last executing test programs:

2m8.418001324s ago: executing program 32 (id=257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29)

1m55.132085891s ago: executing program 33 (id=721):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

1m51.115954064s ago: executing program 34 (id=822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)

1m22.372812774s ago: executing program 35 (id=1812):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m18.42854675s ago: executing program 4 (id=1934):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x57b, &(0x7f0000000680)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

1m18.371390405s ago: executing program 4 (id=1936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r2, &(0x7f0000000000))

1m18.30594085s ago: executing program 4 (id=1940):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1m18.260843404s ago: executing program 4 (id=1942):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00')
pivot_root(0x0, 0x0)

1m18.258069474s ago: executing program 4 (id=1944):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

1m17.992715155s ago: executing program 4 (id=1954):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

1m17.967403797s ago: executing program 36 (id=1954):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

1m17.103972057s ago: executing program 0 (id=1977):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
unshare(0x6a040000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)

1m16.543721402s ago: executing program 0 (id=1988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)

1m16.478816937s ago: executing program 0 (id=1990):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m16.173314082s ago: executing program 0 (id=1995):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00')
pivot_root(0x0, 0x0)

1m16.149428043s ago: executing program 0 (id=1996):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

1m15.916625052s ago: executing program 0 (id=1998):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

1m15.916402432s ago: executing program 37 (id=1998):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

1m13.020661285s ago: executing program 6 (id=2054):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94)
sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x48040)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

1m12.910799343s ago: executing program 6 (id=2057):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0)

1m12.83138356s ago: executing program 6 (id=2060):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)

1m12.647263065s ago: executing program 6 (id=2068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)

1m12.618455917s ago: executing program 6 (id=2069):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat(r1, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4)

1m12.472486619s ago: executing program 6 (id=2079):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
statx(0xffffffffffffff9c, 0x0, 0x4000, 0x4, 0x0)

1m12.472352969s ago: executing program 38 (id=2079):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
statx(0xffffffffffffff9c, 0x0, 0x4000, 0x4, 0x0)

33.728604251s ago: executing program 9 (id=3571):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

33.512420088s ago: executing program 9 (id=3574):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

33.478228661s ago: executing program 9 (id=3577):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

32.999221599s ago: executing program 9 (id=3588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

32.876804539s ago: executing program 9 (id=3590):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

32.700993043s ago: executing program 9 (id=3599):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r1], 0x50)

32.680075625s ago: executing program 39 (id=3599):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r1], 0x50)

10.146083675s ago: executing program 8 (id=4361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])

10.131754926s ago: executing program 8 (id=4362):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x5, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

9.186015833s ago: executing program 8 (id=4388):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x24000000)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

8.252433837s ago: executing program 8 (id=4418):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

8.194293422s ago: executing program 8 (id=4420):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59241f0})
close(r2)

8.194055782s ago: executing program 8 (id=4422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0xaf47f70226ba3085)

8.161967675s ago: executing program 40 (id=4422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0xaf47f70226ba3085)

1.305437506s ago: executing program 1 (id=4657):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3)

1.148211148s ago: executing program 5 (id=4662):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x800)

1.102464192s ago: executing program 1 (id=4664):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x1, 0x0)

1.063308655s ago: executing program 5 (id=4665):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000260005", @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800)
recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

1.038700317s ago: executing program 5 (id=4666):
r0 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116})
close_range(r0, r0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
timerfd_create(0x1, 0x800)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)

888.295349ms ago: executing program 2 (id=4670):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x58)

860.638512ms ago: executing program 2 (id=4671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)

791.988857ms ago: executing program 2 (id=4675):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

732.204962ms ago: executing program 2 (id=4676):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
unshare(0x26020480)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000180), 0x0}, 0x20)

684.091636ms ago: executing program 2 (id=4682):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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")
statfs(&(0x7f0000000000)='./file1\x00', 0x0)

615.349141ms ago: executing program 2 (id=4686):
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=',$:\x00', 0xfffffffffffffff8)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x9, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x40, 0x202, 0x8}})

205.744684ms ago: executing program 7 (id=4701):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='timer_start\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

205.218434ms ago: executing program 3 (id=4702):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3c8a2bddb1182129, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil)

187.377865ms ago: executing program 7 (id=4703):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044004}, 0x0)

166.929067ms ago: executing program 3 (id=4704):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
getrandom(0x0, 0x0, 0x1)

166.346917ms ago: executing program 3 (id=4705):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf2508"], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

135.17552ms ago: executing program 7 (id=4706):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x33, 0x2})

134.77574ms ago: executing program 1 (id=4707):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0xc, 0x2, 0xffffffff, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9})

125.19836ms ago: executing program 3 (id=4708):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

123.72108ms ago: executing program 5 (id=4709):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)

112.728322ms ago: executing program 7 (id=4710):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
syz_read_part_table(0x593, &(0x7f00000005c0)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
close(r0)

96.920843ms ago: executing program 1 (id=4711):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000)

84.841593ms ago: executing program 5 (id=4712):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0)

50.924166ms ago: executing program 7 (id=4713):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90)

40.916387ms ago: executing program 3 (id=4714):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r2, &(0x7f00000000c0)='system_u:object_r:xen_device_t:s0\x00', 0x22)

40.456417ms ago: executing program 5 (id=4715):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f00000009c0)="3bf58d", 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xffff34f0}, 0x94)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)

35.137848ms ago: executing program 1 (id=4716):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

1.138821ms ago: executing program 3 (id=4717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000001}, 0x18)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde3}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xd7b463f9eab17a7e}, 0x4800)

541.68µs ago: executing program 7 (id=4718):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', r2}, 0x18)

0s ago: executing program 1 (id=4719):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0x6}, 0x10)

kernel console output (not intermixed with test programs):

type 0
[  121.494646][T10380] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2831: corrupted inode contents
[  121.508012][T10380] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2831: mark_inode_dirty error
[  121.519699][T10380] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2831: corrupted inode contents
[  121.531992][T10380] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2831: mark_inode_dirty error
[  121.543629][T10380] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2831: corrupted inode contents
[  121.555803][T10380] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  121.564792][T10380] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2831: corrupted inode contents
[  121.577097][T10380] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2831: mark_inode_dirty error
[  121.588900][T10380] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  121.601093][T10380] EXT4-fs (loop5): 1 truncate cleaned up
[  121.640221][   T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1)
[  121.819513][T10434] wireguard0: entered promiscuous mode
[  121.825108][T10434] wireguard0: entered allmulticast mode
[  121.839079][T10439] loop8: detected capacity change from 0 to 512
[  121.848210][T10439] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  121.862044][T10439] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2854: invalid indirect mapped block 4294967295 (level 0)
[  121.878843][T10439] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2854: invalid indirect mapped block 4294967295 (level 1)
[  121.902107][T10439] EXT4-fs (loop8): 1 orphan inode deleted
[  121.908010][T10439] EXT4-fs (loop8): 1 truncate cleaned up
[  121.927761][T10439] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  122.057928][ T1924] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.071215][ T1924] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.086272][ T1924] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.112167][ T1924] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.126161][T10465] loop5: detected capacity change from 0 to 128
[  122.196906][T10478] loop5: detected capacity change from 0 to 128
[  122.272947][T10485] SELinux: failed to load policy
[  122.293351][T10487] __nla_validate_parse: 14 callbacks suppressed
[  122.293369][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'.
[  122.365623][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'.
[  122.382343][T10490] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  122.479275][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'.
[  122.480937][T10507] loop8: detected capacity change from 0 to 128
[  122.494139][ T1924] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.502825][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'.
[  122.504581][ T1924] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.521335][ T1924] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.530129][ T1924] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.569036][T10512] netlink: 'syz.5.2884': attribute type 1 has an invalid length.
[  122.582923][T10512] bond1: entered promiscuous mode
[  122.588227][T10512] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.606695][T10512] 8021q: adding VLAN 0 to HW filter on device batadv2
[  122.622274][T10512] bond1: (slave batadv2): making interface the new active one
[  122.629840][T10512] batadv2: entered promiscuous mode
[  122.636403][T10512] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  122.648230][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2899'.
[  122.670974][T10517] netem: change failed
[  122.748297][   T29] kauditd_printk_skb: 237 callbacks suppressed
[  122.748316][   T29] audit: type=1326 audit(122.723:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.777970][   T29] audit: type=1326 audit(122.723:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.801044][   T29] audit: type=1326 audit(122.723:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.823988][   T29] audit: type=1326 audit(122.723:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.847067][   T29] audit: type=1326 audit(122.723:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.870006][   T29] audit: type=1326 audit(122.723:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.893185][   T29] audit: type=1326 audit(122.723:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.916191][   T29] audit: type=1326 audit(122.723:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.970967][   T29] audit: type=1326 audit(122.763:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  122.994022][   T29] audit: type=1326 audit(122.763:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.1.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  123.025951][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.035411][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.061641][T10546] netlink: 'syz.9.2903': attribute type 1 has an invalid length.
[  123.075317][T10546] bond1: entered promiscuous mode
[  123.080629][T10546] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.116330][T10546] 8021q: adding VLAN 0 to HW filter on device batadv1
[  123.125469][T10546] bond1: (slave batadv1): making interface the new active one
[  123.133124][T10546] batadv1: entered promiscuous mode
[  123.139586][T10546] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  123.224651][T10569] loop8: detected capacity change from 0 to 512
[  123.241407][T10569] EXT4-fs: Ignoring removed nobh option
[  123.258110][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.2910: corrupted inode contents
[  123.270278][T10569] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.2910: mark_inode_dirty error
[  123.283232][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.2910: corrupted inode contents
[  123.295577][T10569] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.2910: mark_inode_dirty error
[  123.307443][T10569] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2910: Failed to acquire dquot type 0
[  123.323034][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2910: corrupted inode contents
[  123.340183][T10569] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.2910: mark_inode_dirty error
[  123.364445][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2910: corrupted inode contents
[  123.378032][T10583] loop9: detected capacity change from 0 to 512
[  123.384831][T10569] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.2910: mark_inode_dirty error
[  123.396939][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2910: corrupted inode contents
[  123.409101][T10583] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  123.418397][T10569] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[  123.428328][T10569] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2910: corrupted inode contents
[  123.429425][T10583] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended
[  123.447037][T10569] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.2910: mark_inode_dirty error
[  123.461341][T10583] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.2919: inode #15: comm syz.9.2919: iget: illegal inode #
[  123.463865][T10569] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[  123.483648][T10569] EXT4-fs (loop8): 1 truncate cleaned up
[  123.484346][T10583] EXT4-fs (loop9): Remounting filesystem read-only
[  123.524614][   T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1
[  123.538045][T10583] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  123.587326][T10595] netlink: 'syz.3.2922': attribute type 1 has an invalid length.
[  123.607224][T10596] bond2: entered promiscuous mode
[  123.612396][T10596] bond2: entered allmulticast mode
[  123.617740][T10596] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.629488][T10596] bond2 (unregistering): Released all slaves
[  123.653166][T10595] bond1: entered promiscuous mode
[  123.658336][T10595] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.670743][T10605] 8021q: adding VLAN 0 to HW filter on device batadv1
[  123.679353][T10605] bond1: (slave batadv1): making interface the new active one
[  123.686902][T10605] batadv1: entered promiscuous mode
[  123.696212][T10605] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  123.883824][T10626] loop3: detected capacity change from 0 to 512
[  123.891136][T10626] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  123.901102][T10626] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[  123.913249][T10626] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.2934: inode #15: comm syz.3.2934: iget: illegal inode #
[  123.926512][T10626] EXT4-fs (loop3): Remounting filesystem read-only
[  123.938035][ T3385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3385 comm=kworker/0:3
[  123.959369][T10626] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  123.982467][T10631] loop5: detected capacity change from 0 to 2048
[  123.996324][T10631] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2937: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  124.013375][T10631] EXT4-fs (loop5): Remounting filesystem read-only
[  124.138096][T10660] vhci_hcd: invalid port number 85
[  124.143317][T10660] vhci_hcd: default hub control req: 0501 v0005 i0055 l0
[  124.185656][T10665] netlink: 'syz.5.2953': attribute type 1 has an invalid length.
[  124.286547][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2959'.
[  124.308024][T10679] netem: change failed
[  124.313089][T10682] netlink: 464 bytes leftover after parsing attributes in process `syz.5.2960'.
[  125.023486][T10752] netlink: 'syz.9.2989': attribute type 1 has an invalid length.
[  125.200559][T10769] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[  125.212567][T10767] Falling back ldisc for ttyS3.
[  125.273610][T10779] netlink: 'syz.8.3002': attribute type 1 has an invalid length.
[  125.289153][T10779] bond1: entered promiscuous mode
[  125.306477][T10786] loop1: detected capacity change from 0 to 512
[  125.309815][T10779] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.321594][T10786] EXT4-fs: inline encryption not supported
[  125.331373][T10786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.344318][T10779] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.353152][T10779] bond1: (slave batadv1): making interface the new active one
[  125.360669][T10779] batadv1: entered promiscuous mode
[  125.368352][T10779] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  125.373259][T10786] EXT4-fs (loop1): 1 truncate cleaned up
[  125.427901][T10794] wireguard0: entered promiscuous mode
[  125.433539][T10794] wireguard0: entered allmulticast mode
[  125.486520][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3016'.
[  125.495625][T10811] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3016'.
[  125.507415][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3016'.
[  125.536810][T10817] random: crng reseeded on system resumption
[  125.568058][T10819] netlink: 'syz.1.3020': attribute type 3 has an invalid length.
[  125.769102][T10846] bond2: entered promiscuous mode
[  125.774259][T10846] bond2: entered allmulticast mode
[  125.781996][T10855] SELinux: failed to load policy
[  125.791165][T10846] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.804483][T10860] SELinux: security_context_str_to_sid () failed with errno=-22
[  125.826812][T10846] bond2 (unregistering): Released all slaves
[  125.932608][T10858] Falling back ldisc for ttyS3.
[  125.995482][T10883] SELinux: failed to load policy
[  126.243671][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.252315][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.430719][T10903] netlink: 'syz.9.3058': attribute type 3 has an invalid length.
[  126.677526][T10926] wireguard0: entered promiscuous mode
[  126.683228][T10926] wireguard0: entered allmulticast mode
[  126.780304][T10931] random: crng reseeded on system resumption
[  126.840528][T10941] loop9: detected capacity change from 0 to 128
[  126.890939][T10950] new mount options do not match the existing superblock, will be ignored
[  126.901378][T10951] loop8: detected capacity change from 0 to 128
[  127.118892][T10964] random: crng reseeded on system resumption
[  127.152142][T10970] loop9: detected capacity change from 0 to 512
[  127.158943][T10970] EXT4-fs: inline encryption not supported
[  127.159912][T10957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.173856][T10957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.181694][T10970] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  127.199195][T10970] EXT4-fs (loop9): 1 truncate cleaned up
[  127.249936][T10980] loop3: detected capacity change from 0 to 512
[  127.270467][T10980] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  127.592757][T11002] random: crng reseeded on system resumption
[  127.721922][T11014] loop5: detected capacity change from 0 to 512
[  127.738891][T11014] EXT4-fs: inline encryption not supported
[  127.749987][T11014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  127.771555][   T29] kauditd_printk_skb: 417 callbacks suppressed
[  127.771572][   T29] audit: type=1326 audit(127.743:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.800748][   T29] audit: type=1326 audit(127.743:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.823650][   T29] audit: type=1326 audit(127.743:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.857421][   T29] audit: type=1326 audit(127.753:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.867733][T11014] EXT4-fs (loop5): 1 truncate cleaned up
[  127.904741][   T29] audit: type=1326 audit(127.883:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.934477][   T29] audit: type=1326 audit(127.883:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.957562][   T29] audit: type=1326 audit(127.883:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  127.980493][   T29] audit: type=1326 audit(127.883:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  128.003451][   T29] audit: type=1326 audit(127.883:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  128.026275][   T29] audit: type=1326 audit(127.883:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  128.141510][T11038] program syz.1.3116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.232060][T11045] program syz.1.3120 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.298548][T11053] loop5: detected capacity change from 0 to 256
[  128.323982][T11053] FAT-fs (loop5): Directory bread(block 1285) failed
[  128.339191][T11057] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  128.421689][T11067] loop9: detected capacity change from 0 to 1024
[  128.428847][T11067] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  128.440280][T11067] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  128.755305][T11067] JBD2: no valid journal superblock found
[  128.761082][T11067] EXT4-fs (loop9): Could not load journal inode
[  129.292255][T11067] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  129.374007][T11083] __nla_validate_parse: 4 callbacks suppressed
[  129.374023][T11083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'.
[  129.389329][T11083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'.
[  129.528673][T11103] netlink: 'syz.5.3146': attribute type 1 has an invalid length.
[  129.536640][T11103] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3146'.
[  129.615123][T11113] SELinux: failed to load policy
[  129.663986][T11121] netlink: 'syz.5.3153': attribute type 1 has an invalid length.
[  129.776253][T11143] loop9: detected capacity change from 0 to 512
[  129.788496][T11143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  129.796915][T11143] System zones: 1-12
[  129.808311][T11143] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.3165: corrupted in-inode xattr: e_value size too large
[  129.824747][T11143] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3165: couldn't read orphan inode 15 (err -117)
[  129.841058][T11143] EXT4-fs mount: 34 callbacks suppressed
[  129.841076][T11143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.895017][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.070029][T11160] netlink: 'syz.9.3170': attribute type 1 has an invalid length.
[  130.565650][T11216] loop8: detected capacity change from 0 to 4096
[  130.591253][T11216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.654931][T11224] netlink: 'syz.9.3200': attribute type 4 has an invalid length.
[  130.662755][T11224] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3200'.
[  130.708421][   T36] IPVS: starting estimator thread 0...
[  130.729270][T11228] loop9: detected capacity change from 0 to 2048
[  130.800161][T11228]  loop9: p2 p3 p7
[  130.832649][T11230] IPVS: using max 2016 ests per chain, 100800 per kthread
[  130.870384][T11240] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  130.882807][T11240] SELinux: failed to load policy
[  130.984717][T11252] loop9: detected capacity change from 0 to 512
[  130.991256][T11252] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.011231][T11252] EXT4-fs (loop9): filesystem is read-only
[  131.025077][T11252] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  131.048125][T11252] EXT4-fs (loop9): filesystem is read-only
[  131.054089][T11252] EXT4-fs (loop9): orphan cleanup on readonly fs
[  131.060842][T11252] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #16: comm syz.9.3214: iget: bad i_size value: 648518346341360424
[  131.077268][T11252] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3214: couldn't read orphan inode 16 (err -117)
[  131.090010][T11252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  131.118554][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.180846][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3221'.
[  131.311993][T11287] netlink: 'syz.1.3228': attribute type 1 has an invalid length.
[  131.332054][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.349693][T11292] loop1: detected capacity change from 0 to 512
[  131.356767][T11292] EXT4-fs: Ignoring removed nobh option
[  131.387402][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.3232: corrupted inode contents
[  131.407247][T11292] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.3232: mark_inode_dirty error
[  131.438771][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.3232: corrupted inode contents
[  131.456779][T11292] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3232: mark_inode_dirty error
[  131.468613][T11292] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3232: Failed to acquire dquot type 0
[  131.490591][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3232: corrupted inode contents
[  131.513605][T11292] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.3232: mark_inode_dirty error
[  131.570276][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3232: corrupted inode contents
[  131.582830][T11312] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11312 comm=syz.9.3239
[  131.602846][T11292] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3232: mark_inode_dirty error
[  131.654681][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3232: corrupted inode contents
[  131.669593][T11292] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  131.684509][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3232: corrupted inode contents
[  131.699626][T11322] syzkaller1: entered promiscuous mode
[  131.705157][T11322] syzkaller1: entered allmulticast mode
[  131.711465][T11292] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.3232: mark_inode_dirty error
[  131.734663][T11292] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  131.745751][T11292] EXT4-fs (loop1): 1 truncate cleaned up
[  131.751987][T11292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.815183][ T8653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.942363][T11338] loop1: detected capacity change from 0 to 512
[  131.958085][T11338] EXT4-fs: Ignoring removed oldalloc option
[  131.967387][T11338] EXT4-fs (loop1): 1 truncate cleaned up
[  131.974531][T11338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.094247][ T8653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.486853][T11364] loop1: detected capacity change from 0 to 512
[  132.530289][T11364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.606569][T11364] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  132.706078][ T8653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.761527][T11404] syzkaller1: entered promiscuous mode
[  132.767099][T11404] syzkaller1: entered allmulticast mode
[  132.820122][T11410] loop3: detected capacity change from 0 to 512
[  132.845771][T11410] EXT4-fs: Ignoring removed nobh option
[  132.867028][T11418] loop8: detected capacity change from 0 to 512
[  132.885782][T11410] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3282: corrupted inode contents
[  132.899799][T11418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.916125][T11410] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.3282: mark_inode_dirty error
[  132.928276][T11410] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3282: corrupted inode contents
[  132.940270][T11418] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  132.941165][T11410] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3282: mark_inode_dirty error
[  132.966434][T11410] __quota_error: 147 callbacks suppressed
[  132.966447][T11410] Quota error (device loop3): write_blk: dquota write failed
[  132.981422][T11410] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  132.991505][T11410] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3282: Failed to acquire dquot type 0
[  133.008442][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.014946][T11410] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3282: corrupted inode contents
[  133.029546][T11410] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.3282: mark_inode_dirty error
[  133.041296][T11410] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3282: corrupted inode contents
[  133.054153][T11410] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3282: mark_inode_dirty error
[  133.070567][   T29] audit: type=1326 audit(133.043:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.093573][   T29] audit: type=1326 audit(133.043:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.116482][   T29] audit: type=1326 audit(133.043:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.139495][   T29] audit: type=1326 audit(133.043:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.162404][   T29] audit: type=1326 audit(133.043:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.185322][   T29] audit: type=1326 audit(133.043:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.185421][T11410] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3282: corrupted inode contents
[  133.208368][   T29] audit: type=1326 audit(133.043:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.223642][T11410] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  133.243062][   T29] audit: type=1326 audit(133.043:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.9.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8385ebe9 code=0x7ffc0000
[  133.290849][T11410] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3282: corrupted inode contents
[  133.303174][T11410] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.3282: mark_inode_dirty error
[  133.323837][T11410] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  133.339067][T11410] EXT4-fs (loop3): 1 truncate cleaned up
[  133.346059][T11410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.386842][T11450] syzkaller1: entered promiscuous mode
[  133.392598][T11450] syzkaller1: entered allmulticast mode
[  133.399168][ T8415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.566832][T11462] loop9: detected capacity change from 0 to 512
[  133.590260][T11462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.610559][T11462] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  133.639150][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.752940][T11472] netlink: 'syz.9.3307': attribute type 1 has an invalid length.
[  133.861901][T11484] loop9: detected capacity change from 0 to 512
[  133.868612][T11484] EXT4-fs: Ignoring removed nobh option
[  133.879155][T11485] netlink: 'syz.3.3322': attribute type 4 has an invalid length.
[  133.887013][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3322'.
[  133.899644][T11484] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3312: corrupted inode contents
[  133.917449][T11492] loop3: detected capacity change from 0 to 512
[  133.924573][T11492] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.935971][T11484] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.3312: mark_inode_dirty error
[  133.948344][T11492] EXT4-fs (loop3): filesystem is read-only
[  133.948878][T11484] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3312: corrupted inode contents
[  133.970498][T11492] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  133.985937][T11484] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3312: mark_inode_dirty error
[  133.986582][T11492] EXT4-fs (loop3): filesystem is read-only
[  134.002981][T11492] EXT4-fs (loop3): orphan cleanup on readonly fs
[  134.012230][T11492] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #16: comm syz.3.3314: iget: bad i_size value: 648518346341360424
[  134.016400][T11484] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3312: Failed to acquire dquot type 0
[  134.028578][T11492] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3314: couldn't read orphan inode 16 (err -117)
[  134.049216][T11492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  134.062122][T11484] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3312: corrupted inode contents
[  134.091030][T11484] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.3312: mark_inode_dirty error
[  134.104621][T11484] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3312: corrupted inode contents
[  134.117238][ T8415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.118093][T11484] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3312: mark_inode_dirty error
[  134.139413][T11484] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3312: corrupted inode contents
[  134.151567][T11484] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[  134.160426][T11484] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3312: corrupted inode contents
[  134.172773][T11484] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.3312: mark_inode_dirty error
[  134.184087][T11484] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[  134.193472][T11484] EXT4-fs (loop9): 1 truncate cleaned up
[  134.199452][T11484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.248966][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.531413][T11543] loop5: detected capacity change from 0 to 512
[  134.538926][T11543] EXT4-fs: Ignoring removed nobh option
[  134.555860][T11543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3334: corrupted inode contents
[  134.571563][T11543] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.3334: mark_inode_dirty error
[  134.589728][T11543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3334: corrupted inode contents
[  134.602551][T11543] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3334: mark_inode_dirty error
[  134.616675][T11543] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3334: Failed to acquire dquot type 0
[  134.628776][T11543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3334: corrupted inode contents
[  134.643037][T11543] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.3334: mark_inode_dirty error
[  134.663669][T11543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3334: corrupted inode contents
[  134.676035][T11543] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3334: mark_inode_dirty error
[  134.689753][T11543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3334: corrupted inode contents
[  134.702116][T11543] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  134.714082][T11543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3334: corrupted inode contents
[  134.728352][T11543] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.3334: mark_inode_dirty error
[  134.742794][T11543] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  134.754729][T11564] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  134.765908][T11543] EXT4-fs (loop5): 1 truncate cleaned up
[  134.771901][T11561] IPVS: stopping master sync thread 11564 ...
[  134.778402][T11543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.809569][ T4133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.828367][T11567] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2
[  134.859199][T11571] netlink: 24 bytes leftover after parsing attributes in process `+}[@'.
[  134.880713][T11574] loop9: detected capacity change from 0 to 512
[  134.888518][T11574] EXT4-fs: Ignoring removed oldalloc option
[  134.897506][T11574] EXT4-fs (loop9): 1 truncate cleaned up
[  134.905013][T11574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.992832][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.039085][T11593] loop8: detected capacity change from 0 to 512
[  135.046620][T11593] EXT4-fs: Ignoring removed nobh option
[  135.081889][T11593] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3357: corrupted inode contents
[  135.097497][T11593] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.3357: mark_inode_dirty error
[  135.111329][T11593] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3357: corrupted inode contents
[  135.128854][T11593] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3357: mark_inode_dirty error
[  135.141266][T11593] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3357: Failed to acquire dquot type 0
[  135.143324][T11603] netlink: 'syz.5.3363': attribute type 3 has an invalid length.
[  135.155334][T11593] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3357: corrupted inode contents
[  135.185978][T11593] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.3357: mark_inode_dirty error
[  135.200810][T11593] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3357: corrupted inode contents
[  135.217241][T11593] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3357: mark_inode_dirty error
[  135.229177][T11593] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3357: corrupted inode contents
[  135.244130][T11593] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[  135.271575][T11611] loop5: detected capacity change from 0 to 512
[  135.284945][T11593] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3357: corrupted inode contents
[  135.296681][T11611] EXT4-fs: Ignoring removed oldalloc option
[  135.304575][T11593] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.3357: mark_inode_dirty error
[  135.317262][T11593] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[  135.330527][T11593] EXT4-fs (loop8): 1 truncate cleaned up
[  135.338867][T11611] EXT4-fs (loop5): 1 truncate cleaned up
[  135.347704][T11593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.368775][T11611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.401159][T11622] loop1: detected capacity change from 0 to 2048
[  135.408565][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.471199][T11622]  loop1: p2 p3 p7
[  135.529505][ T4133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.596074][T11652] loop9: detected capacity change from 0 to 512
[  135.610609][T11652] EXT4-fs: Ignoring removed nobh option
[  135.655504][T11652] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3384: corrupted inode contents
[  135.683400][T11652] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.3384: mark_inode_dirty error
[  135.718132][T11652] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3384: corrupted inode contents
[  135.730413][T11652] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3384: mark_inode_dirty error
[  135.741990][T11652] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3384: Failed to acquire dquot type 0
[  135.757733][T11675] loop3: detected capacity change from 0 to 512
[  135.762587][T11652] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3384: corrupted inode contents
[  135.764602][T11675] EXT4-fs: Ignoring removed oldalloc option
[  135.786580][T11652] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.3384: mark_inode_dirty error
[  135.799765][T11675] EXT4-fs (loop3): 1 truncate cleaned up
[  135.808211][T11675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.825104][T11652] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3384: corrupted inode contents
[  135.842208][T11652] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3384: mark_inode_dirty error
[  135.855116][T11681] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3398'.
[  135.865387][T11681] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3398'.
[  135.877453][T11652] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3384: corrupted inode contents
[  135.900287][T11682] hub 8-0:1.0: USB hub found
[  135.904246][T11652] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[  135.906670][T11682] hub 8-0:1.0: 8 ports detected
[  135.923918][T11652] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3384: corrupted inode contents
[  135.946917][T11652] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.3384: mark_inode_dirty error
[  135.967658][T11652] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[  135.997527][ T8415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.010684][T11652] EXT4-fs (loop9): 1 truncate cleaned up
[  136.021984][T11652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.060496][T11698] loop8: detected capacity change from 0 to 128
[  136.061242][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.084896][T11698] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8)
[  136.093343][T11698] FAT-fs (loop8): Filesystem has been set read-only
[  136.112948][T11698] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522)
[  136.134741][T11698] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522)
[  136.202537][T11718] SELinux: security policydb version 17 (MLS) not backwards compatible
[  136.219726][T11722] bridge0: entered promiscuous mode
[  136.225398][T11718] SELinux: failed to load policy
[  136.231810][T11722] bridge0: port 3(macsec1) entered blocking state
[  136.238321][T11722] bridge0: port 3(macsec1) entered disabled state
[  136.257231][T11722] macsec1: entered allmulticast mode
[  136.262634][T11722] bridge0: entered allmulticast mode
[  136.278078][T11722] macsec1: left allmulticast mode
[  136.283169][T11722] bridge0: left allmulticast mode
[  136.288846][T11722] bridge0: left promiscuous mode
[  136.332531][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3426'.
[  136.414412][T11750] netlink: 'syz.5.3431': attribute type 1 has an invalid length.
[  136.489757][T11759] netlink: 'syz.1.3442': attribute type 4 has an invalid length.
[  136.497538][T11759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3442'.
[  137.222931][T11768] loop1: detected capacity change from 0 to 164
[  137.233858][T11772] loop8: detected capacity change from 0 to 512
[  137.240465][T11772] EXT4-fs: Ignoring removed oldalloc option
[  137.249762][T11768] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  137.268317][T11772] EXT4-fs (loop8): 1 truncate cleaned up
[  137.281348][T11772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.301522][T11768] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  137.385276][T11793] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3450'.
[  137.420492][T11793] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3450'.
[  137.474175][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.501417][T11806] hub 8-0:1.0: USB hub found
[  137.512359][T11806] hub 8-0:1.0: 8 ports detected
[  137.517398][T11810] loop8: detected capacity change from 0 to 512
[  137.525229][T11810] EXT4-fs: Ignoring removed oldalloc option
[  137.542353][T11810] EXT4-fs (loop8): 1 truncate cleaned up
[  137.552514][T11810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.624683][T11827] loop3: detected capacity change from 0 to 128
[  137.643231][T11827] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8)
[  137.651801][T11827] FAT-fs (loop3): Filesystem has been set read-only
[  137.660467][T11827] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522)
[  137.677520][T11827] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522)
[  137.682656][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.714567][T11833] loop8: detected capacity change from 0 to 512
[  137.721259][T11833] EXT4-fs: Ignoring removed oldalloc option
[  137.730846][T11833] EXT4-fs (loop8): 1 truncate cleaned up
[  137.740956][T11836] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3467'.
[  137.752357][T11833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.766661][T11836] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3467'.
[  137.860388][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.909811][T11854] hub 8-0:1.0: USB hub found
[  137.914820][T11854] hub 8-0:1.0: 8 ports detected
[  138.218804][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  138.218882][   T29] audit: type=1326 audit(138.193:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.248184][   T29] audit: type=1326 audit(138.193:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.271513][   T29] audit: type=1326 audit(138.193:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.294537][   T29] audit: type=1326 audit(138.193:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.317507][   T29] audit: type=1326 audit(138.193:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.388467][T11897] hub 8-0:1.0: USB hub found
[  138.393398][T11897] hub 8-0:1.0: 8 ports detected
[  138.539359][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'.
[  138.548387][   T29] audit: type=1326 audit(138.513:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.8.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.571349][   T29] audit: type=1326 audit(138.513:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.8.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.594329][   T29] audit: type=1326 audit(138.513:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.8.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.617389][   T29] audit: type=1326 audit(138.513:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.8.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.640472][   T29] audit: type=1326 audit(138.513:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.8.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4099aebe9 code=0x7ffc0000
[  138.715715][T11941] netlink: 'syz.1.3515': attribute type 1 has an invalid length.
[  139.001245][T11982] netlink: 'syz.3.3536': attribute type 20 has an invalid length.
[  139.063171][T11982] netlink: 'syz.3.3536': attribute type 20 has an invalid length.
[  139.172342][T12008] loop8: detected capacity change from 0 to 164
[  139.184241][T12008] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  139.206118][T12008] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  139.343103][T12028] wireguard0: entered promiscuous mode
[  139.348772][T12028] wireguard0: entered allmulticast mode
[  139.375045][T12034] 9pnet_fd: Insufficient options for proto=fd
[  139.844778][T12084] loop9: detected capacity change from 0 to 1024
[  139.856274][T12088] loop8: detected capacity change from 0 to 512
[  139.865419][T12084] EXT4-fs: Ignoring removed orlov option
[  139.874168][T12088] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  139.888353][T12090] bridge0: port 3(macsec1) entered blocking state
[  139.894974][T12090] bridge0: port 3(macsec1) entered disabled state
[  139.902585][T12090] macsec1: entered allmulticast mode
[  139.905551][T12084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.907970][T12090] bridge0: entered allmulticast mode
[  139.926247][T12090] macsec1: left allmulticast mode
[  139.931315][T12090] bridge0: left allmulticast mode
[  139.985702][T12088] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3578: invalid indirect mapped block 4294967295 (level 0)
[  140.000419][T12088] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3578: invalid indirect mapped block 4294967295 (level 1)
[  140.017443][T12088] EXT4-fs (loop8): 1 orphan inode deleted
[  140.023221][T12088] EXT4-fs (loop8): 1 truncate cleaned up
[  140.029878][T12088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.245509][ T7928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.303273][ T8297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.315853][T12103] __nla_validate_parse: 12 callbacks suppressed
[  140.315870][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'.
[  140.450128][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3593'.
[  140.453074][T12113] netlink: 204 bytes leftover after parsing attributes in process `syz.8.3592'.
[  140.637999][ T3670] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.648425][ T3670] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.783601][ T3670] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.794046][ T3670] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.924965][ T3670] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.935375][ T3670] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.046543][ T3670] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.056988][ T3670] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.075405][T12133] chnl_net:caif_netlink_parms(): no params data found
[  141.127146][T12133] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.134343][T12133] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.141719][T12133] bridge_slave_0: entered allmulticast mode
[  141.151070][T12133] bridge_slave_0: entered promiscuous mode
[  141.168326][ T3670] bridge_slave_1: left allmulticast mode
[  141.174101][ T3670] bridge_slave_1: left promiscuous mode
[  141.179837][ T3670] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.191169][ T3670] bridge_slave_0: left promiscuous mode
[  141.196989][ T3670] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.285411][ T3670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.295321][ T3670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.305008][ T3670] bond0 (unregistering): Released all slaves
[  141.314275][ T3670] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  141.322618][ T3670] batadv1: left promiscuous mode
[  141.328833][ T3670] bond1 (unregistering): Released all slaves
[  141.337099][T12133] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.344219][T12133] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.351487][T12133] bridge_slave_1: entered allmulticast mode
[  141.357967][T12133] bridge_slave_1: entered promiscuous mode
[  141.381743][ T3670] hsr_slave_0: left promiscuous mode
[  141.387657][ T3670] hsr_slave_1: left promiscuous mode
[  141.393930][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.401316][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.411396][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.418895][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.429774][ T3670] veth1_macvtap: left promiscuous mode
[  141.435482][ T3670] veth0_macvtap: left promiscuous mode
[  141.440989][ T3670] veth1_vlan: left promiscuous mode
[  141.446427][ T3670] veth0_vlan: left promiscuous mode
[  141.517656][ T3670] team0 (unregistering): Port device team_slave_1 removed
[  141.528201][ T3670] team0 (unregistering): Port device team_slave_0 removed
[  141.563244][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.573983][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.595175][T12133] team0: Port device team_slave_0 added
[  141.601666][T12133] team0: Port device team_slave_1 added
[  141.619686][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.626708][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.652637][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.664085][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.671039][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.696976][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.735517][T12133] hsr_slave_0: entered promiscuous mode
[  141.741669][T12133] hsr_slave_1: entered promiscuous mode
[  142.156837][T12133] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  142.165544][T12133] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  142.173774][T12133] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  142.185794][  T273] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.196969][T12133] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  142.230492][T12133] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.242286][T12133] 8021q: adding VLAN 0 to HW filter on device team0
[  142.253581][  T273] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.268543][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.275606][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.286219][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.293349][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.318863][  T273] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.367919][T12133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.377895][  T273] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.442977][  T273] bridge_slave_1: left allmulticast mode
[  142.448631][  T273] bridge_slave_1: left promiscuous mode
[  142.454423][  T273] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.462187][  T273] bridge_slave_0: left allmulticast mode
[  142.467893][  T273] bridge_slave_0: left promiscuous mode
[  142.473638][  T273] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.555551][  T273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.565220][  T273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.574579][  T273] bond0 (unregistering): Released all slaves
[  142.583655][  T273] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  142.591732][  T273] batadv1: left promiscuous mode
[  142.597812][  T273] bond1 (unregistering): Released all slaves
[  142.614751][T12133] veth0_vlan: entered promiscuous mode
[  142.625532][T12133] veth1_vlan: entered promiscuous mode
[  142.638910][T12133] veth0_macvtap: entered promiscuous mode
[  142.645993][T12133] veth1_macvtap: entered promiscuous mode
[  142.657235][T12133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.668062][T12133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.677765][  T273] hsr_slave_0: left promiscuous mode
[  142.685190][  T273] hsr_slave_1: left promiscuous mode
[  142.690655][  T273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.698132][  T273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.705573][  T273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.713007][  T273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.722954][  T273] veth1_macvtap: left promiscuous mode
[  142.728433][  T273] veth0_macvtap: left promiscuous mode
[  142.733992][  T273] veth1_vlan: left promiscuous mode
[  142.739206][  T273] veth0_vlan: left promiscuous mode
[  142.798156][  T273] team0 (unregistering): Port device team_slave_1 removed
[  142.807754][  T273] team0 (unregistering): Port device team_slave_0 removed
[  142.840770][ T3723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.850887][ T3723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.859740][ T3723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.869342][ T3723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.922522][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'.
[  143.013664][T12186] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3607'.
[  143.073159][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'.
[  143.116065][T12198] netlink: 'syz.2.3609': attribute type 1 has an invalid length.
[  143.123945][T12198] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3609'.
[  143.166578][T12198] netlink: 'syz.2.3609': attribute type 1 has an invalid length.
[  143.174396][T12198] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3609'.
[  143.298934][T12175] chnl_net:caif_netlink_parms(): no params data found
[  143.319235][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3611'.
[  143.397683][T12190] chnl_net:caif_netlink_parms(): no params data found
[  143.445884][T12211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.454075][T12211] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.472944][ T3670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.483339][ T3670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.522577][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  143.522592][   T29] audit: type=1400 audit(143.503:4031): avc:  denied  { create } for  pid=12220 comm="syz.2.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  143.550445][   T29] audit: type=1400 audit(143.503:4032): avc:  denied  { setopt } for  pid=12220 comm="syz.2.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  143.598328][ T3670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.608710][ T3670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.659925][T12230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3620'.
[  143.660084][   T29] audit: type=1400 audit(143.633:4033): avc:  denied  { nlmsg_read } for  pid=12229 comm="syz.1.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  143.692235][T12190] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.699530][T12190] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.711269][T12234] loop2: detected capacity change from 0 to 128
[  143.711493][T12190] bridge_slave_0: entered allmulticast mode
[  143.718342][T12234] vfat: Unknown parameter '0000000000000000000000001777777777777777777777'
[  143.727509][T12190] bridge_slave_0: entered promiscuous mode
[  143.741862][T12190] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.749012][T12190] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.756333][T12190] bridge_slave_1: entered allmulticast mode
[  143.764766][T12190] bridge_slave_1: entered promiscuous mode
[  143.778497][ T3670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.785399][T12236] IPv4: Oversized IP packet from 127.202.26.0
[  143.788997][ T3670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.808472][   T29] audit: type=1326 audit(143.783:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.831647][   T29] audit: type=1326 audit(143.783:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.838385][T12175] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.854689][   T29] audit: type=1326 audit(143.783:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.870110][   T29] audit: type=1326 audit(143.783:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.885117][T12175] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.907606][   T29] audit: type=1326 audit(143.783:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.937552][   T29] audit: type=1326 audit(143.783:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.960533][   T29] audit: type=1326 audit(143.803:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.5.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  143.983720][T12175] bridge_slave_0: entered allmulticast mode
[  143.998670][T12175] bridge_slave_0: entered promiscuous mode
[  144.018020][ T3670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.028571][ T3670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.040138][T12175] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.047284][T12175] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.054608][T12175] bridge_slave_1: entered allmulticast mode
[  144.061163][T12175] bridge_slave_1: entered promiscuous mode
[  144.079946][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.090496][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.113069][T12190] team0: Port device team_slave_0 added
[  144.134314][T12175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.150613][T12190] team0: Port device team_slave_1 added
[  144.191526][T12175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.213844][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.220850][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.246930][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.268086][ T3670] bridge_slave_1: left allmulticast mode
[  144.273833][ T3670] bridge_slave_1: left promiscuous mode
[  144.279660][ T3670] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.287953][ T3670] bridge_slave_0: left promiscuous mode
[  144.293678][ T3670] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.424640][ T3670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.443917][ T3670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.456015][ T3670] bond0 (unregistering): Released all slaves
[  144.470285][ T3670] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  144.481642][ T3670] batadv1: left promiscuous mode
[  144.488078][ T3670] bond1 (unregistering): Released all slaves
[  144.503627][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.510687][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.536680][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.570782][T12175] team0: Port device team_slave_0 added
[  144.606447][T12175] team0: Port device team_slave_1 added
[  144.635040][T12190] hsr_slave_0: entered promiscuous mode
[  144.664425][T12190] hsr_slave_1: entered promiscuous mode
[  144.671327][T12190] debugfs: 'hsr0' already exists in 'hsr'
[  144.677167][T12190] Cannot create hsr debugfs directory
[  144.697886][ T3670] hsr_slave_0: left promiscuous mode
[  144.706334][ T3670] hsr_slave_1: left promiscuous mode
[  144.711941][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.719738][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.731660][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.739107][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.755686][ T3670] veth1_macvtap: left promiscuous mode
[  144.762324][ T3670] veth0_macvtap: left promiscuous mode
[  144.768108][ T3670] veth1_vlan: left promiscuous mode
[  144.773901][ T3670] veth0_vlan: left promiscuous mode
[  144.868778][T12289] loop2: detected capacity change from 0 to 128
[  144.883130][ T3670] team0 (unregistering): Port device team_slave_1 removed
[  144.903702][ T3670] team0 (unregistering): Port device team_slave_0 removed
[  144.979762][T12175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.986764][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.012697][T12175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.044661][T12175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.051688][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.077742][T12175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.130458][T12175] hsr_slave_0: entered promiscuous mode
[  145.136859][T12175] hsr_slave_1: entered promiscuous mode
[  145.144881][T12175] debugfs: 'hsr0' already exists in 'hsr'
[  145.150627][T12175] Cannot create hsr debugfs directory
[  145.366519][ T3670] IPVS: stop unused estimator thread 0...
[  145.514980][T12190] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  145.525915][T12190] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  145.535407][T12190] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  145.545174][T12190] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  145.590788][T12190] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.607897][T12190] 8021q: adding VLAN 0 to HW filter on device team0
[  145.617707][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.624791][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.635949][ T1924] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.643026][ T1924] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.668353][T12190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.678791][T12190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.728532][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.810973][T12175] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.819717][T12175] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.830576][T12175] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.840646][T12175] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.858145][T12190] veth0_vlan: entered promiscuous mode
[  145.870112][T12190] veth1_vlan: entered promiscuous mode
[  145.892486][T12190] veth0_macvtap: entered promiscuous mode
[  145.901078][T12190] veth1_macvtap: entered promiscuous mode
[  145.917230][T12190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.929729][T12175] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.937507][T12190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.950660][T12175] 8021q: adding VLAN 0 to HW filter on device team0
[  145.961250][ T3670] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.971146][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.978316][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.989753][ T1924] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.996838][ T1924] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.005557][ T3670] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.014879][ T3670] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.023742][ T3670] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.048172][T12175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.058607][T12175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.143816][T12175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.166151][T12357] loop2: detected capacity change from 0 to 512
[  146.250640][T12175] veth0_vlan: entered promiscuous mode
[  146.265759][T12175] veth1_vlan: entered promiscuous mode
[  146.284544][T12175] veth0_macvtap: entered promiscuous mode
[  146.291788][T12175] veth1_macvtap: entered promiscuous mode
[  146.318152][T12175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.335811][T12370] pim6reg: entered allmulticast mode
[  146.347507][T12175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.357793][T12370] pim6reg: left allmulticast mode
[  146.381196][ T1924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.396445][ T1924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.409166][ T1924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.440216][ T1924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.473906][T12386] netlink: 'syz.2.3670': attribute type 4 has an invalid length.
[  146.481746][T12386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3670'.
[  146.508134][T12386] : renamed from bond0 (while UP)
[  146.517863][T12390] netlink: 'syz.5.3672': attribute type 3 has an invalid length.
[  146.526381][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'.
[  146.963749][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3682'.
[  147.018174][T12416] loop8: detected capacity change from 0 to 1024
[  147.026068][T12416] EXT4-fs: Ignoring removed nobh option
[  147.031683][T12416] EXT4-fs: Ignoring removed bh option
[  147.047730][T12416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.144952][T12190] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.710155][T12438] loop3: detected capacity change from 0 to 32768
[  147.918130][T12504] IPVS: Error joining to the multicast group
[  148.248691][T12552] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3747'.
[  148.268571][T12554] pim6reg: entered allmulticast mode
[  148.284653][T12556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12556 comm=syz.1.3749
[  148.300528][T12560] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  148.308061][T12554] pim6reg: left allmulticast mode
[  148.513417][T12588] pimreg: entered allmulticast mode
[  148.539732][   T29] kauditd_printk_skb: 124 callbacks suppressed
[  148.539748][   T29] audit: type=1326 audit(148.513:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  148.582447][T12588] pimreg: left allmulticast mode
[  148.587980][   T29] audit: type=1326 audit(148.543:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  148.610950][   T29] audit: type=1326 audit(148.543:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  148.687038][T12608] loop8: detected capacity change from 0 to 1024
[  148.699656][T12608] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  148.710786][T12608] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  148.726710][T12608] JBD2: no valid journal superblock found
[  148.732537][T12608] EXT4-fs (loop8): Could not load journal inode
[  148.747194][T12608] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  148.852343][   T29] audit: type=1400 audit(148.823:4168): avc:  denied  { create } for  pid=12627 comm="syz.8.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  148.883239][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'.
[  148.905134][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'.
[  148.910854][   T29] audit: type=1400 audit(148.843:4169): avc:  denied  { ioctl } for  pid=12627 comm="syz.8.3783" path="socket:[49373]" dev="sockfs" ino=49373 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  148.938241][   T29] audit: type=1400 audit(148.853:4170): avc:  denied  { bind } for  pid=12627 comm="syz.8.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  148.941093][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'.
[  148.972846][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'.
[  148.985428][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3789'.
[  148.987613][   T10] hid_parser_main: 22 callbacks suppressed
[  148.987634][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.007806][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.015241][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.019403][   T29] audit: type=1400 audit(148.963:4171): avc:  denied  { read write } for  pid=12637 comm="syz.8.3788" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  149.045606][   T29] audit: type=1400 audit(148.963:4172): avc:  denied  { open } for  pid=12637 comm="syz.8.3788" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  149.112559][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.120075][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.127492][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.134938][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.142342][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.149769][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.157245][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  149.166646][   T10] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  149.189690][   T29] audit: type=1326 audit(149.163:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12657 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad56bebe9 code=0x7ffc0000
[  149.212716][   T29] audit: type=1326 audit(149.163:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12657 comm="syz.3.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad56bebe9 code=0x7ffc0000
[  149.415755][T12687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12687 comm=syz.5.3811
[  149.570820][T12699] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma?
[  149.662232][T12706] can0: slcan on ttyS3.
[  149.759171][T12706] can0 (unregistered): slcan off ttyS3.
[  149.767390][T12706] Falling back ldisc for ttyS3.
[  149.968108][T12730] netlink: 'syz.5.3831': attribute type 10 has an invalid length.
[  150.020372][T12732] loop8: detected capacity change from 0 to 2048
[  150.051697][T12732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.158188][T12744] netlink: 'syz.5.3836': attribute type 1 has an invalid length.
[  150.189041][T12190] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.237139][T12752] netlink: 'syz.8.3838': attribute type 12 has an invalid length.
[  150.259508][T12755] IPv6: Can't replace route, no match found
[  150.677035][T12807] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  150.689785][T12806] IPVS: stopping master sync thread 12807 ...
[  150.869476][T12825] lo speed is unknown, defaulting to 1000
[  150.893762][T12825] lo speed is unknown, defaulting to 1000
[  150.920073][T12825] lo speed is unknown, defaulting to 1000
[  150.944968][T12825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  150.983892][T12829] loop2: detected capacity change from 0 to 128
[  150.991094][T12825] lo speed is unknown, defaulting to 1000
[  151.017396][T12825] lo speed is unknown, defaulting to 1000
[  151.024158][T12825] lo speed is unknown, defaulting to 1000
[  151.025491][T12829] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.032362][T12825] lo speed is unknown, defaulting to 1000
[  151.050211][T12825] lo speed is unknown, defaulting to 1000
[  151.094774][T12133] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  151.243690][T12861] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3889'.
[  151.425879][T12877] lo speed is unknown, defaulting to 1000
[  151.878171][T12907] __nla_validate_parse: 1 callbacks suppressed
[  151.878253][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3908'.
[  151.979364][T12914] loop2: detected capacity change from 0 to 512
[  151.998606][T12914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.028938][T12919] loop8: detected capacity change from 0 to 512
[  152.058834][T12919] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  152.082321][T12919] EXT4-fs (loop8): 1 orphan inode deleted
[  152.088173][T12919] EXT4-fs (loop8): 1 truncate cleaned up
[  152.102283][T12927] siw: device registration error -23
[  152.108092][T12919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.115884][T12914] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3912: corrupted inode contents
[  152.150312][T12190] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.162095][T12914] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3912: mark_inode_dirty error
[  152.184500][T12914] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3912: corrupted inode contents
[  152.197937][T12914] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3912: mark_inode_dirty error
[  152.212717][T12938] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #18: comm syz.2.3912: directory missing '.'
[  152.279661][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.307807][T12952] loop8: detected capacity change from 0 to 128
[  152.320243][T12952] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  152.328145][T12952] FAT-fs (loop8): Filesystem has been set read-only
[  152.335176][T12952] syz.8.3928: attempt to access beyond end of device
[  152.335176][T12952] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  152.349393][T12952] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  152.357367][T12952] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  152.388341][T12952] syz.8.3928: attempt to access beyond end of device
[  152.388341][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.401840][T12952] syz.8.3928: attempt to access beyond end of device
[  152.401840][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.416276][T12952] syz.8.3928: attempt to access beyond end of device
[  152.416276][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.430597][T12952] syz.8.3928: attempt to access beyond end of device
[  152.430597][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.446376][T12952] syz.8.3928: attempt to access beyond end of device
[  152.446376][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.446420][T12952] syz.8.3928: attempt to access beyond end of device
[  152.446420][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.446514][T12952] syz.8.3928: attempt to access beyond end of device
[  152.446514][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.446557][T12952] syz.8.3928: attempt to access beyond end of device
[  152.446557][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.446626][T12952] syz.8.3928: attempt to access beyond end of device
[  152.446626][T12952] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  152.722975][T12992] dummy0: entered allmulticast mode
[  152.731535][T12992] dummy0: left allmulticast mode
[  152.760206][T12994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3947'.
[  152.781325][T12994] netem: change failed
[  153.054216][T13020] loop2: detected capacity change from 0 to 2048
[  153.081868][T13020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.240640][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.521387][T13049] netlink: 'syz.8.3971': attribute type 1 has an invalid length.
[  153.529353][T13049] netlink: 'syz.8.3971': attribute type 4 has an invalid length.
[  153.537175][T13049] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3971'.
[  153.610979][T13055] netlink: 'syz.8.3975': attribute type 10 has an invalid length.
[  153.624780][T13055] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.634360][T13055] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  153.729323][   T29] kauditd_printk_skb: 227 callbacks suppressed
[  153.729345][   T29] audit: type=1400 audit(153.703:4402): avc:  denied  { unmount } for  pid=13066 comm="syz.2.3980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  154.150095][T13097] loop2: detected capacity change from 0 to 512
[  154.156719][T13097] EXT4-fs: Ignoring removed i_version option
[  154.162770][T13097] EXT4-fs: Ignoring removed nobh option
[  154.169987][T13097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  154.180801][T13097] EXT4-fs (loop2): 1 truncate cleaned up
[  154.188407][T13097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.221040][   T29] audit: type=1326 audit(154.193:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  154.248922][   T29] audit: type=1326 audit(154.223:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  154.272019][   T29] audit: type=1326 audit(154.223:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  154.295026][   T29] audit: type=1326 audit(154.223:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  154.317963][   T29] audit: type=1326 audit(154.223:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.5.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa464feebe9 code=0x7ffc0000
[  154.340990][   T29] audit: type=1400 audit(154.273:4408): avc:  denied  { map } for  pid=13096 comm="syz.2.3991" path="/83/bus/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  154.395810][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.419060][T13112] loop2: detected capacity change from 0 to 512
[  154.426584][T13112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  154.438175][T13112] EXT4-fs (loop2): 1 truncate cleaned up
[  154.445964][T13112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.485971][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.489910][T13122] dummy0: entered allmulticast mode
[  154.508279][T13122] dummy0: left allmulticast mode
[  154.533528][T13125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  154.540084][T13125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.547668][T13125] vhci_hcd vhci_hcd.0: Device attached
[  154.562586][T13125] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5)
[  154.569123][T13125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.576636][T13125] vhci_hcd vhci_hcd.0: Device attached
[  154.596808][T13125] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7)
[  154.597384][T13136] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  154.603397][T13125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  154.603473][T13125] vhci_hcd vhci_hcd.0: Device attached
[  154.651697][T13125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  154.668209][T13146] loop3: detected capacity change from 0 to 512
[  154.674977][T13125] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11)
[  154.675356][T13146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  154.681603][T13125] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  154.699164][T13125] vhci_hcd vhci_hcd.0: Device attached
[  154.706181][T13146] EXT4-fs (loop3): 1 orphan inode deleted
[  154.711931][T13146] EXT4-fs (loop3): 1 truncate cleaned up
[  154.719638][T13146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.754090][T13125] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13)
[  154.760715][T13125] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  154.768403][T13125] vhci_hcd vhci_hcd.0: Device attached
[  154.776017][T12175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.777171][T13133] vhci_hcd: connection closed
[  154.785025][T13137] vhci_hcd: connection closed
[  154.785323][ T3702] vhci_hcd: stop threads
[  154.789869][T13147] vhci_hcd: connection closed
[  154.794525][ T3702] vhci_hcd: release socket
[  154.794539][ T3702] vhci_hcd: disconnect device
[  154.813112][T13154] vhci_hcd: connection closed
[  154.813274][T13127] vhci_hcd: connection closed
[  154.813989][   T10] usb 5-1: new low-speed USB device number 2 using vhci_hcd
[  154.830600][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4014'.
[  154.839739][T13128] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  154.840101][ T3702] vhci_hcd: stop threads
[  154.849992][ T3702] vhci_hcd: release socket
[  154.854449][ T3702] vhci_hcd: disconnect device
[  154.864143][ T3702] vhci_hcd: stop threads
[  154.868436][ T3702] vhci_hcd: release socket
[  154.872899][ T3702] vhci_hcd: disconnect device
[  154.878526][ T3702] vhci_hcd: stop threads
[  154.882860][ T3702] vhci_hcd: release socket
[  154.887311][ T3702] vhci_hcd: disconnect device
[  154.892191][ T3702] vhci_hcd: stop threads
[  154.896536][ T3702] vhci_hcd: release socket
[  154.900963][ T3702] vhci_hcd: disconnect device
[  154.907976][T13162] loop3: detected capacity change from 0 to 512
[  154.918232][T13162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  154.918317][   T29] audit: type=1400 audit(154.893:4409): avc:  denied  { unlink } for  pid=8653 comm="syz-executor" name="file1" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  154.961574][T13162] EXT4-fs (loop3): 1 truncate cleaned up
[  154.967982][T13162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.001039][T12175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.014362][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4022'.
[  155.039301][   T29] audit: type=1326 audit(155.013:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.3.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad56bebe9 code=0x7ffc0000
[  155.062321][   T29] audit: type=1326 audit(155.013:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.3.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad56bebe9 code=0x7ffc0000
[  155.123151][T13183] loop3: detected capacity change from 0 to 128
[  155.134180][T13183] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  155.142014][T13183] FAT-fs (loop3): Filesystem has been set read-only
[  155.148770][T13183] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  155.156641][T13183] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  155.790598][T13231] loop2: detected capacity change from 0 to 2048
[  156.085999][T13243] loop3: detected capacity change from 0 to 256
[  156.302056][T13272] pimreg: entered allmulticast mode
[  156.314515][T13272] pimreg: left allmulticast mode
[  156.395770][T13282] loop8: detected capacity change from 0 to 256
[  156.465943][T13288] pim6reg: entered allmulticast mode
[  156.473510][T13288] pim6reg: left allmulticast mode
[  156.561983][T13305] ref_ctr_offset mismatch. inode: 0x107b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  156.668872][T13315] netlink: 'syz.1.4087': attribute type 1 has an invalid length.
[  156.676719][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'.
[  156.760820][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4091'.
[  156.788144][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4091'.
[  156.805016][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4091'.
[  156.814685][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4091'.
[  157.093503][T13368] lo speed is unknown, defaulting to 1000
[  157.203885][T13382] __nla_validate_parse: 1 callbacks suppressed
[  157.203931][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4112'.
[  157.219233][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4112'.
[  157.228842][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4112'.
[  157.270231][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4112'.
[  157.279282][T13382] netlink: 'syz.8.4112': attribute type 6 has an invalid length.
[  157.366474][T13395] pim6reg: entered allmulticast mode
[  157.378954][T13395] pim6reg: left allmulticast mode
[  157.446108][T13401] program syz.3.4126 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.553386][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  157.575521][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  157.605417][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  157.625540][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'.
[  157.748311][T13417] netlink: 428 bytes leftover after parsing attributes in process `+}[@'.
[  158.109066][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'.
[  158.130209][T13456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.137789][T13456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.152430][T13456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.160092][T13456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.682283][T13515] lo speed is unknown, defaulting to 1000
[  158.773273][T13526] openvswitch: netlink: Message has 6 unknown bytes.
[  158.922877][   T29] kauditd_printk_skb: 84 callbacks suppressed
[  158.922890][   T29] audit: type=1326 audit(158.711:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  158.979763][   T29] audit: type=1326 audit(158.730:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.002787][   T29] audit: type=1326 audit(158.730:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.025724][   T29] audit: type=1326 audit(158.730:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.048684][   T29] audit: type=1326 audit(158.730:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.071844][   T29] audit: type=1326 audit(158.730:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.088218][T13555] lo speed is unknown, defaulting to 1000
[  159.094859][   T29] audit: type=1326 audit(158.730:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.169039][   T29] audit: type=1326 audit(158.945:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.224323][   T29] audit: type=1326 audit(158.945:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.247401][   T29] audit: type=1326 audit(158.973:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  159.377847][T13582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.385390][T13582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.402337][T13582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.409807][T13582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.418870][T13587] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[  159.429512][T13586] SELinux:  Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped).
[  159.447727][T13582] bond0: (slave batadv0): Releasing backup interface
[  159.704226][T13610] netlink: 'syz.1.4222': attribute type 1 has an invalid length.
[  159.935179][T13626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.942669][T13626] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.975804][T13626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.983305][T13626] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.068127][T13635] loop8: detected capacity change from 0 to 8192
[  160.133413][   T10] usb 5-1: enqueue for inactive port 0
[  160.145657][   T10] usb 5-1: enqueue for inactive port 0
[  160.229932][   T10] vhci_hcd: vhci_device speed not set
[  160.800738][T13683] netlink: 'syz.5.4258': attribute type 298 has an invalid length.
[  161.275121][T13725] loop8: detected capacity change from 0 to 32768
[  161.775285][T13747] lo: entered allmulticast mode
[  161.780960][T13746] lo: left allmulticast mode
[  162.069272][T13769] program syz.8.4294 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  162.078805][T13769] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  162.535773][T13845] loop2: detected capacity change from 0 to 128
[  162.544265][T13845] EXT4-fs mount: 2 callbacks suppressed
[  162.544282][T13845] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.563203][T13845] EXT4-fs warning (device loop2): ext4_group_extend:1862: can't shrink FS - resize aborted
[  162.584520][T12133] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.603757][T13849] loop9: detected capacity change from 0 to 7
[  162.610030][T13849] Buffer I/O error on dev loop9, logical block 0, async page read
[  162.642431][T13849] Buffer I/O error on dev loop9, logical block 0, async page read
[  162.650361][T13849]  loop9: unable to read partition table
[  162.663856][T13849] loop_reread_partitions: partition scan of loop9 (�袻x����dG�����ݡ�����
[  162.663856][T13849] 
) failed (rc=-5)
[  162.711662][T13855] loop2: detected capacity change from 0 to 512
[  162.735833][T13855] EXT4-fs (loop2): too many log groups per flexible block group
[  162.743677][T13855] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  162.750502][T13855] EXT4-fs (loop2): mount failed
[  162.784049][T13863] loop3: detected capacity change from 0 to 128
[  162.796634][T13863] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.854966][T12175] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.953244][T13888] loop3: detected capacity change from 0 to 2048
[  162.992800][T13888] EXT4-fs (loop3): failed to initialize system zone (-117)
[  163.006351][T13888] EXT4-fs (loop3): mount failed
[  163.085491][T13908] wireguard0: entered promiscuous mode
[  163.091012][T13908] wireguard0: entered allmulticast mode
[  163.102328][T13910] __nla_validate_parse: 9 callbacks suppressed
[  163.102345][T13910] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4355'.
[  163.118462][T13900] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4355'.
[  163.118499][T13912] netlink: 'syz.3.4360': attribute type 30 has an invalid length.
[  163.265342][T13927] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  163.276599][T13926] IPVS: stopping master sync thread 13927 ...
[  163.319781][T13930] loop2: detected capacity change from 0 to 2048
[  163.330469][T13930] EXT4-fs (loop2): failed to initialize system zone (-117)
[  163.337935][T13930] EXT4-fs (loop2): mount failed
[  163.373061][T13935] loop2: detected capacity change from 0 to 512
[  163.380831][T13935] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  163.390847][T13935] EXT4-fs (loop2): 1 truncate cleaned up
[  163.397188][T13935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.423068][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.506703][T13947] lo speed is unknown, defaulting to 1000
[  163.767519][T13957] loop2: detected capacity change from 0 to 4096
[  163.778203][T13957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.919833][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.973367][T13971] loop2: detected capacity change from 0 to 1024
[  163.979947][T13971] EXT4-fs: Ignoring removed orlov option
[  164.005350][T13971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.038415][T13974] xt_policy: too many policy elements
[  164.059492][T13917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  164.087999][T13917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  164.302435][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.342269][T13995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4394'.
[  164.453133][T14001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4397'.
[  164.613577][T14007] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4400'.
[  164.666668][T14015] IPVS: Error connecting to the multicast addr
[  164.820485][T14037] loop2: detected capacity change from 0 to 512
[  164.828290][T14037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.838237][T14037] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.4415: invalid block
[  164.850602][T14037] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4415: invalid indirect mapped block 4294967295 (level 1)
[  164.864737][T14037] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4415: invalid indirect mapped block 4294967295 (level 1)
[  164.879951][T14037] EXT4-fs (loop2): 2 truncates cleaned up
[  164.886077][T14037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.903931][T14037] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4415: bg 0: block 5: invalid block bitmap
[  164.927862][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.009764][T14043] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  165.010012][T14040] IPVS: stopping master sync thread 14043 ...
[  165.089727][ T3723] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.161435][T14058] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  165.181731][ T3723] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.262600][ T3723] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.322994][ T3723] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.374072][T14060] lo speed is unknown, defaulting to 1000
[  165.500193][ T3723] bridge_slave_1: left allmulticast mode
[  165.505929][ T3723] bridge_slave_1: left promiscuous mode
[  165.511688][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.536667][ T3723] bridge_slave_0: left allmulticast mode
[  165.542357][ T3723] bridge_slave_0: left promiscuous mode
[  165.548042][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.642138][ T3723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.652933][ T3723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.672526][ T3723] bond0 (unregistering): Released all slaves
[  165.692612][T14060] chnl_net:caif_netlink_parms(): no params data found
[  165.754548][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4442'.
[  165.837187][ T3723] hsr_slave_0: left promiscuous mode
[  165.856639][ T3723] hsr_slave_1: left promiscuous mode
[  165.873474][ T3723] veth1_macvtap: left promiscuous mode
[  165.900804][ T3723] veth0_macvtap: left promiscuous mode
[  165.906569][ T3723] veth1_vlan: left promiscuous mode
[  165.911923][ T3723] veth0_vlan: left promiscuous mode
[  166.133899][ T3723] team0 (unregistering): Port device team_slave_1 removed
[  166.143729][ T3723] team0 (unregistering): Port device team_slave_0 removed
[  166.163803][T14131] loop2: detected capacity change from 0 to 1024
[  166.188427][T14060] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.189133][T14131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.195585][T14060] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.215527][T14060] bridge_slave_0: entered allmulticast mode
[  166.222994][T14060] bridge_slave_0: entered promiscuous mode
[  166.226032][   T29] kauditd_printk_skb: 141 callbacks suppressed
[  166.226051][   T29] audit: type=1400 audit(165.549:4647): avc:  denied  { ioctl } for  pid=14130 comm="syz.2.4453" path="/164/file1/file1" dev="loop2" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  166.231904][T14060] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.266197][T14060] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.274576][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.280419][T14060] bridge_slave_1: entered allmulticast mode
[  166.290394][T14060] bridge_slave_1: entered promiscuous mode
[  166.319483][T14060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.324376][T14137] loop2: detected capacity change from 0 to 1024
[  166.331560][T14060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.356613][T14137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  166.357631][T14060] team0: Port device team_slave_0 added
[  166.375552][T14060] team0: Port device team_slave_1 added
[  166.393026][T14137] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  166.408462][T14137] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28
[  166.421098][T14137] EXT4-fs (loop2): This should not happen!! Data will be lost
[  166.421098][T14137] 
[  166.430794][T14137] EXT4-fs (loop2): Total free blocks count 0
[  166.436803][T14137] EXT4-fs (loop2): Free/Dirty block details
[  166.442776][T14137] EXT4-fs (loop2): free_blocks=4293918720
[  166.448547][T14137] EXT4-fs (loop2): dirty_blocks=192
[  166.453822][T14137] EXT4-fs (loop2): Block reservation details
[  166.459810][T14137] EXT4-fs (loop2): i_reserved_data_blocks=12
[  166.466884][T14060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.473954][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.499905][T14060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.511397][T14060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.518384][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.544326][T14060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.571367][T14060] hsr_slave_0: entered promiscuous mode
[  166.577942][T14060] hsr_slave_1: entered promiscuous mode
[  166.589853][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  166.605794][   T29] audit: type=1400 audit(165.886:4648): avc:  denied  { setopt } for  pid=14145 comm="syz.1.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  166.606074][T14060] debugfs: 'hsr0' already exists in 'hsr'
[  166.624916][   T29] audit: type=1326 audit(165.904:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.624947][   T29] audit: type=1326 audit(165.904:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.625006][   T29] audit: type=1326 audit(165.904:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.630737][T14060] Cannot create hsr debugfs directory
[  166.705080][   T29] audit: type=1326 audit(165.904:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.728054][   T29] audit: type=1326 audit(165.904:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.751104][   T29] audit: type=1326 audit(165.904:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.774186][   T29] audit: type=1326 audit(165.904:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.797155][   T29] audit: type=1326 audit(165.904:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca91ebe9 code=0x7ffc0000
[  166.862540][T14122] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  166.879200][T14122] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  166.912477][T14164] ref_ctr_offset mismatch. inode: 0x37a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  166.956239][T14169] can0: slcan on ptm0.
[  167.125131][T14167] can0 (unregistered): slcan off ptm0.
[  167.162356][T14179] loop3: detected capacity change from 0 to 4096
[  167.171167][T14179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.239730][T14060] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  167.248794][T14060] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  167.257900][T14060] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  167.266804][T14060] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  167.312536][T14060] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.325041][T12175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.330726][T14060] 8021q: adding VLAN 0 to HW filter on device team0
[  167.345717][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.352838][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.365688][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.372772][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.406745][T14060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.480430][T14060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.621360][T14060] veth0_vlan: entered promiscuous mode
[  167.637534][T14060] veth1_vlan: entered promiscuous mode
[  167.666791][T14060] veth0_macvtap: entered promiscuous mode
[  167.676477][T14060] veth1_macvtap: entered promiscuous mode
[  167.688365][T14060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.704047][T14060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.714956][ T3702] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.726555][ T3702] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.738995][ T3702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.749113][ T3702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.772107][T14237] netlink: 'syz.1.4489': attribute type 4 has an invalid length.
[  167.790973][T14237] netlink: 'syz.1.4489': attribute type 4 has an invalid length.
[  168.084272][T14259] lo speed is unknown, defaulting to 1000
[  168.582351][   T37] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x16
[  168.600976][T14307] vhci_hcd: invalid port number 236
[  168.769548][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4527'.
[  168.788268][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4527'.
[  168.797312][T14332] loop3: detected capacity change from 0 to 1024
[  168.804606][T14332] EXT4-fs: Ignoring removed orlov option
[  168.810318][T14332] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.830491][T14332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.890119][T14346] netlink: '+}[@': attribute type 10 has an invalid length.
[  168.898919][T12175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.918861][T14346] team0: Device hsr_slave_0 failed to register rx_handler
[  168.979141][T14355] loop2: detected capacity change from 0 to 4096
[  168.994788][T14355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.027546][T14362] rdma_op ffff88811a5f2180 conn xmit_rdma 0000000000000000
[  169.056350][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.092752][T14370] lo speed is unknown, defaulting to 1000
[  169.341903][T14401] netlink: 'syz.3.4557': attribute type 3 has an invalid length.
[  169.443549][T14405] can0: slcan on ptm0.
[  169.519843][T14404] can0 (unregistered): slcan off ptm0.
[  169.713976][T14431] SELinux: ebitmap: truncated map
[  169.719867][T14431] SELinux: failed to load policy
[  169.776594][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4576'.
[  170.428641][T14482] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  170.625486][T14506] loop3: detected capacity change from 0 to 256
[  170.636390][T14506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  170.646543][T14506] FAT-fs (loop3): Filesystem has been set read-only
[  170.654763][T14506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  170.665696][T14506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  170.678084][T14506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  171.034589][T14535] loop2: detected capacity change from 0 to 2048
[  171.087500][T14535]  loop2: p2 p3 p7
[  171.167529][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'.
[  171.198950][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'.
[  171.231911][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'.
[  171.264388][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'.
[  171.330585][T14566] loop2: detected capacity change from 0 to 1024
[  171.369582][T14566] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.376766][T14566] EXT4-fs (loop2): stripe (35910) is not aligned with cluster size (16), stripe is disabled
[  171.452943][T14566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.577657][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.600865][T14576] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  171.610351][   T29] kauditd_printk_skb: 215 callbacks suppressed
[  171.610366][   T29] audit: type=1400 audit(170.581:4872): avc:  denied  { relabelto } for  pid=14575 comm="syz.5.4636" name="889" dev="tmpfs" ino=4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  171.641976][   T29] audit: type=1400 audit(170.581:4873): avc:  denied  { associate } for  pid=14575 comm="syz.5.4636" name="889" dev="tmpfs" ino=4601 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  171.784347][T14585] lo speed is unknown, defaulting to 1000
[  171.851082][T14597] lo speed is unknown, defaulting to 1000
[  171.895578][T14604] syz_tun: entered allmulticast mode
[  171.952906][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4655'.
[  171.965484][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4655'.
[  172.040733][   T29] audit: type=1400 audit(170.983:4874): avc:  denied  { unmount } for  pid=12133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  172.155855][   T29] audit: type=1400 audit(171.096:4875): avc:  denied  { create } for  pid=14631 comm="syz.5.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  172.197229][   T29] audit: type=1400 audit(171.133:4876): avc:  denied  { write } for  pid=14631 comm="syz.5.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  172.221547][T14634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4673'.
[  172.272683][   T29] audit: type=1400 audit(171.208:4877): avc:  denied  { read } for  pid=14643 comm="syz.2.4667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  172.291876][T14646] loop3: detected capacity change from 0 to 1024
[  172.311404][T14646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.334978][   T29] audit: type=1400 audit(171.264:4878): avc:  denied  { read } for  pid=14645 comm="syz.3.4678" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  172.377621][T12175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.445128][   T29] audit: type=1326 audit(171.367:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.2.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cb3ebe9 code=0x7ffc0000
[  172.473530][   T29] audit: type=1326 audit(171.386:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.2.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f437cb3ebe9 code=0x7ffc0000
[  172.496517][   T29] audit: type=1326 audit(171.386:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14656 comm="syz.2.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cb3ebe9 code=0x7ffc0000
[  172.551144][T14669] netlink: 'syz.3.4679': attribute type 1 has an invalid length.
[  172.579279][T14671] netlink: 'syz.7.4680': attribute type 3 has an invalid length.
[  172.611706][T14674] loop2: detected capacity change from 0 to 1024
[  172.627010][T14677] lo speed is unknown, defaulting to 1000
[  172.636966][T14674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.680571][T12133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.899067][T14695] loop9: detected capacity change from 0 to 7
[  172.949928][T14701] loop3: detected capacity change from 0 to 512
[  172.965141][T14701] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4693: Failed to acquire dquot type 1
[  172.978173][T14701] EXT4-fs (loop3): 1 truncate cleaned up
[  172.984539][T14701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.053302][T12175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.185823][T14734] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  173.302714][T14756] batadv_slave_1: entered promiscuous mode
[  173.322608][T14755] batadv_slave_1: left promiscuous mode
[  173.330082][T14747] ==================================================================
[  173.338207][T14747] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  173.346811][T14747] 
[  173.349144][T14747] write to 0xffff88811cf632e8 of 8 bytes by task 14759 on cpu 1:
[  173.356867][T14747]  shmem_file_splice_read+0x470/0x600
[  173.362248][T14747]  splice_direct_to_actor+0x26f/0x680
[  173.367641][T14747]  do_splice_direct+0xda/0x150
[  173.372415][T14747]  do_sendfile+0x380/0x650
[  173.376853][T14747]  __x64_sys_sendfile64+0x105/0x150
[  173.382074][T14747]  x64_sys_call+0x2bb0/0x2ff0
[  173.386806][T14747]  do_syscall_64+0xd2/0x200
[  173.391333][T14747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.397242][T14747] 
[  173.399566][T14747] write to 0xffff88811cf632e8 of 8 bytes by task 14747 on cpu 0:
[  173.407296][T14747]  shmem_file_splice_read+0x470/0x600
[  173.412685][T14747]  splice_direct_to_actor+0x26f/0x680
[  173.418092][T14747]  do_splice_direct+0xda/0x150
[  173.422871][T14747]  do_sendfile+0x380/0x650
[  173.427313][T14747]  __x64_sys_sendfile64+0x105/0x150
[  173.432534][T14747]  x64_sys_call+0x2bb0/0x2ff0
[  173.437225][T14747]  do_syscall_64+0xd2/0x200
[  173.441752][T14747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.447661][T14747] 
[  173.449988][T14747] value changed: 0x0000000000001638 -> 0x000000000000163e
[  173.457096][T14747] 
[  173.459418][T14747] Reported by Kernel Concurrency Sanitizer on:
[  173.465582][T14747] CPU: 0 UID: 0 PID: 14747 Comm: syz.5.4715 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  173.476359][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  173.486421][T14747] ==================================================================