max too large, truncated to 1048576
[   80.123816][ T6698] Cannot find set identified by id 0 to match
[   80.168910][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.201824][ T6712] loop1: detected capacity change from 0 to 526
[   80.228600][ T6712] EXT4-fs (loop1): failed to parse options in superblock: gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg
[   80.241459][ T6712] EXT4-fs (loop1): Unsupported encryption level 122
[   80.401213][ T6582] veth0_vlan: entered promiscuous mode
[   80.422934][ T6582] veth1_vlan: entered promiscuous mode
[   80.470636][ T6582] veth0_macvtap: entered promiscuous mode
[   80.482708][ T6582] veth1_macvtap: entered promiscuous mode
[   80.494680][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.505281][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.515321][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.525876][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.535862][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.546420][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.556401][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.566887][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.576741][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.587370][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.597260][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.607719][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.618881][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.627205][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.637791][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.647680][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.658209][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.668072][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.678560][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.688487][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.699391][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.709246][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.719778][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.729634][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.740138][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.751149][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.764040][ T6582] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.772903][ T6582] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.781684][ T6582] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.790440][ T6582] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.922472][ T6773] loop6: detected capacity change from 0 to 526
[   80.939007][ T6773] EXT4-fs (loop6): failed to parse options in superblock: gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg
[   80.951993][ T6773] EXT4-fs (loop6): Unsupported encryption level 122
[   80.978573][ T6775] loop7: detected capacity change from 0 to 128
[   80.988713][ T6775] vfat: Unknown parameter ''
[   80.993698][ T6779] loop0: detected capacity change from 0 to 512
[   81.011190][ T6779] msdos: Unknown parameter 'errerrors'
[   81.218012][ T6803] loop0: detected capacity change from 0 to 8192
[   81.327678][ T6817] loop5: detected capacity change from 0 to 128
[   81.334199][ T6817] vfat: Unknown parameter ''
[   81.394373][ T6825] xt_hashlimit: max too large, truncated to 1048576
[   81.417603][ T6825] Cannot find set identified by id 0 to match
[   81.480056][ T6840] xt_hashlimit: max too large, truncated to 1048576
[   81.504312][ T6840] Cannot find set identified by id 0 to match
[   81.616266][ T6857] loop1: detected capacity change from 0 to 256
[   81.859266][ T6852] chnl_net:caif_netlink_parms(): no params data found
[   81.921331][ T6894] loop5: detected capacity change from 0 to 1024
[   81.948694][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.955844][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.968123][ T6852] bridge_slave_0: entered allmulticast mode
[   81.974775][ T6852] bridge_slave_0: entered promiscuous mode
[   81.982013][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.986038][ T6894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.989209][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.008685][ T6852] bridge_slave_1: entered allmulticast mode
[   82.015823][ T6852] bridge_slave_1: entered promiscuous mode
[   82.035337][ T6894] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1299: bg 0: block 88: padding at end of block bitmap is not set
[   82.065657][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.080572][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.110328][ T4406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.125006][ T6852] team0: Port device team_slave_0 added
[   82.131837][ T6852] team0: Port device team_slave_1 added
[   82.165272][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.172241][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.198274][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.209575][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.216804][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.242805][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.274659][ T6852] hsr_slave_0: entered promiscuous mode
[   82.281056][ T6852] hsr_slave_1: entered promiscuous mode
[   82.287161][ T6852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.294706][ T6852] Cannot create hsr debugfs directory
[   82.365904][ T6852] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   82.375060][ T6852] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   82.383836][ T6852] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   82.393295][ T6852] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   82.411017][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.418092][ T6852] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.425470][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.432583][ T6852] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.457189][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.464899][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.498038][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.513187][ T6852] 8021q: adding VLAN 0 to HW filter on device team0
[   82.524079][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.531169][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.543696][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.550784][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.623028][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.721955][ T6852] veth0_vlan: entered promiscuous mode
[   82.730877][ T6852] veth1_vlan: entered promiscuous mode
[   82.749642][ T6852] veth0_macvtap: entered promiscuous mode
[   82.758375][ T6852] veth1_macvtap: entered promiscuous mode
[   82.769445][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.780030][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.789890][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.800373][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.810231][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.820702][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.830530][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.840970][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.850926][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.861932][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.872101][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.882617][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.892460][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.902914][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.914107][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.928054][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.938556][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.948490][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.959048][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.968866][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.979296][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.989115][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.999564][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.009424][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.019870][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.029729][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.040172][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.050015][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.060514][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.071784][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.084504][ T6852] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.093388][ T6852] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.102254][ T6852] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.111113][ T6852] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.188218][ T6940] netlink: 'syz.5.1321': attribute type 10 has an invalid length.
[   83.198114][ T6940] bridge0: port 3(team0) entered disabled state
[   83.205461][ T6937] SELinux: failed to load policy
[   83.211410][ T6940] team0: left allmulticast mode
[   83.216367][ T6940] team_slave_0: left allmulticast mode
[   83.221954][ T6940] team_slave_1: left allmulticast mode
[   83.227687][ T6940] team0: left promiscuous mode
[   83.232712][ T6940] team_slave_0: left promiscuous mode
[   83.238210][ T6940] team_slave_1: left promiscuous mode
[   83.243839][ T6940] bridge0: port 3(team0) entered disabled state
[   83.251074][ T6944] raw_sendmsg: syz.6.1309 forgot to set AF_INET. Fix it!
[   83.268932][ T6940] batman_adv: batadv0: Adding interface: team0
[   83.275177][ T6940] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.300404][ T6940] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   83.391059][ T6956] smc: net device bond0 applied user defined pnetid SYZ0
[   83.401874][ T6956] smc: net device bond0 erased user defined pnetid SYZ0
[   83.443582][ T6962] __nla_validate_parse: 3 callbacks suppressed
[   83.443656][ T6962] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1318'.
[   83.511050][ T6974] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[   83.582557][ T6984] sd 0:0:1:0: device reset
[   83.599249][ T6978] SELinux: failed to load policy
[   83.698673][ T7002] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1343'.
[   83.803727][ T7016] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1356'.
[   83.877845][ T7022] loop6: detected capacity change from 0 to 256
[   83.932084][ T7023] SELinux: failed to load policy
[   83.941963][ T7031] loop1: detected capacity change from 0 to 1024
[   83.958416][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.988357][   T29] kauditd_printk_skb: 160 callbacks suppressed
[   83.988445][   T29] audit: type=1326 audit(1744558127.203:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.024468][   T29] audit: type=1326 audit(1744558127.203:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.048160][   T29] audit: type=1326 audit(1744558127.203:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.061770][ T7031] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1354: bg 0: block 88: padding at end of block bitmap is not set
[   84.071832][   T29] audit: type=1326 audit(1744558127.203:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.109508][   T29] audit: type=1326 audit(1744558127.203:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.133229][   T29] audit: type=1326 audit(1744558127.203:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.157402][   T29] audit: type=1326 audit(1744558127.203:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.7.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.201577][ T7049] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   84.224291][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.260470][   T29] audit: type=1326 audit(1744558127.453:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.7.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.284020][   T29] audit: type=1326 audit(1744558127.453:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.7.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.307640][   T29] audit: type=1326 audit(1744558127.453:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.7.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   84.369759][ T7063] smc: net device bond0 applied user defined pnetid SYZ0
[   84.383428][ T7063] smc: net device bond0 erased user defined pnetid SYZ0
[   84.448442][ T7072] netlink: 'syz.7.1373': attribute type 10 has an invalid length.
[   84.472415][ T7072] batman_adv: batadv0: Adding interface: team0
[   84.478735][ T7072] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.503901][ T7072] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   84.564246][ T7086] sd 0:0:1:0: device reset
[   84.648773][ T7100] smc: net device bond0 applied user defined pnetid SYZ0
[   84.656431][ T7100] smc: net device bond0 erased user defined pnetid SYZ0
[   84.731137][ T7113] loop6: detected capacity change from 0 to 512
[   84.751438][ T7113] EXT4-fs (loop6): 1 orphan inode deleted
[   84.763632][ T7113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.781882][   T31] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[   84.795485][ T7113] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.861785][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.087016][ T7167] loop1: detected capacity change from 0 to 256
[   85.100751][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1418'.
[   85.117193][ T7170] atomic_op ffff888113147128 conn xmit_atomic 0000000000000000
[   85.155281][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1418'.
[   85.182139][ T7173] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   85.354842][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1429'.
[   85.444388][ T7206] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   85.534493][ T7217] loop1: detected capacity change from 0 to 512
[   85.568692][ T7217] EXT4-fs (loop1): 1 orphan inode deleted
[   85.589094][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1
[   85.603155][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1455'.
[   85.612317][ T7217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.667734][ T7217] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.734577][ T7230] atomic_op ffff888112590528 conn xmit_atomic 0000000000000000
[   85.777953][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.895541][ T7244] loop7: detected capacity change from 0 to 256
[   86.097827][ T7142] syz.5.1406 (7142) used greatest stack depth: 6040 bytes left
[   86.111088][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1461'.
[   86.163957][ T7265] loop8: detected capacity change from 0 to 256
[   86.180130][ T7267] loop1: detected capacity change from 0 to 512
[   86.195665][ T7267] EXT4-fs (loop1): orphan cleanup on readonly fs
[   86.203188][ T7270] loop7: detected capacity change from 0 to 512
[   86.216560][ T7267] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1474: bg 0: block 248: padding at end of block bitmap is not set
[   86.232452][ T7267] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1474: Failed to acquire dquot type 1
[   86.249057][ T7267] EXT4-fs (loop1): 1 truncate cleaned up
[   86.255970][ T7267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.271803][ T7270] EXT4-fs (loop7): 1 orphan inode deleted
[   86.274182][ T7275] atomic_op ffff888112590528 conn xmit_atomic 0000000000000000
[   86.287498][   T31] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[   86.288306][ T7270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.312337][ T7270] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.368794][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.379514][ T6582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.551736][ T7313] capability: warning: `syz.1.1483' uses 32-bit capabilities (legacy support in use)
[   86.563929][ T7310] loop5: detected capacity change from 0 to 512
[   86.588836][ T7310] EXT4-fs (loop5): 1 orphan inode deleted
[   86.611930][   T58] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1
[   86.624479][ T7310] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.866465][ T7354] loop1: detected capacity change from 0 to 1024
[   86.873121][ T7354] EXT4-fs: Ignoring removed orlov option
[   86.881036][ T7356] loop8: detected capacity change from 0 to 512
[   86.882061][ T7354] /dev/loop1: Can't open blockdev
[   86.921873][ T7356] EXT4-fs (loop8): 1 orphan inode deleted
[   86.934442][ T7356] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.945337][   T31] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[   87.202628][ T7400] usb usb1: usbfs: process 7400 (syz.7.1520) did not claim interface 0 before use
[   87.226948][ T7404] loop1: detected capacity change from 0 to 128
[   87.269993][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.286941][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.303354][ T7411] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1524'.
[   87.414992][ T7434] loop8: detected capacity change from 0 to 1024
[   87.424739][ T7434] EXT4-fs: Ignoring removed orlov option
[   87.437785][ T7434] /dev/loop8: Can't open blockdev
[   87.663487][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1545'.
[   87.858813][ T7464] loop7: detected capacity change from 0 to 1024
[   87.877926][ T7464] EXT4-fs: Ignoring removed orlov option
[   87.884003][ T7464] /dev/loop7: Can't open blockdev
[   88.054580][ T7488] C: renamed from team_slave_0
[   88.072542][ T7488] netlink: 'syz.1.1560': attribute type 1 has an invalid length.
[   88.080588][ T7488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   88.191225][ T7502] netlink: 'syz.8.1569': attribute type 12 has an invalid length.
[   88.199290][ T7502] netlink: 'syz.8.1569': attribute type 29 has an invalid length.
[   88.207201][ T7502] netlink: 'syz.8.1569': attribute type 2 has an invalid length.
[   88.238499][ T7500] loop5: detected capacity change from 0 to 1024
[   88.255743][ T7500] EXT4-fs: Ignoring removed orlov option
[   88.261846][ T7500] /dev/loop5: Can't open blockdev
[   88.423654][ T7532] netlink: '+}[@': attribute type 13 has an invalid length.
[   88.517135][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.524403][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.591720][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.610505][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.711043][ T7532] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.720079][ T7532] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.729024][ T7532] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.737945][ T7532] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.880948][ T7565] __nla_validate_parse: 3 callbacks suppressed
[   88.880967][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1596'.
[   88.926666][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.937604][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.949426][ T7575] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1602'.
[   88.985717][ T7583] C: renamed from team_slave_0
[   88.992090][ T7583] netlink: 'syz.7.1605': attribute type 1 has an invalid length.
[   89.000005][ T7583] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.052423][ T7588] C: renamed from team_slave_0 (while UP)
[   89.060526][ T7588] netlink: 'syz.8.1619': attribute type 1 has an invalid length.
[   89.068391][ T7588] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.094286][ T7592] loop7: detected capacity change from 0 to 512
[   89.102920][ T7592] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   89.114291][ T7592] EXT4-fs (loop7): 1 truncate cleaned up
[   89.300249][ T7611] loop8: detected capacity change from 0 to 8192
[   89.308634][ T7611] syz.8.1628: attempt to access beyond end of device
[   89.308634][ T7611] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   89.337389][ T7611] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   89.345310][ T7611] FAT-fs (loop8): Filesystem has been set read-only
[   89.352982][ T7611] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   89.361993][ T7611] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   89.414579][ T7623] C: renamed from team_slave_0 (while UP)
[   89.424087][ T7623] netlink: 'syz.6.1622': attribute type 1 has an invalid length.
[   89.432010][ T7623] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.464617][ T7631] loop8: detected capacity change from 0 to 764
[   89.472177][   T29] kauditd_printk_skb: 237 callbacks suppressed
[   89.472191][   T29] audit: type=1400 audit(1744558132.683:2748): avc:  denied  { mount } for  pid=7627 comm="syz.8.1626" name="/" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   89.519466][   T29] audit: type=1326 audit(1744558132.733:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   89.542983][   T29] audit: type=1326 audit(1744558132.733:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   89.580890][ T6852] Symlink component flag not implemented
[   89.586671][ T6852] Symlink component flag not implemented
[   89.601615][ T7640] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1633'.
[   89.612654][   T29] audit: type=1326 audit(1744558132.783:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   89.636235][   T29] audit: type=1326 audit(1744558132.783:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   89.660262][   T29] audit: type=1326 audit(1744558132.783:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1e4d169 code=0x7ffc0000
[   89.683867][   T29] audit: type=1400 audit(1744558132.783:2754): avc:  denied  { mounton } for  pid=7627 comm="syz.8.1626" path="/73/file1/file0" dev="loop8" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1
[   89.707432][   T29] audit: type=1400 audit(1744558132.793:2755): avc:  denied  { unmount } for  pid=6852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   89.727586][   T29] audit: type=1326 audit(1744558132.823:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   89.751351][   T29] audit: type=1326 audit(1744558132.823:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1487bad169 code=0x7ffc0000
[   89.869662][ T7651] loop8: detected capacity change from 0 to 8192
[   89.968378][ T7673] loop6: detected capacity change from 0 to 8192
[   89.978807][ T7673] syz.6.1648: attempt to access beyond end of device
[   89.978807][ T7673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   90.001044][ T7677] netlink: '+}[@': attribute type 13 has an invalid length.
[   90.013567][ T7673] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[   90.021485][ T7673] FAT-fs (loop6): Filesystem has been set read-only
[   90.071071][ T7673] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[   90.086697][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.093948][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.104114][ T7673] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[   90.184419][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.202668][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.248844][ T7677] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.257999][ T7677] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.267004][ T7677] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.276042][ T7677] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.373870][ T7714] loop1: detected capacity change from 0 to 512
[   90.380474][ T7714] EXT4-fs: Ignoring removed orlov option
[   90.386937][ T7714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.404492][ T7716] loop5: detected capacity change from 0 to 2048
[   90.416982][ T7714] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.490533][ T7723] loop8: detected capacity change from 0 to 8192
[   90.501958][ T7723] syz.8.1669: attempt to access beyond end of device
[   90.501958][ T7723] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   90.528010][ T7723] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   90.536168][ T7723] FAT-fs (loop8): Filesystem has been set read-only
[   90.547178][ T7725] loop1: detected capacity change from 0 to 8192
[   90.556134][ T7723] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   90.558354][ T7725] syz.1.1668: attempt to access beyond end of device
[   90.558354][ T7725] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   90.564420][ T7723] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   90.580722][ T7725] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   90.593326][ T7725] FAT-fs (loop1): Filesystem has been set read-only
[   90.601049][ T7725] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   90.609315][ T7725] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   90.630983][ T7731] netlink: 'syz.5.1674': attribute type 12 has an invalid length.
[   90.639029][ T7731] netlink: 'syz.5.1674': attribute type 29 has an invalid length.
[   90.646895][ T7731] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1674'.
[   90.656220][ T7731] netlink: 'syz.5.1674': attribute type 2 has an invalid length.
[   90.664049][ T7731] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1674'.
[   90.800649][ T7755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1684'.
[   90.826476][ T7746] loop7: detected capacity change from 0 to 8192
[   90.850337][ T7759] loop5: detected capacity change from 0 to 512
[   90.857255][ T7759] EXT4-fs: Ignoring removed orlov option
[   90.863201][ T7759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.889041][ T7759] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.015711][ T7782] loop1: detected capacity change from 0 to 2048
[   91.110028][ T7795] loop5: detected capacity change from 0 to 8192
[   91.126700][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1704'.
[   91.136559][ T7795]  loop5: p1 p2 < > p3 p4 < p5 >
[   91.141538][ T7795] loop5: partition table partially beyond EOD, truncated
[   91.159044][ T7795] loop5: p1 size 100663296 extends beyond EOD, truncated
[   91.179093][ T7795] loop5: p2 start 591104 is beyond EOD, truncated
[   91.185675][ T7795] loop5: p3 start 33572980 is beyond EOD, truncated
[   91.194687][ T7795] loop5: p5 size 100663296 extends beyond EOD, truncated
[   91.336397][ T7820] loop6: detected capacity change from 0 to 2048
[   91.353127][ T7822] loop5: detected capacity change from 0 to 2048
[   91.502039][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1725'.
[   91.511072][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1725'.
[   91.526029][ T7843] wireguard0: entered promiscuous mode
[   91.531571][ T7843] wireguard0: entered allmulticast mode
[   91.587023][ T7848] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1726'.
[   91.651010][ T7864] loop8: detected capacity change from 0 to 2048
[   91.793985][ T7890] loop8: detected capacity change from 0 to 128
[   92.474000][ T7944] loop5: detected capacity change from 0 to 128
[   92.705956][ T7980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7980 comm=syz.6.1794
[   92.803673][ T7990] loop6: detected capacity change from 0 to 128
[   93.250468][ T8021] loop6: detected capacity change from 0 to 1024
[   93.290379][ T8031] loop5: detected capacity change from 0 to 128
[   93.328768][ T8035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8035 comm=syz.5.1811
[   93.515893][ T8059] loop1: detected capacity change from 0 to 128
[   93.707138][ T8077] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   93.707256][  T999] IPVS: starting estimator thread 0...
[   93.777684][ T8089] bond1: entered promiscuous mode
[   93.782815][ T8089] bond1: entered allmulticast mode
[   93.788756][ T8089] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.797959][ T8089] bond1 (unregistering): Released all slaves
[   93.809876][ T8091] batadv_slave_0: entered promiscuous mode
[   93.817041][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.825553][ T8083] IPVS: using max 2352 ests per chain, 117600 per kthread
[   93.835706][ T8091] batadv_slave_0 (unregistering): left promiscuous mode
[   93.843023][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.895351][ T8099] loop1: detected capacity change from 0 to 1024
[   94.015589][ T8113] __nla_validate_parse: 8 callbacks suppressed
[   94.015608][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1846'.
[   94.042670][ T8115] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1847'.
[   94.118802][ T8118] loop6: detected capacity change from 0 to 764
[   94.213816][   T23] IPVS: starting estimator thread 0...
[   94.214020][ T8126] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   94.277593][ T8140] loop5: detected capacity change from 0 to 1024
[   94.306578][ T8133] IPVS: using max 2352 ests per chain, 117600 per kthread
[   94.338689][ T8147] netlink: 'syz.1.1858': attribute type 4 has an invalid length.
[   94.358699][ T8147] netlink: 'syz.1.1858': attribute type 4 has an invalid length.
[   94.373195][ T8149] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1860'.
[   94.401351][ T8153] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1862'.
[   94.429785][ T8155] netem: change failed
[   94.485225][   T29] kauditd_printk_skb: 343 callbacks suppressed
[   94.485238][   T29] audit: type=1326 audit(1744558137.703:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   94.528260][   T29] audit: type=1326 audit(1744558137.733:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   94.552007][   T29] audit: type=1326 audit(1744558137.733:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   94.575465][   T29] audit: type=1326 audit(1744558137.733:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ba5d169 code=0x7ffc0000
[   94.603157][ T8164] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   94.610278][ T8165] loop1: detected capacity change from 0 to 764
[   94.617292][ T3371] IPVS: starting estimator thread 0...
[   94.663713][ T8171] bond1: entered promiscuous mode
[   94.668829][ T8171] bond1: entered allmulticast mode
[   94.674226][ T8171] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.683204][ T8171] bond1 (unregistering): Released all slaves
[   94.715161][ T8169] IPVS: using max 2352 ests per chain, 117600 per kthread
[   95.038746][ T8202] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1894'.
[   95.060614][   T36] IPVS: starting estimator thread 0...
[   95.066602][ T8198] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   95.132905][ T8209] loop8: detected capacity change from 0 to 764
[   95.165306][ T8205] IPVS: using max 2352 ests per chain, 117600 per kthread
[   95.286436][ T8224] batadv_slave_0: entered promiscuous mode
[   95.292791][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1891'.
[   95.302979][ T8224] batadv_slave_0 (unregistering): left promiscuous mode
[   95.310379][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.362338][ T8229] netem: change failed
[   95.403025][ T8235] loop8: detected capacity change from 0 to 2048
[   95.466603][ T8235]  loop8: p1 < > p4
[   95.473008][ T8235] loop8: p4 size 8388608 extends beyond EOD, truncated
[   95.522431][ T8243] loop7: detected capacity change from 0 to 128
[   95.536866][ T8245] bond1: entered promiscuous mode
[   95.541950][ T8245] bond1: entered allmulticast mode
[   95.548370][ T8245] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.561483][ T8245] bond1 (unregistering): Released all slaves
[   95.569201][ T8243] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.674876][ T8256] loop8: detected capacity change from 0 to 512
[   95.682875][ T8256] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   95.758858][ T8256] EXT4-fs (loop8): 1 truncate cleaned up
[   95.781021][ T8256] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.1907: corrupted xattr block 33: invalid header
[   95.800277][ T8256] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.1907: corrupted xattr block 33: invalid header
[   95.818163][   T29] audit: type=1400 audit(1744558139.033:3105): avc:  denied  { read } for  pid=8275 comm="syz.1.1916" path="socket:[20365]" dev="sockfs" ino=20365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   95.879656][ T8256] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117)
[   95.912153][ T8284] loop1: detected capacity change from 0 to 512
[   95.921326][ T8284] EXT4-fs: Ignoring removed oldalloc option
[   95.948828][ T8284] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1919: Parent and EA inode have the same ino 15
[   95.962737][ T8284] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1919: Parent and EA inode have the same ino 15
[   95.978112][ T8284] EXT4-fs (loop1): 1 orphan inode deleted
[   96.242856][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'.
[   96.288381][ T8309] erspan0: entered promiscuous mode
[   96.302474][ T8309] macvtap1: entered promiscuous mode
[   96.308413][ T8309] macvtap1: entered allmulticast mode
[   96.313885][ T8309] erspan0: entered allmulticast mode
[   96.346538][ T8316] erspan0: left allmulticast mode
[   96.351778][ T8316] erspan0: left promiscuous mode
[   96.467273][ T8337] capability: warning: `syz.5.1938' uses deprecated v2 capabilities in a way that may be insecure
[   96.524020][ T8344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   96.602431][ T8346] loop5: detected capacity change from 0 to 2048
[   96.667237][ T8346]  loop5: p1 < > p4
[   96.671855][ T8346] loop5: p4 size 8388608 extends beyond EOD, truncated
[   96.758855][ T8353] loop8: detected capacity change from 0 to 512
[   96.770908][ T8353] EXT4-fs: Ignoring removed oldalloc option
[   96.790025][ T8353] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1944: Parent and EA inode have the same ino 15
[   96.804558][ T8353] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1944: Parent and EA inode have the same ino 15
[   96.823380][ T8353] EXT4-fs (loop8): 1 orphan inode deleted
[   96.854317][ T8367] loop8: detected capacity change from 0 to 128
[   96.863448][ T8367] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   96.923264][ T8373] loop1: detected capacity change from 0 to 512
[   96.930564][ T8373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.948384][ T8373] EXT4-fs (loop1): 1 truncate cleaned up
[   96.963051][ T8373] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.1.1950: corrupted xattr block 33: invalid header
[   96.977596][ T8373] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.1950: corrupted xattr block 33: invalid header
[   96.978191][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1954'.
[   97.004358][ T8380] macvtap1: entered promiscuous mode
[   97.009715][ T8380] erspan0: entered promiscuous mode
[   97.012143][ T8373] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117)
[   97.015332][ T8380] macvtap1: entered allmulticast mode
[   97.029732][ T8380] erspan0: entered allmulticast mode
[   97.039849][ T8383] erspan0: left allmulticast mode
[   97.044933][ T8383] erspan0: left promiscuous mode
[   97.097799][ T8388] loop7: detected capacity change from 0 to 2048
[   97.125674][ T8388]  loop7: p1 < > p4
[   97.130578][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'.
[   97.141166][ T8388] loop7: p4 size 8388608 extends beyond EOD, truncated
[   97.156531][ T8394] erspan0: entered promiscuous mode
[   97.168691][ T8394] macvtap1: entered promiscuous mode
[   97.174417][ T8394] macvtap1: entered allmulticast mode
[   97.179944][ T8394] erspan0: entered allmulticast mode
[   97.197789][ T8404] erspan0: left allmulticast mode
[   97.203071][ T8404] erspan0: left promiscuous mode
[   97.210807][ T8402] loop6: detected capacity change from 0 to 512
[   97.219939][ T8402] EXT4-fs: Ignoring removed oldalloc option
[   97.234653][ T8402] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1961: Parent and EA inode have the same ino 15
[   97.250293][ T8402] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1961: Parent and EA inode have the same ino 15
[   97.263517][ T8402] EXT4-fs (loop6): 1 orphan inode deleted
[   97.299071][   T29] audit: type=1400 audit(1744558140.513:3106): avc:  denied  { map } for  pid=8407 comm="syz.7.1977" path="socket:[22654]" dev="sockfs" ino=22654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   97.322480][   T29] audit: type=1400 audit(1744558140.513:3107): avc:  denied  { execmem } for  pid=8407 comm="syz.7.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   97.322810][ T8408] loop1: detected capacity change from 0 to 2048
[   97.341950][   T29] audit: type=1400 audit(1744558140.513:3108): avc:  denied  { read accept } for  pid=8407 comm="syz.7.1977" path="socket:[22654]" dev="sockfs" ino=22654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   97.353786][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1976'.
[   97.388206][ T8414] macvtap1: entered promiscuous mode
[   97.393554][ T8414] gretap0: entered promiscuous mode
[   97.396980][ T8408]  loop1: p1 < > p4
[   97.398937][ T8414] macvtap1: entered allmulticast mode
[   97.408093][ T8408] loop1: p4 size 8388608 extends beyond EOD, 
[   97.408104][ T8414] gretap0: entered allmulticast mode
[   97.408195][ T8408] ==================================================================
[   97.408226][ T8408] BUG: KCSAN: data-race in data_push_tail / string
[   97.408260][ T8408] 
[   97.408268][ T8408] write to 0xffffffff88e3f6f0 of 1 bytes by task 8414 on cpu 0:
[   97.408287][ T8408]  string+0x17d/0x210
[   97.408312][ T8408]  vsnprintf+0x539/0x8a0
[   97.408333][ T8408]  pointer+0x849/0xcf0
[   97.408352][ T8408]  vsnprintf+0x48f/0x8a0
[   97.408371][ T8408]  vscnprintf+0x42/0x90
[   97.408391][ T8408]  printk_sprint+0x30/0x2d0
[   97.408415][ T8408]  vprintk_store+0x583/0x860
[   97.408441][ T8408]  vprintk_emit+0x1a0/0x6c0
[   97.408473][ T8408]  vprintk_default+0x26/0x30
[   97.408503][ T8408]  vprintk+0x1d/0x30
[   97.408533][ T8408]  _printk+0x7f/0xb0
[   97.408554][ T8408]  __netdev_printk+0x2d1/0x3e0
[   97.408581][ T8408]  netdev_info+0x9e/0xd0
[   97.408617][ T8408]  netif_set_allmulti+0x15f/0x250
[   97.408643][ T8408]  dev_set_allmulti+0xd4/0x190
[   97.408675][ T8408]  macvlan_change_rx_flags+0xac/0x150
[   97.408707][ T8408]  netif_set_allmulti+0x191/0x250
[   97.408729][ T8408]  __dev_change_flags+0x32b/0x410
[   97.408753][ T8408]  rtnl_newlink_create+0x36a/0x640
[   97.408773][ T8408]  rtnl_newlink+0xf38/0x12d0
[   97.408805][ T8408]  rtnetlink_rcv_msg+0x65a/0x740
[   97.408835][ T8408]  netlink_rcv_skb+0x12f/0x230
[   97.408865][ T8408]  rtnetlink_rcv+0x1c/0x30
[   97.408895][ T8408]  netlink_unicast+0x605/0x6c0
[   97.408918][ T8408]  netlink_sendmsg+0x609/0x720
[   97.408946][ T8408]  __sock_sendmsg+0x140/0x180
[   97.408963][ T8408]  ____sys_sendmsg+0x350/0x4e0
[   97.408988][ T8408]  __sys_sendmsg+0x1a0/0x240
[   97.409014][ T8408]  __x64_sys_sendmsg+0x46/0x50
[   97.409044][ T8408]  x64_sys_call+0x26f3/0x2e10
[   97.409069][ T8408]  do_syscall_64+0xc9/0x1c0
[   97.409105][ T8408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.409130][ T8408] 
[   97.409139][ T8408] read to 0xffffffff88e3f6f0 of 8 bytes by task 8408 on cpu 1:
[   97.409159][ T8408]  data_push_tail+0x107/0x440
[   97.409204][ T8408]  data_alloc+0xbd/0x2c0
[   97.409228][ T8408]  prb_reserve+0x86a/0xb80
[   97.409253][ T8408]  vprintk_store+0x552/0x860
[   97.409282][ T8408]  vprintk_emit+0x1a0/0x6c0
[   97.409311][ T8408]  vprintk_default+0x26/0x30
[   97.409342][ T8408]  vprintk+0x1d/0x30
[   97.409379][ T8408]  _printk+0x7f/0xb0
[   97.409406][ T8408]  bdev_disk_changed+0x87a/0xcd0
[   97.409436][ T8408]  loop_set_status+0x531/0x5d0
[   97.409471][ T8408]  lo_ioctl+0x81a/0x1570
[   97.409500][ T8408]  blkdev_ioctl+0x35b/0x450
[   97.409533][ T8408]  __se_sys_ioctl+0xc9/0x140
[   97.409565][ T8408]  __x64_sys_ioctl+0x43/0x50
[   97.409596][ T8408]  x64_sys_call+0x168d/0x2e10
[   97.409624][ T8408]  do_syscall_64+0xc9/0x1c0
[   97.409666][ T8408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.409689][ T8408] 
[   97.409696][ T8408] value changed: 0x00000000ffffe140 -> 0x746c756d6c6c6120
[   97.409710][ T8408] 
[   97.409716][ T8408] Reported by Kernel Concurrency Sanitizer on:
[   97.409741][ T8408] CPU: 1 UID: 0 PID: 8408 Comm: syz.1.1975 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) 
[   97.409772][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   97.409788][ T8408] ==================================================================
[   97.457327][ T8417] loop6: detected capacity change from 0 to 128
[   97.458464][ T8408] truncated
[   97.488141][ T8417] EXT4-fs mount: 36 callbacks suppressed
[   97.488161][ T8417] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.759331][ T8413] gretap0: left allmulticast mode
[   97.759842][ T8417] ext4 filesystem being mounted at /319/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   97.764392][ T8413] gretap0: left promiscuous mode
[   97.833101][ T4533] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.