last executing test programs:

9m53.507372899s ago: executing program 32 (id=57):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
ioctl$GIO_UNISCRNMAP(r1, 0x43403d0e, 0x0)

2m42.580455825s ago: executing program 33 (id=9322):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = accept$packet(r0, 0x0, &(0x7f0000000200))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r3, 0xa, 0x13)
fcntl$setlease(r3, 0x400, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0)
fsopen(&(0x7f0000000440)='selinuxfs\x00', 0x0)
write$cgroup_int(r7, &(0x7f00000003c0)=0x1ff, 0x12)
recvfrom$packet(r1, &(0x7f0000000280)=""/125, 0x7d, 0x1, &(0x7f0000000300)={0x11, 0x2, 0x0, 0x1, 0xa0, 0x6, @local}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x641}, 0x0)

2m16.621029347s ago: executing program 34 (id=9781):
set_mempolicy(0x6, &(0x7f0000000300)=0x8000000000000001, 0x2e0)
syz_emit_ethernet(0xfffffffffffffc9f, &(0x7f00000000c0)={@link_local, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', {[], @dest_unreach={0x1, 0x6, 0x0, 0x2, '\x00', {0x2, 0x6, "e493ad", 0x94f, 0x2f, 0xff, @rand_addr=' \x01\x00', @loopback, [], "bd002f4ad51df48ee68f6c8cfe6dd4c7"}}}}}}}, 0x0)

1m41.549257179s ago: executing program 5 (id=9955):
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r4}, 0x18)
open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0)
r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8)
move_mount(r5, 0x0, r5, 0x0, 0x76)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x21, 0x2, 0x2)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r6, 0x0, 0x100)

1m40.290297795s ago: executing program 5 (id=9964):
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
wait4(0x0, 0x0, 0x40000000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f000000bf00)={0x0, 0x11, &(0x7f000000bec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000200)=@nfc, &(0x7f0000000080)=0x80, 0x80000)
syz_usb_disconnect(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)
ftruncate(r2, 0x2000009)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m38.487286035s ago: executing program 5 (id=9974):
r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!')

1m37.516520602s ago: executing program 5 (id=9976):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r5}, 0x18)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r8, &(0x7f00000003c0)='./file0\x00', 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4000000000040}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
ptrace(0x11, r3)

1m37.182530706s ago: executing program 5 (id=9979):
r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/4096, 0x7, 0x0, 0x0, 0x0})

1m35.929632851s ago: executing program 5 (id=9985):
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
wait4(0x0, 0x0, 0x40000000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f000000bf00)={0x0, 0x11, &(0x7f000000bec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000200)=@nfc, &(0x7f0000000080)=0x80, 0x80000)
syz_usb_disconnect(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)
ftruncate(r2, 0x2000009)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m35.929120471s ago: executing program 35 (id=9985):
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
wait4(0x0, 0x0, 0x40000000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f000000bf00)={0x0, 0x11, &(0x7f000000bec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000200)=@nfc, &(0x7f0000000080)=0x80, 0x80000)
syz_usb_disconnect(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)
ftruncate(r2, 0x2000009)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)

57.129192585s ago: executing program 3 (id=12272):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x80803, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000ac0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x1, 0x4000000000001001, 0x0, 0x0, 0x1f, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26e7061a46df2cfc06c89f3df456ffa176ff000000004a5d64cd00000000ffe70c1e831fa79a00000900", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
ioctl$BLKRRPART(r0, 0x125f, 0x0)

57.101479478s ago: executing program 3 (id=12277):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

57.023473086s ago: executing program 3 (id=12280):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
capget(&(0x7f0000000380)={0x20080522}, 0x0)

56.957267622s ago: executing program 3 (id=12282):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001500)=0x10)
syz_read_part_table(0x1054, &(0x7f0000000000)="$eJzsz8EJwkAQBdC/2aCkC5uwEAUrsAivXmzGLrxYgd2IRDZB0AbUw3uHgT/DftjwU31yWSTZ1JbKY1qWadasurd4renasswxxzbGceg/C6drOdyGU6vNkOXrMt5re7+fu5Ptutudv/BFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh7zwAAAP//llkLfw==")

56.833660324s ago: executing program 3 (id=12291):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

56.57616583s ago: executing program 3 (id=12296):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@fat=@check_normal}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

56.522820245s ago: executing program 36 (id=12296):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@fat=@check_normal}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

22.380176065s ago: executing program 8 (id=13928):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='mm_page_free\x00', r1}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

22.103986913s ago: executing program 8 (id=13932):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1e2}, 0x18)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10)

21.985457704s ago: executing program 8 (id=13941):
r0 = fsopen(&(0x7f0000000440)='iso9660\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
close(r0)

21.945557229s ago: executing program 8 (id=13943):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)

21.396634703s ago: executing program 8 (id=13949):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@resuid}, {@jqfmt_vfsold}, {@barrier}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
fadvise64(0xffffffffffffffff, 0x7f, 0x1000000, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000100)='r', 0x1, 0x8080c63)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r1, r1, 0x0, 0x800000009)

21.13252704s ago: executing program 8 (id=13963):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)

21.102192663s ago: executing program 37 (id=13963):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)

19.949059178s ago: executing program 7 (id=13994):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

19.832559789s ago: executing program 7 (id=13998):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x82, 0x1946}, 0x0, 0x0, 0xfff, 0x3, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
socket$nl_generic(0x10, 0x3, 0x10)

19.72787555s ago: executing program 7 (id=14000):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)

19.51957644s ago: executing program 7 (id=14011):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)

18.92658771s ago: executing program 7 (id=14015):
unshare(0x8040480)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000340)={0xfffffff9})

18.846645578s ago: executing program 9 (id=14018):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
io_setup(0xf, &(0x7f0000000080))

18.803413522s ago: executing program 9 (id=14020):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)

18.584912304s ago: executing program 7 (id=14022):
r0 = socket$inet6(0xa, 0x80002, 0x0)
unshare(0x6c000200)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000086dd214af9fdcbfd0000010000000300000000010006000000000000000b00feffffff00000000000009020000000000", @ANYRES16=r1, @ANYRES64=r2, @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x20001}, 0x28)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000000)=0x23a, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
pause()
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008100000000000000a8e90000183f000004000000000000000000000018460000ffffffff00030000db25000000000000ffffffff18270000", @ANYRES32, @ANYBLOB="000000001d000000950000000000ffff"], &(0x7f0000000280)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0xfffffffd, 0x1, 0x9, 0x7}, {0x20000004, 0x5, 0x1}], 0x10, 0x6}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

18.584440944s ago: executing program 38 (id=14022):
r0 = socket$inet6(0xa, 0x80002, 0x0)
unshare(0x6c000200)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000086dd214af9fdcbfd0000010000000300000000010006000000000000000b00feffffff00000000000009020000000000", @ANYRES16=r1, @ANYRES64=r2, @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x20001}, 0x28)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000000)=0x23a, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
pause()
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008100000000000000a8e90000183f000004000000000000000000000018460000ffffffff00030000db25000000000000ffffffff18270000", @ANYRES32, @ANYBLOB="000000001d000000950000000000ffff"], &(0x7f0000000280)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0xfffffffd, 0x1, 0x9, 0x7}, {0x20000004, 0x5, 0x1}], 0x10, 0x6}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

17.944397798s ago: executing program 9 (id=14024):
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000)

17.912052421s ago: executing program 9 (id=14025):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)

17.279576385s ago: executing program 9 (id=14040):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)

16.969192645s ago: executing program 9 (id=14052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b61"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x34000800}, 0x0)

16.967982195s ago: executing program 39 (id=14052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x34000800}, 0x0)

1.065567834s ago: executing program 6 (id=14707):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

944.375096ms ago: executing program 0 (id=14711):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)

910.304069ms ago: executing program 2 (id=14712):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}}, 0x4c}}, 0x20004010)

909.670509ms ago: executing program 2 (id=14713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18)
r2 = gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r3, &(0x7f0000000200)=""/209, 0xd1)
tkill(r2, 0x7)

892.856831ms ago: executing program 0 (id=14715):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

871.314753ms ago: executing program 0 (id=14717):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
lseek(r0, 0x100, 0x1)
getdents(r0, 0x0, 0x58)

841.577376ms ago: executing program 0 (id=14719):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000140)={{0x80, 0x5}, 'port0\x00', 0x5, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810de})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

788.390691ms ago: executing program 2 (id=14720):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7dffeffc)
close(r0)

787.668881ms ago: executing program 0 (id=14722):
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x4)

752.003665ms ago: executing program 2 (id=14725):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

751.697795ms ago: executing program 4 (id=14726):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

697.12924ms ago: executing program 4 (id=14727):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

687.439511ms ago: executing program 4 (id=14728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

620.440828ms ago: executing program 4 (id=14729):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffccc}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

525.104847ms ago: executing program 2 (id=14730):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0)
write$binfmt_elf32(r2, 0x0, 0x69)

469.151143ms ago: executing program 2 (id=14731):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b)

414.679369ms ago: executing program 1 (id=14733):
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0x8db0, 0x1, [{0x1, 0x1}]})

314.273608ms ago: executing program 1 (id=14734):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
copy_file_range(r2, 0x0, r2, 0x0, 0x9, 0x0)

257.249544ms ago: executing program 1 (id=14735):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r1, &(0x7f0000000200)=""/202, 0xca)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}})
tkill(r0, 0x7)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0)

214.731108ms ago: executing program 6 (id=14736):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = memfd_create(&(0x7f0000000100)='\vem\x9a\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

200.56448ms ago: executing program 6 (id=14737):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r3, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004)

141.181706ms ago: executing program 6 (id=14738):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

140.809376ms ago: executing program 1 (id=14739):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='rpm_return_int\x00', r0, 0x0, 0xffffffff}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000300), 0xf, 0xc340)

140.470536ms ago: executing program 1 (id=14748):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r2, 0x0, 0x79)

94.10209ms ago: executing program 0 (id=14740):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

93.83389ms ago: executing program 1 (id=14741):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
fallocate(r1, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffe000001})

67.485743ms ago: executing program 6 (id=14742):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r2)

46.415485ms ago: executing program 4 (id=14743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000025c0), 0x800, 0x0)

608.48µs ago: executing program 6 (id=14744):
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

0s ago: executing program 4 (id=14745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

 netlink: 'syz.7.13165': attribute type 9 has an invalid length.
[  583.333469][ T5115] netlink: 'syz.7.13165': attribute type 5 has an invalid length.
[  583.344138][T30329] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  583.425100][ T5128] loop8: detected capacity change from 0 to 512
[  583.444084][ T5128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  583.455007][ T5132] SELinux: failed to load policy
[  583.462482][ T5128] EXT4-fs (loop8): orphan cleanup on readonly fs
[  583.473052][ T5128] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13166: bg 0: block 248: padding at end of block bitmap is not set
[  583.491101][ T5128] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.13166: Failed to acquire dquot type 1
[  583.506237][ T5128] EXT4-fs (loop8): 1 truncate cleaned up
[  583.611319][ T5151] SELinux:  Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped).
[  583.755773][ T5169] loop8: detected capacity change from 0 to 128
[  583.778830][ T5169] ext4 filesystem being mounted at /515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  583.831822][ T5169] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.13190: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  583.851673][ T5169] EXT4-fs (loop8): Remounting filesystem read-only
[  584.094872][ T5216] can0: slcan on ptm0.
[  584.108351][ T5218] loop6: detected capacity change from 0 to 1024
[  584.139497][ T5216] can0 (unregistered): slcan off ptm0.
[  584.145921][ T5216] Falling back ldisc for ptm0.
[  584.411290][ T5266] lo speed is unknown, defaulting to 1000
[  584.423413][ T5266] lo speed is unknown, defaulting to 1000
[  584.507866][ T5272] loop6: detected capacity change from 0 to 512
[  584.517499][ T5272] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.13239: error while reading EA inode 32 err=-116
[  584.531210][ T5272] EXT4-fs (loop6): Remounting filesystem read-only
[  584.537807][ T5272] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  584.551309][ T5272] EXT4-fs (loop6): 1 orphan inode deleted
[  584.805289][ T5318] ref_ctr_offset mismatch. inode: 0x399b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  584.853521][ T5322] __nla_validate_parse: 2 callbacks suppressed
[  584.853592][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13262'.
[  584.870113][ T5322] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  585.013472][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13271'.
[  585.064497][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13273'.
[  585.110397][ T5356] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13275'.
[  585.121636][ T5354] usb usb8: usbfs: process 5354 (+}[@) did not claim interface 0 before use
[  585.158954][ T5360] loop7: detected capacity change from 0 to 512
[  585.163598][ T5362] loop8: detected capacity change from 0 to 512
[  585.174451][ T5360] EXT4-fs: Ignoring removed i_version option
[  585.182123][ T5360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  585.185964][ T5366] loop9: detected capacity change from 0 to 128
[  585.204286][ T5362] ext4 filesystem being mounted at /538/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  585.268528][ T5375] netlink: 'syz.4.13282': attribute type 16 has an invalid length.
[  585.275913][ T5373] loop8: detected capacity change from 0 to 1024
[  585.277557][ T5375] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13282'.
[  585.368500][ T4607] Bluetooth: hci0: Frame reassembly failed (-84)
[  585.407084][ T5403] loop8: detected capacity change from 0 to 764
[  586.123851][ T5441] loop6: detected capacity change from 0 to 512
[  586.162096][ T5448] loop9: detected capacity change from 0 to 512
[  586.173538][ T5448] ext4 filesystem being mounted at /167/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  586.295664][ T5474] sd 0:0:1:0: device reset
[  586.297274][ T5471] loop9: detected capacity change from 0 to 1024
[  586.311215][ T5471] EXT4-fs: Ignoring removed orlov option
[  586.392194][ T5484] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  586.409199][ T5486] veth0: entered promiscuous mode
[  586.415692][ T5486] veth0: left promiscuous mode
[  586.438224][ T5491] sctp: [Deprecated]: syz.4.13335 (pid 5491) Use of int in max_burst socket option deprecated.
[  586.438224][ T5491] Use struct sctp_assoc_value instead
[  586.486410][ T5497] pim6reg1: entered promiscuous mode
[  586.491880][ T5497] pim6reg1: entered allmulticast mode
[  586.588043][ T5512] loop6: detected capacity change from 0 to 512
[  586.626570][ T5519] loop9: detected capacity change from 0 to 7
[  586.633139][ T5519] buffer_io_error: 14683 callbacks suppressed
[  586.633155][ T5519] Buffer I/O error on dev loop9, logical block 0, async page read
[  586.648914][ T5519] Buffer I/O error on dev loop9, logical block 0, async page read
[  586.656810][ T5519]  loop9: unable to read partition table
[  586.662635][ T5519] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  586.662635][ T5519] 
) failed (rc=-5)
[  586.695374][   T29] kauditd_printk_skb: 215 callbacks suppressed
[  586.695390][   T29] audit: type=1400 audit(2000000038.500:46872): avc:  denied  { write } for  pid=5520 comm="syz.6.13348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  586.748219][ T5527] loop8: detected capacity change from 0 to 512
[  586.763295][ T5527] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  586.778451][   T29] audit: type=1400 audit(2000000038.570:46873): avc:  denied  { read } for  pid=5529 comm="syz.6.13352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  586.799185][   T29] audit: type=1400 audit(2000000038.580:46874): avc:  denied  { remount } for  pid=5526 comm="syz.8.13351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  586.840771][ T5532] netlink: 'syz.6.13353': attribute type 1 has an invalid length.
[  586.868451][   T29] audit: type=1400 audit(2000000038.670:46875): avc:  denied  { create } for  pid=5535 comm="syz.8.13355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  586.888942][   T29] audit: type=1400 audit(2000000038.670:46876): avc:  denied  { write } for  pid=5535 comm="syz.8.13355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  586.909382][   T29] audit: type=1400 audit(2000000038.670:46877): avc:  denied  { nlmsg_write } for  pid=5535 comm="syz.8.13355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  586.931754][   T29] audit: type=1326 audit(2000000038.670:46878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.13356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  586.956157][   T29] audit: type=1326 audit(2000000038.720:46879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.13356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  586.989496][   T29] audit: type=1326 audit(2000000038.790:46880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.13356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  587.013344][ T5540] SELinux:  Context � is not valid (left unmapped).
[  587.020756][   T29] audit: type=1326 audit(2000000038.790:46881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.13356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  587.082031][ T5548] loop6: detected capacity change from 0 to 1024
[  587.089012][ T5548] EXT4-fs: Ignoring removed orlov option
[  587.100463][ T5548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002]
[  587.108549][ T5548] System zones: 0-1, 3-12
[  587.145912][ T5556] loop6: detected capacity change from 0 to 164
[  587.160039][ T5556] bio_check_eod: 14683 callbacks suppressed
[  587.160056][ T5556] syz.6.13364: attempt to access beyond end of device
[  587.160056][ T5556] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  587.181349][ T5556] syz.6.13364: attempt to access beyond end of device
[  587.181349][ T5556] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  587.227535][ T5564] usb usb7: usbfs: process 5564 (syz.9.13367) did not claim interface 0 before use
[  587.261049][ T5568] loop9: detected capacity change from 0 to 512
[  587.267776][ T5568] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  587.274701][ T5570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13370'.
[  587.281229][ T5568] EXT4-fs (loop9): 1 truncate cleaned up
[  587.355167][ T5584] loop9: detected capacity change from 0 to 512
[  587.362064][ T5584] EXT4-fs: Ignoring removed i_version option
[  587.368060][ T5584] EXT4-fs: Ignoring removed bh option
[  587.385317][ T5587] loop6: detected capacity change from 0 to 1024
[  587.392841][ T5584] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  587.403178][T28705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  587.411246][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  587.430985][ T5593] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13380'.
[  587.442967][ T5587] ext4 filesystem being mounted at /662/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.463344][ T5597] loop7: detected capacity change from 0 to 128
[  587.469718][ T5587] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.13378: lblock 0 mapped to illegal pblock 0 (length 6)
[  587.470370][ T5587] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.13378: lblock 0 mapped to illegal pblock 0 (length 1)
[  587.470517][ T5587] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  587.470550][ T5587] EXT4-fs (loop6): This should not happen!! Data will be lost
[  587.470550][ T5587] 
[  587.539001][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.539001][ T5597] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128
[  587.554443][ T5601] netlink: 'syz.9.13382': attribute type 21 has an invalid length.
[  587.573918][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.573918][ T5597] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  587.596174][ T5607] loop6: detected capacity change from 0 to 164
[  587.611526][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.611526][ T5597] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128
[  587.636323][ T5613] SELinux:  Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped).
[  587.641180][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.641180][ T5597] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128
[  587.681667][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.681667][ T5597] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128
[  587.687257][T19056] kernel write not supported for file bpf-prog (pid: 19056 comm: kworker/1:5)
[  587.719407][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.719407][ T5597] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128
[  587.741068][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.741068][ T5597] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128
[  587.755658][ T5597] syz.7.13381: attempt to access beyond end of device
[  587.755658][ T5597] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128
[  587.787479][ T5619] loop6: detected capacity change from 0 to 164
[  587.810556][ T5619] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  587.851634][ T5625] loop8: detected capacity change from 0 to 128
[  587.866533][ T5625] ext4 filesystem being mounted at /560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  587.953858][ T5637] loop7: detected capacity change from 0 to 1024
[  587.966695][ T5637] EXT4-fs: Ignoring removed nobh option
[  587.973408][ T5637] EXT4-fs: inline encryption not supported
[  587.979317][ T5632] loop6: detected capacity change from 0 to 8192
[  588.001307][ T5641] loop8: detected capacity change from 0 to 512
[  588.010738][ T5641] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.13402: Failed to acquire dquot type 1
[  588.023943][ T5641] EXT4-fs (loop8): 1 truncate cleaned up
[  588.025665][ T5637] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  588.036757][ T5641] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  588.095195][ T5641] loop8: detected capacity change from 0 to 1024
[  588.105506][ T5651] loop7: detected capacity change from 0 to 512
[  588.105774][ T5649] loop6: detected capacity change from 0 to 2048
[  588.113366][ T5651] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  588.120897][ T5641] EXT4-fs: Ignoring removed orlov option
[  588.130179][ T5651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  588.143090][ T5651] System zones: 1-12
[  588.147059][ T5651] EXT4-fs (loop7): orphan cleanup on readonly fs
[  588.147696][ T5641] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  588.153570][ T5651] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm wg1: invalid indirect mapped block 12 (level 1)
[  588.153698][ T5651] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm wg1: invalid indirect mapped block 2 (level 2)
[  588.153974][ T5651] EXT4-fs (loop7): 1 truncate cleaned up
[  588.199014][ T5641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000]
[  588.213296][ T5641] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.13402: lblock 2 mapped to illegal pblock 2 (length 1)
[  588.228618][ T5641] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.13402: lblock 0 mapped to illegal pblock 48 (length 1)
[  588.244030][ T5641] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.13402: Failed to acquire dquot type 0
[  588.257112][ T5641] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  588.267866][ T5641] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.13402: mark_inode_dirty error
[  588.271820][ T4574] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  588.280613][ T5641] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  588.294979][ T4574] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1240 with error 28
[  588.306623][ T5641] EXT4-fs (loop8): 1 orphan inode deleted
[  588.319145][ T4574] EXT4-fs (loop6): This should not happen!! Data will be lost
[  588.319145][ T4574] 
[  588.334761][ T4574] EXT4-fs (loop6): Total free blocks count 0
[  588.340739][ T4574] EXT4-fs (loop6): Free/Dirty block details
[  588.346611][ T4574] EXT4-fs (loop6): free_blocks=2415919504
[  588.352349][ T4574] EXT4-fs (loop6): dirty_blocks=1248
[  588.357651][ T4574] EXT4-fs (loop6): Block reservation details
[  588.364194][ T4574] EXT4-fs (loop6): i_reserved_data_blocks=78
[  588.371079][ T4658] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:68: lblock 1 mapped to illegal pblock 1 (length 1)
[  588.385877][ T4658] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:68: Failed to release dquot type 0
[  588.398731][ T5641] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.13402: Invalid inode table block 1 in block_group 0
[  588.412473][ T5641] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  588.423323][ T5641] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz.8.13402: mark_inode_dirty error
[  588.439007][ T5661] loop6: detected capacity change from 0 to 256
[  588.454488][ T5661] FAT-fs (loop6): Directory bread(block 64) failed
[  588.462267][ T5661] FAT-fs (loop6): Directory bread(block 65) failed
[  588.468841][ T5661] FAT-fs (loop6): Directory bread(block 66) failed
[  588.470628][ T5663] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13408'.
[  588.476540][ T5661] FAT-fs (loop6): Directory bread(block 67) failed
[  588.493223][ T5661] FAT-fs (loop6): Directory bread(block 68) failed
[  588.500736][ T5661] FAT-fs (loop6): Directory bread(block 69) failed
[  588.507568][ T5661] FAT-fs (loop6): Directory bread(block 70) failed
[  588.515177][ T5661] FAT-fs (loop6): Directory bread(block 71) failed
[  588.523004][ T5661] FAT-fs (loop6): Directory bread(block 72) failed
[  588.530565][ T5661] FAT-fs (loop6): Directory bread(block 73) failed
[  588.580897][ T5673] loop8: detected capacity change from 0 to 512
[  588.592019][ T5673] EXT4-fs: Ignoring removed nomblk_io_submit option
[  588.598888][ T5677] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13415'.
[  588.599039][ T5673] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  588.624925][ T5673] EXT4-fs (loop8): 1 truncate cleaned up
[  588.673330][ T5686] random: crng reseeded on system resumption
[  588.692338][ T5684] loop6: detected capacity change from 0 to 8192
[  588.779263][ T5699] loop8: detected capacity change from 0 to 512
[  588.788272][ T5699] EXT4-fs: Ignoring removed nobh option
[  588.796406][ T5699] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  588.826682][ T5699] EXT4-fs (loop8): 1 truncate cleaned up
[  588.842940][ T5699] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 7 (only 1 groups)
[  588.871327][ T5710] loop9: detected capacity change from 0 to 512
[  588.917781][ T4658] Bluetooth: hci0: Frame reassembly failed (-84)
[  589.105909][ T5730] loop7: detected capacity change from 0 to 128
[  589.172315][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.186982][ T5740] loop8: detected capacity change from 0 to 512
[  589.187573][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.210658][ T5740] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  589.225702][ T5740] EXT4-fs (loop8): mount failed
[  589.242235][ T5740] loop8: detected capacity change from 0 to 1024
[  589.248991][ T5740] EXT4-fs: Ignoring removed bh option
[  589.254547][ T5740] EXT4-fs: inline encryption not supported
[  589.260984][ T5740] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  589.273121][ T5740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  589.282159][ T5740] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.13443: lblock 2 mapped to illegal pblock 2 (length 1)
[  589.296649][ T5740] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.13443: lblock 0 mapped to illegal pblock 48 (length 1)
[  589.312254][ T5740] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.13443: Failed to acquire dquot type 0
[  589.326132][ T5740] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  589.339486][ T5740] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.13443: mark_inode_dirty error
[  589.352368][ T5740] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  589.362757][ T5740] EXT4-fs (loop8): 1 orphan inode deleted
[  589.371621][ T5740] ext4: Unknown parameter 'e����s��C%'
[  589.390770][ T4581] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1)
[  589.406648][ T4581] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0
[  589.421942][T30329] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  589.435152][T30329] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  589.444767][T30329] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  589.637850][ T5756] loop8: detected capacity change from 0 to 512
[  589.647433][ T5756] journal_path: Non-blockdev passed as './bus'
[  589.653621][ T5756] EXT4-fs: error: could not find journal device path
[  589.685115][ T5758] ref_ctr_offset mismatch. inode: 0xbde offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  589.797281][ T5767] loop6: detected capacity change from 0 to 8192
[  589.971820][ T5788] loop8: detected capacity change from 0 to 512
[  590.000913][ T5788] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.023752][ T5796] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13467'.
[  590.112890][ T5808] loop6: detected capacity change from 0 to 128
[  590.126427][ T5804] loop8: detected capacity change from 0 to 2048
[  590.129391][ T5808] ext4 filesystem being mounted at /682/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  590.166425][ T5807] loop7: detected capacity change from 0 to 128
[  590.181587][ T5803] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  590.182189][ T5807] Buffer I/O error on dev loop7, logical block 79, lost async page write
[  590.206499][ T5807] Buffer I/O error on dev loop7, logical block 80, lost async page write
[  590.215422][ T5807] Buffer I/O error on dev loop7, logical block 83, lost async page write
[  590.223957][ T5807] Buffer I/O error on dev loop7, logical block 84, lost async page write
[  590.234444][ T5807] Buffer I/O error on dev loop7, logical block 95, lost async page write
[  590.242926][ T5807] Buffer I/O error on dev loop7, logical block 96, lost async page write
[  590.251966][ T5807] Buffer I/O error on dev loop7, logical block 99, lost async page write
[  590.261757][ T5807] Buffer I/O error on dev loop7, logical block 100, lost async page write
[  590.303133][ T5813] loop6: detected capacity change from 0 to 512
[  590.313252][ T5813] EXT4-fs: dax option not supported
[  590.367656][ T5818] loop8: detected capacity change from 0 to 512
[  590.460948][ T5830] netlink: 92 bytes leftover after parsing attributes in process `syz.6.13482'.
[  590.471775][ T5830] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13482'.
[  590.497859][ T5834] loop7: detected capacity change from 0 to 512
[  590.512448][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13485'.
[  590.526741][ T5834] ext4 filesystem being mounted at /667/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.559169][ T5834] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  590.647752][ T5860] loop8: detected capacity change from 0 to 1024
[  590.657698][ T5863] x_tables: unsorted underflow at hook 1
[  590.676789][ T5860] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13496: bg 0: block 88: padding at end of block bitmap is not set
[  590.792954][ T5884] wireguard0: entered promiscuous mode
[  590.798534][ T5884] wireguard0: entered allmulticast mode
[  590.912169][ T5905] team0: No ports can be present during mode change
[  590.919450][T28705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  590.925537][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  590.932978][ T5716] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  590.975900][ T5915] loop9: detected capacity change from 0 to 512
[  590.994527][ T5915] EXT4-fs warning (device loop9): ext4_group_extend:1891: can't read last block, resize aborted
[  591.023590][ T5921] tipc: Started in network mode
[  591.028464][ T5921] tipc: Node identity ac14140f, cluster identity 4711
[  591.036022][ T5921] tipc: New replicast peer: 255.255.255.83
[  591.042642][ T5921] tipc: Enabled bearer <udp:�>, priority 10
[  591.084457][ T5927] loop7: detected capacity change from 0 to 128
[  591.110995][ T5931] IPv6: Can't replace route, no match found
[  591.296511][ T5946] netlink: 'syz.7.13535': attribute type 5 has an invalid length.
[  591.320557][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13536'.
[  591.370328][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13539'.
[  591.706573][   T29] kauditd_printk_skb: 199 callbacks suppressed
[  591.706636][   T29] audit: type=1400 audit(2000000044.516:47072): avc:  denied  { read write } for  pid=5988 comm="syz.6.13556" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  591.737658][   T29] audit: type=1400 audit(2000000044.516:47073): avc:  denied  { open } for  pid=5988 comm="syz.6.13556" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  591.761697][   T29] audit: type=1400 audit(2000000044.516:47074): avc:  denied  { write } for  pid=5988 comm="syz.6.13556" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  591.785812][   T29] audit: type=1400 audit(2000000044.516:47075): avc:  denied  { open } for  pid=5988 comm="syz.6.13556" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  591.872412][   T29] audit: type=1400 audit(2000000044.686:47076): avc:  denied  { allowed } for  pid=5991 comm="syz.6.13557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  591.893991][   T29] audit: type=1400 audit(2000000044.686:47077): avc:  denied  { sqpoll } for  pid=5991 comm="syz.6.13557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  591.913444][   T29] audit: type=1400 audit(2000000044.686:47078): avc:  denied  { create } for  pid=5991 comm="syz.6.13557" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  591.956908][   T29] audit: type=1400 audit(2000000044.766:47079): avc:  denied  { create } for  pid=5994 comm="syz.9.13558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  591.978253][   T29] audit: type=1400 audit(2000000044.766:47080): avc:  denied  { setopt } for  pid=5994 comm="syz.9.13558" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  592.040672][T20886] tipc: Node number set to 2886997007
[  592.062709][   T29] audit: type=1400 audit(2000000044.876:47081): avc:  denied  { read } for  pid=6002 comm="syz.9.13562" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  592.171492][ T6011] loop9: detected capacity change from 0 to 1024
[  592.178310][ T6011] EXT4-fs: inline encryption not supported
[  592.198996][ T6011] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.13565: Allocating blocks 385-513 which overlap fs metadata
[  592.214113][ T6010] EXT4-fs (loop9): pa ffff888100622460: logic 16, phys. 129, len 24
[  592.223436][ T6010] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8
[  592.434812][ T6046] loop9: detected capacity change from 0 to 512
[  592.441860][ T6046] EXT4-fs: dax option not supported
[  592.526891][ T6058] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13587'.
[  592.537166][ T6058] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13587'.
[  593.000573][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  593.006622][T28705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  593.499302][ T6133] syzkaller1: entered promiscuous mode
[  593.499323][ T6133] syzkaller1: entered allmulticast mode
[  593.748422][ T6157] random: crng reseeded on system resumption
[  593.852674][ T6168] netlink: 256 bytes leftover after parsing attributes in process `syz.8.13639'.
[  593.973806][ T6188] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  594.161763][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13665'.
[  594.292230][ T6235] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  594.338079][ T6243] loop8: detected capacity change from 0 to 512
[  594.350486][ T6243] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  594.376449][ T6243] EXT4-fs (loop8): 1 truncate cleaned up
[  594.419716][ T6255] loop8: detected capacity change from 0 to 1764
[  594.714621][T20887] hid_parser_main: 8 callbacks suppressed
[  594.714649][T20887] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[  594.727629][ T6272] loop8: detected capacity change from 0 to 512
[  594.729150][T20887] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[  594.745201][T20887] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3
[  594.754443][T20887] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  594.768091][ T6272] ext4 filesystem being mounted at /623/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  594.804697][ T6276] loop8: detected capacity change from 0 to 128
[  594.860531][ T6282] pim6reg1: entered promiscuous mode
[  594.865856][ T6282] pim6reg1: entered allmulticast mode
[  594.872721][ T6283] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  594.881658][ T6283] FAT-fs (loop8): Filesystem has been set read-only
[  594.892453][ T6283] bio_check_eod: 44 callbacks suppressed
[  594.892466][ T6283] syz.8.13686: attempt to access beyond end of device
[  594.892466][ T6283] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  594.915523][ T6283] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  594.924527][ T6283] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  594.934323][ T6283] syz.8.13686: attempt to access beyond end of device
[  594.934323][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  594.949067][ T6283] syz.8.13686: attempt to access beyond end of device
[  594.949067][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  594.964680][ T6283] syz.8.13686: attempt to access beyond end of device
[  594.964680][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  594.980568][ T6283] syz.8.13686: attempt to access beyond end of device
[  594.980568][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  594.995144][ T6283] syz.8.13686: attempt to access beyond end of device
[  594.995144][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  595.058543][ T6283] syz.8.13686: attempt to access beyond end of device
[  595.058543][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  595.073794][ T6283] syz.8.13686: attempt to access beyond end of device
[  595.073794][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  595.090779][ T6283] syz.8.13686: attempt to access beyond end of device
[  595.090779][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  595.120469][ T6283] syz.8.13686: attempt to access beyond end of device
[  595.120469][ T6283] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  595.142445][ T6293] loop6: detected capacity change from 0 to 1024
[  595.149236][ T6293] EXT4-fs: inline encryption not supported
[  595.182280][ T6293] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.13694: Allocating blocks 497-513 which overlap fs metadata
[  595.233069][ T6297] loop7: detected capacity change from 0 to 128
[  595.248436][ T6298] EXT4-fs (loop6): pa ffff8881006225b0: logic 16, phys. 145, len 23
[  595.257449][ T6298] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  595.282029][ T6297] ext4 filesystem being mounted at /720/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  595.327272][ T6298] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28
[  595.340677][ T6298] EXT4-fs (loop6): This should not happen!! Data will be lost
[  595.340677][ T6298] 
[  595.351410][ T6298] EXT4-fs (loop6): Total free blocks count 0
[  595.357400][ T6298] EXT4-fs (loop6): Free/Dirty block details
[  595.364365][ T6298] EXT4-fs (loop6): free_blocks=16
[  595.369391][ T6298] EXT4-fs (loop6): dirty_blocks=0
[  595.375458][ T6298] EXT4-fs (loop6): Block reservation details
[  595.382541][ T6298] EXT4-fs (loop6): i_reserved_data_blocks=0
[  595.453213][ T6311] usb usb7: usbfs: process 6311 (syz.6.13700) did not claim interface 0 before use
[  595.482765][ T6316] loop7: detected capacity change from 0 to 128
[  595.532755][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13704'.
[  595.681586][ T6340] loop6: detected capacity change from 0 to 512
[  595.700411][ T6340] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  595.730320][ T6340] EXT4-fs (loop6): 1 truncate cleaned up
[  595.797796][ T6358] loop6: detected capacity change from 0 to 128
[  595.871065][ T6371] IPv6: NLM_F_CREATE should be specified when creating new route
[  595.879044][ T6373] loop6: detected capacity change from 0 to 512
[  595.911966][ T6373] ext4 filesystem being mounted at /731/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  595.933612][ T6382] loop7: detected capacity change from 0 to 128
[  595.955811][T20887] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4
[  595.964710][T20887] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2
[  595.976218][T20887] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3
[  595.982903][ T6382] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  595.985968][T20887] hid-generic 0000:3000000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  595.993057][ T6382] FAT-fs (loop7): Filesystem has been set read-only
[  596.010643][ T6382] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  596.010774][ T6389] netlink: 256 bytes leftover after parsing attributes in process `syz.6.13734'.
[  596.018462][ T6382] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  596.116048][ T6398] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  596.136785][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.164218][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.206180][ T6407] syzkaller1: entered promiscuous mode
[  596.212703][ T6407] syzkaller1: entered allmulticast mode
[  596.311048][ T6415] loop9: detected capacity change from 0 to 512
[  596.326746][ T6415] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  596.341201][ T6415] EXT4-fs (loop9): 1 truncate cleaned up
[  596.409212][ T6427] netlink: 252 bytes leftover after parsing attributes in process `syz.9.13748'.
[  596.727194][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13756'.
[  596.804064][ T6447] loop8: detected capacity change from 0 to 1024
[  596.820803][ T6447] EXT4-fs: Ignoring removed orlov option
[  596.852872][   T29] kauditd_printk_skb: 154 callbacks suppressed
[  596.852885][   T29] audit: type=1400 audit(2000000049.666:47236): avc:  denied  { execmem } for  pid=6451 comm="syz.7.13760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  596.896750][   T29] audit: type=1400 audit(2000000049.706:47237): avc:  denied  { relabelfrom } for  pid=6455 comm="syz.8.13762" name="" dev="pipefs" ino=125263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  596.920940][   T29] audit: type=1400 audit(2000000049.706:47238): avc:  denied  { mac_admin } for  pid=6455 comm="syz.8.13762" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  596.942255][   T29] audit: type=1400 audit(2000000049.706:47239): avc:  denied  { relabelto } for  pid=6455 comm="syz.8.13762" name="" dev="pipefs" ino=125263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0"
[  597.006081][ T6461] random: crng reseeded on system resumption
[  597.034373][ T6467] ALSA: seq fatal error: cannot create timer (-19)
[  597.076146][ T6474] loop6: detected capacity change from 0 to 1024
[  597.087176][ T6474] EXT4-fs: Ignoring removed nobh option
[  597.093807][ T6474] EXT4-fs: inline encryption not supported
[  597.135512][ T6474] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  597.151379][   T29] audit: type=1400 audit(2000000049.936:47240): avc:  denied  { append } for  pid=6473 comm="syz.6.13770" path="/738/file1/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  597.194556][   T29] audit: type=1400 audit(2000000049.986:47241): avc:  denied  { write } for  pid=6483 comm="syz.8.13774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  597.283394][   T29] audit: type=1400 audit(2000000051.094:47242): avc:  denied  { watch watch_reads } for  pid=6504 comm="syz.6.13783" path="/proc/1626/net/pfkey" dev="proc" ino=4026533609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  597.344672][ T6509] program syz.7.13786 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.345716][   T29] audit: type=1400 audit(2000000051.154:47243): avc:  denied  { write } for  pid=6508 comm="syz.7.13786" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  597.363593][ T6509] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  597.380601][ T6501] ALSA: seq fatal error: cannot create timer (-19)
[  597.413534][   T29] audit: type=1400 audit(2000000051.214:47244): avc:  denied  { egress } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  597.438197][   T29] audit: type=1400 audit(2000000051.214:47245): avc:  denied  { sendto } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  597.445061][ T6517] loop8: detected capacity change from 0 to 1024
[  597.473673][ T6517] EXT4-fs: Ignoring removed nobh option
[  597.473701][ T6517] EXT4-fs: inline encryption not supported
[  597.505020][ T6524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13792'.
[  597.513575][ T6517] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  597.593145][ T6532] loop7: detected capacity change from 0 to 512
[  597.601014][ T6532] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  597.614072][ T6532] EXT4-fs (loop7): 1 truncate cleaned up
[  597.733416][ T6550] loop8: detected capacity change from 0 to 512
[  597.734000][ T6550] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  597.742271][ T6550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  597.742299][ T6550] System zones: 1-12
[  597.742420][ T6550] EXT4-fs (loop8): orphan cleanup on readonly fs
[  597.743227][ T6550] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm wg1: invalid indirect mapped block 12 (level 1)
[  597.743355][ T6550] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm wg1: invalid indirect mapped block 2 (level 2)
[  597.743572][ T6550] EXT4-fs (loop8): 1 truncate cleaned up
[  597.763508][ T6557] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  597.886509][ T6571] sd 0:0:1:0: device reset
[  598.133317][ T6597] loop8: detected capacity change from 0 to 512
[  598.143255][ T6597] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.13824: bad orphan inode 15
[  598.143392][ T6597] ext4_test_bit(bit=14, block=18) = 1
[  598.143405][ T6597] is_bad_inode(inode)=0
[  598.143412][ T6597] NEXT_ORPHAN(inode)=1023
[  598.143419][ T6597] max_ino=32
[  598.143426][ T6597] i_nlink=0
[  598.143490][ T6597] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2967: inode #15: comm syz.8.13824: corrupted xattr block 19: invalid header
[  598.143696][ T6597] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117)
[  598.144140][ T6597] ext4 filesystem being mounted at /652/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  598.196669][ T6603] loop7: detected capacity change from 0 to 512
[  598.230667][ T6603] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  598.230773][ T6603] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  598.230795][ T6603] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.13827: Corrupt directory, running e2fsck is recommended
[  598.230933][ T6603] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  598.231011][ T6603] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.13827: corrupted in-inode xattr: invalid ea_ino
[  598.231182][ T6603] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.13827: couldn't read orphan inode 15 (err -117)
[  598.232837][ T6603] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  598.313806][ T6603] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  598.313831][ T6603] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.13827: Corrupt directory, running e2fsck is recommended
[  598.314312][ T6603] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.13827: path /750/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  598.338052][ T6603] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 64: comm syz.7.13827: path /750/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  598.481438][ T6620] loop7: detected capacity change from 0 to 1764
[  598.520879][T28705] Bluetooth: hci0: command 0x1003 tx timeout
[  598.526964][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  598.541366][ T6625] vhci_hcd: invalid port number 0
[  598.568460][ T6634] loop9: detected capacity change from 0 to 512
[  598.582039][ T6631] loop8: detected capacity change from 0 to 4096
[  598.592828][ T6639] x_tables: unsorted underflow at hook 1
[  598.604562][ T6634] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.618852][ T6641] netlink: 'syz.6.13843': attribute type 1 has an invalid length.
[  598.627670][ T6641] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13843'.
[  598.638442][ T6634] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  598.679300][ T6646] loop8: detected capacity change from 0 to 512
[  598.708711][ T6646] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.721019][ T6652] syzkaller1: entered promiscuous mode
[  598.726558][ T6652] syzkaller1: entered allmulticast mode
[  598.744032][ T6655] loop7: detected capacity change from 0 to 128
[  598.761631][ T6655] ext4 filesystem being mounted at /758/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.992255][ T6686] SELinux: failed to load policy
[  599.014041][ T6701] loop7: detected capacity change from 0 to 512
[  599.057165][ T6712] loop6: detected capacity change from 0 to 128
[  599.076593][ T6701] EXT4-fs warning (device loop7): ext4_group_extend:1891: can't read last block, resize aborted
[  599.124598][ T6725] loop7: detected capacity change from 0 to 128
[  599.175933][ T6733] batadv_slave_1: entered promiscuous mode
[  599.187086][ T6733] batadv_slave_1: left promiscuous mode
[  599.198285][ T6740] netlink: 172 bytes leftover after parsing attributes in process `syz.7.13886'.
[  599.250646][ T6744] loop9: detected capacity change from 0 to 1024
[  599.257754][ T6748] loop8: detected capacity change from 0 to 128
[  599.268566][ T6748] buffer_io_error: 20 callbacks suppressed
[  599.268580][ T6748] Buffer I/O error on dev loop8, logical block 79, lost async page write
[  599.284559][ T6748] Buffer I/O error on dev loop8, logical block 80, lost async page write
[  599.293874][ T6744] EXT4-fs mount: 128 callbacks suppressed
[  599.293888][ T6744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.293965][ T6748] Buffer I/O error on dev loop8, logical block 83, lost async page write
[  599.318411][ T6754] loop7: detected capacity change from 0 to 512
[  599.322452][ T6748] Buffer I/O error on dev loop8, logical block 84, lost async page write
[  599.323075][ T6748] Buffer I/O error on dev loop8, logical block 95, lost async page write
[  599.342908][ T6744] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13890: bg 0: block 88: padding at end of block bitmap is not set
[  599.347017][ T6748] Buffer I/O error on dev loop8, logical block 96, lost async page write
[  599.371936][ T6748] Buffer I/O error on dev loop8, logical block 99, lost async page write
[  599.380444][ T6748] Buffer I/O error on dev loop8, logical block 100, lost async page write
[  599.382671][ T6754] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  599.397334][ T6756] loop6: detected capacity change from 0 to 512
[  599.398255][ T6748] Buffer I/O error on dev loop8, logical block 111, lost async page write
[  599.406794][ T6754] EXT4-fs (loop7): orphan cleanup on readonly fs
[  599.420926][ T6748] Buffer I/O error on dev loop8, logical block 112, lost async page write
[  599.431222][ T6754] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.13894: bad orphan inode 15
[  599.442772][ T6754] ext4_test_bit(bit=14, block=18) = 1
[  599.448144][ T6754] is_bad_inode(inode)=0
[  599.451908][ T2947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.453276][ T6754] NEXT_ORPHAN(inode)=1023
[  599.466524][ T6754] max_ino=32
[  599.470914][ T6754] i_nlink=0
[  599.474060][ T6756] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  599.474293][ T6754] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #15: comm syz.7.13894: corrupted xattr block 19: e_value size too large
[  599.484853][ T6756] EXT4-fs (loop6): orphan cleanup on readonly fs
[  599.498706][ T6754] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  599.515172][ T6754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  599.528552][ T6756] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.13895: corrupted inode contents
[  599.542163][ T6756] EXT4-fs (loop6): Remounting filesystem read-only
[  599.548946][ T6756] EXT4-fs (loop6): 1 truncate cleaned up
[  599.549238][T29427] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.566030][ T4579] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  599.577601][ T4579] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  599.591275][ T4579] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  599.594938][ T6761] SELinux: ebitmap: truncated map
[  599.610950][ T6761] SELinux: failed to load policy
[  599.616389][ T6756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  599.629592][ T6756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.687185][ T6769] loop8: detected capacity change from 0 to 128
[  599.712745][ T6769] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  599.727748][ T6777] loop9: detected capacity change from 0 to 128
[  599.750759][ T6769] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  599.793642][ T4581] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  599.931583][ T6812] loop6: detected capacity change from 0 to 512
[  599.942369][ T6812] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  599.967786][ T6812] EXT4-fs (loop6): 1 truncate cleaned up
[  599.975345][ T6812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  600.055847][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.072654][ T6835] syz.7.13931: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  600.088738][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.7.13931 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  600.088775][ T6835] Tainted: [W]=WARN
[  600.088781][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  600.088867][ T6835] Call Trace:
[  600.088873][ T6835]  <TASK>
[  600.088881][ T6835]  __dump_stack+0x1d/0x30
[  600.088905][ T6835]  dump_stack_lvl+0xe8/0x140
[  600.088950][ T6835]  dump_stack+0x15/0x1b
[  600.088968][ T6835]  warn_alloc+0x12b/0x1a0
[  600.089007][ T6835]  __vmalloc_node_range_noprof+0x9d/0xed0
[  600.089065][ T6835]  ? do_user_addr_fault+0xbad/0x1080
[  600.089110][ T6835]  ? should_fail_ex+0x30/0x280
[  600.089129][ T6835]  ? xskq_create+0x36/0xe0
[  600.089171][ T6835]  vmalloc_user_noprof+0x7d/0xb0
[  600.089204][ T6835]  ? xskq_create+0x80/0xe0
[  600.089228][ T6835]  xskq_create+0x80/0xe0
[  600.089251][ T6835]  xsk_init_queue+0x95/0xf0
[  600.089312][ T6835]  xsk_setsockopt+0x477/0x640
[  600.089334][ T6835]  ? __pfx_xsk_setsockopt+0x10/0x10
[  600.089363][ T6835]  __sys_setsockopt+0x184/0x200
[  600.089472][ T6835]  __x64_sys_setsockopt+0x64/0x80
[  600.089512][ T6835]  x64_sys_call+0x20ec/0x3000
[  600.089539][ T6835]  do_syscall_64+0xd2/0x200
[  600.089562][ T6835]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  600.089671][ T6835]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  600.089714][ T6835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.089736][ T6835] RIP: 0033:0x7f4aa170f6c9
[  600.089755][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  600.089800][ T6835] RSP: 002b:00007f4aa016f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  600.089822][ T6835] RAX: ffffffffffffffda RBX: 00007f4aa1965fa0 RCX: 00007f4aa170f6c9
[  600.089838][ T6835] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  600.089854][ T6835] RBP: 00007f4aa1791f91 R08: 0000000000000004 R09: 0000000000000000
[  600.089922][ T6835] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.089937][ T6835] R13: 00007f4aa1966038 R14: 00007f4aa1965fa0 R15: 00007fff2fe6a5f8
[  600.089960][ T6835]  </TASK>
[  600.299605][ T6835] Mem-Info:
[  600.303128][ T6835] active_anon:9420 inactive_anon:14182 isolated_anon:0
[  600.303128][ T6835]  active_file:14071 inactive_file:15890 isolated_file:0
[  600.303128][ T6835]  unevictable:16875 dirty:222 writeback:0
[  600.303128][ T6835]  slab_reclaimable:4123 slab_unreclaimable:133664
[  600.303128][ T6835]  mapped:28922 shmem:18493 pagetables:1586
[  600.303128][ T6835]  sec_pagetables:0 bounce:0
[  600.303128][ T6835]  kernel_misc_reclaimable:0
[  600.303128][ T6835]  free:1558523 free_pcp:10003 free_cma:0
[  600.323555][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13929'.
[  600.350495][ T6835] Node 0 active_anon:37796kB inactive_anon:56728kB active_file:56284kB inactive_file:63560kB unevictable:67500kB isolated(anon):0kB isolated(file):0kB mapped:115688kB dirty:888kB writeback:0kB shmem:73972kB kernel_stack:4832kB pagetables:6344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  600.388374][ T6835] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  600.418222][ T6835] lowmem_reserve[]: 0 2881 7859 7859
[  600.424968][ T6835] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB
[  600.457791][ T6835] lowmem_reserve[]: 0 0 4978 4978
[  600.463214][ T6835] Node 0 Normal free:3272108kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37796kB inactive_anon:56728kB active_file:56284kB inactive_file:63560kB unevictable:67500kB writepending:888kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35936kB local_pcp:19796kB free_cma:0kB
[  600.490890][ T6843] loop8: detected capacity change from 0 to 512
[  600.498270][ T6835] lowmem_reserve[]: 0 0 0 0
[  600.504895][ T6843] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13943: bg 0: block 393: padding at end of block bitmap is not set
[  600.507910][ T6835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  600.524548][ T6843] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  600.536301][ T6835] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB
[  600.536576][ T6835] Node 0 Normal: 2925*4kB (UM) 815*8kB (UME) 1288*16kB (UME) 954*32kB (UME) 453*64kB (UME) 403*128kB (UME) 178*256kB (UME) 107*512kB (UM) 89*1024kB (UME) 65*2048kB (UM) 683*4096kB (UM) = 3272108kB
[  600.536837][ T6835] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  600.536857][ T6835] 65414 total pagecache pages
[  600.536867][ T6835] 62 pages in swap cache
[  600.536875][ T6835] Free swap  = 115844kB
[  600.536883][ T6835] Total swap = 124996kB
[  600.536914][ T6835] 2097051 pages RAM
[  600.536921][ T6835] 0 pages HighMem/MovableOnly
[  600.536930][ T6835] 81087 pages reserved
[  600.625648][ T6843] EXT4-fs (loop8): 2 truncates cleaned up
[  600.632808][ T6843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  600.710609][ T6843] loop8: detected capacity change from 512 to 0
[  600.710827][    C1] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  600.728999][ T6859] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.8.13943: unable to read itable block
[  600.744534][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.758324][ T6859] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.8.13943: unable to read itable block
[  600.773002][ T6861] loop7: detected capacity change from 0 to 1024
[  600.781003][ T6861] EXT4-fs: inline encryption not supported
[  600.787046][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.793823][ T6859] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure
[  600.803539][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.811529][ T6859] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #18: comm syz.8.13943: mark_inode_dirty error
[  600.823332][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.830887][ T6859] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.8.13943: unable to read itable block
[  600.845166][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.851988][ T6859] EXT4-fs error (device loop8): ext4_get_max_inline_size:121: inode #18: comm syz.8.13943: can't get inode location 18
[  600.864698][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.873408][ T6859] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.8.13943: unable to read itable block
[  600.888089][ T6861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  600.917992][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.924830][ T6859] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure
[  600.937928][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.944738][ T6859] EXT4-fs error (device loop8): ext4_truncate:4637: inode #18: comm syz.8.13943: mark_inode_dirty error
[  600.964328][T29427] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.985459][ T6859] EXT4-fs (loop8): I/O error while writing superblock
[  600.997700][ T6873] loop7: detected capacity change from 0 to 1024
[  601.006982][T30329] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  601.022070][T30329] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block
[  601.037211][ T6873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.071641][ T6873] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13945: bg 0: block 88: padding at end of block bitmap is not set
[  601.112540][T29427] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.245506][ T4607] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.307957][ T4607] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.364664][ T4607] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.412678][ T4607] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.465743][ T6927] loop6: detected capacity change from 0 to 128
[  601.480936][ T6927] bio_check_eod: 32042 callbacks suppressed
[  601.480966][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.480966][ T6927] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128
[  601.524016][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.524016][ T6927] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128
[  601.547875][ T6916] lo speed is unknown, defaulting to 1000
[  601.554505][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.554505][ T6927] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128
[  601.554848][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.554848][ T6927] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128
[  601.593590][ T4607] bridge_slave_1: left allmulticast mode
[  601.599302][ T4607] bridge_slave_1: left promiscuous mode
[  601.605981][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.614982][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.614982][ T6927] loop6: rw=2049, sector=166, nr_sectors = 2 limit=128
[  601.630919][ T4607] bridge_slave_0: left allmulticast mode
[  601.635747][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.635747][ T6927] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128
[  601.636601][ T4607] bridge_slave_0: left promiscuous mode
[  601.636708][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.664908][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.664908][ T6927] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128
[  601.705133][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.705133][ T6927] loop6: rw=2049, sector=190, nr_sectors = 2 limit=128
[  601.733513][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13975'.
[  601.738294][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.738294][ T6927] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128
[  601.762787][ T6927] syz.6.13972: attempt to access beyond end of device
[  601.762787][ T6927] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128
[  601.812631][ T4607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.823993][ T4607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.834511][ T4607] bond0 (unregistering): Released all slaves
[  601.843834][ T6916] lo speed is unknown, defaulting to 1000
[  601.872148][ T4607] tipc: Disabling bearer <udp:s>
[  601.877113][ T4607] tipc: Disabling bearer <udp:syz1>
[  601.883451][ T4607] tipc: Left network mode
[  601.943595][   T29] kauditd_printk_skb: 211 callbacks suppressed
[  601.943610][   T29] audit: type=1400 audit(2000000055.754:47451): avc:  denied  { read write } for  pid=6941 comm="syz.6.13978" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  601.976057][   T29] audit: type=1400 audit(2000000055.754:47452): avc:  denied  { open } for  pid=6941 comm="syz.6.13978" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  602.011646][   T29] audit: type=1400 audit(2000000055.814:47453): avc:  denied  { ioctl } for  pid=6941 comm="syz.6.13978" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  602.079599][   T29] audit: type=1400 audit(2000000055.894:47454): avc:  denied  { connect } for  pid=6947 comm="syz.6.13981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  602.135594][ T4607] hsr_slave_0: left promiscuous mode
[  602.144914][ T4607] hsr_slave_1: left promiscuous mode
[  602.155734][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  602.164241][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  602.183577][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  602.187273][   T29] audit: type=1400 audit(2000000055.994:47455): avc:  denied  { create } for  pid=6962 comm="syz.6.13988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  602.192108][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  602.217306][ T4658] Bluetooth: hci0: Frame reassembly failed (-84)
[  602.228492][ T4607] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  602.236753][ T4607] batman_adv: batadv0: Removing interface: veth1_vlan
[  602.246367][   T29] audit: type=1400 audit(2000000056.054:47456): avc:  denied  { ioctl } for  pid=6962 comm="syz.6.13988" path="socket:[126919]" dev="sockfs" ino=126919 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  602.282290][ T4607] veth1_macvtap: left promiscuous mode
[  602.296484][ T4607] veth0_macvtap: left promiscuous mode
[  602.303659][ T4607] veth1_vlan: left promiscuous mode
[  602.308989][ T4607] veth0_vlan: left promiscuous mode
[  602.345633][ T6969] loop9: detected capacity change from 0 to 7
[  602.353760][ T6969]  loop9: unable to read partition table
[  602.360216][ T6969] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  602.360216][ T6969] 
) failed (rc=-5)
[  602.377718][   T29] audit: type=1400 audit(2000000056.184:47457): avc:  denied  { tracepoint } for  pid=6970 comm="syz.4.13992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  602.409268][T20887] SELinux: failure in sel_netif_sid_slow(), invalid network interface (31)
[  602.453544][ T4607] team0 (unregistering): Port device team_slave_1 removed
[  602.488907][ T4607] team0 (unregistering): Port device team_slave_0 removed
[  602.537308][   T29] audit: type=1400 audit(2000000056.344:47458): avc:  denied  { create } for  pid=6981 comm="syz.9.13997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  602.586391][   T29] audit: type=1400 audit(2000000056.364:47459): avc:  denied  { write } for  pid=6981 comm="syz.9.13997" name="file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  602.594756][ T6979] lo speed is unknown, defaulting to 1000
[  602.610104][   T29] audit: type=1400 audit(2000000056.364:47460): avc:  denied  { open } for  pid=6981 comm="syz.9.13997" path="/255/file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  602.624773][ T6916] chnl_net:caif_netlink_parms(): no params data found
[  602.648572][ T6979] lo speed is unknown, defaulting to 1000
[  602.655346][ T6987] sd 0:0:1:0: device reset
[  602.693334][ T6992] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  602.711628][ T6992] SELinux: failed to load policy
[  602.726752][ T6990] syzkaller1: entered promiscuous mode
[  602.733387][ T6990] syzkaller1: entered allmulticast mode
[  602.782236][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.789360][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.797796][ T6916] bridge_slave_0: entered allmulticast mode
[  602.806057][ T6916] bridge_slave_0: entered promiscuous mode
[  602.820725][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.827939][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.836238][ T6916] bridge_slave_1: entered allmulticast mode
[  602.844072][ T6916] bridge_slave_1: entered promiscuous mode
[  602.892114][ T7000] loop9: detected capacity change from 0 to 128
[  602.900746][ T6998] loop7: detected capacity change from 0 to 512
[  602.914214][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13996'.
[  602.914239][ T6998] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14011: bg 0: block 393: padding at end of block bitmap is not set
[  602.924620][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13996'.
[  602.945453][ T6998] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  602.949740][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.958072][ T6998] EXT4-fs (loop7): 2 truncates cleaned up
[  602.971821][ T6998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.986788][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.020667][ T6916] team0: Port device team_slave_0 added
[  603.027376][ T6916] team0: Port device team_slave_1 added
[  603.058842][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.066819][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.093801][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.106426][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.114407][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.140889][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.170512][ T6998] loop7: detected capacity change from 512 to 0
[  603.171298][ T7010] EXT4-fs error (device loop7): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.7.14011: unable to read itable block
[  603.176857][    C0] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  603.190652][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.208698][ T7010] EXT4-fs error (device loop7): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.7.14011: unable to read itable block
[  603.211727][ T6916] hsr_slave_0: entered promiscuous mode
[  603.222786][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.229875][ T6916] hsr_slave_1: entered promiscuous mode
[  603.234890][ T7010] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: IO failure
[  603.241374][ T6916] debugfs: 'hsr0' already exists in 'hsr'
[  603.250516][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.255001][ T6916] Cannot create hsr debugfs directory
[  603.262669][ T7010] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #18: comm syz.7.14011: mark_inode_dirty error
[  603.279221][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.287148][ T7010] EXT4-fs error (device loop7): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.7.14011: unable to read itable block
[  603.301083][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.307853][ T7010] EXT4-fs error (device loop7): ext4_get_max_inline_size:121: inode #18: comm syz.7.14011: can't get inode location 18
[  603.321432][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.328434][ T7010] EXT4-fs error (device loop7): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.7.14011: unable to read itable block
[  603.354408][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.361239][ T7010] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: IO failure
[  603.396871][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.403827][ T7010] EXT4-fs error (device loop7): ext4_truncate:4637: inode #18: comm syz.7.14011: mark_inode_dirty error
[  603.423585][ T7010] EXT4-fs (loop7): I/O error while writing superblock
[  603.476428][T29427] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  603.493338][T29427] EXT4-fs error (device loop7): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block
[  603.763933][ T6916] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  603.775771][ T6916] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  603.793609][ T4579] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  603.805019][ T4579] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.817551][ T6916] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  603.827653][ T6916] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  603.863728][ T4579] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  603.875104][ T4579] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.897468][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.911733][ T6916] 8021q: adding VLAN 0 to HW filter on device team0
[  603.922094][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.929232][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.941753][ T4579] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  603.952096][ T4579] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.966395][ T2181] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.973461][ T2181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.993907][ T7050] lo speed is unknown, defaulting to 1000
[  604.001724][ T7050] lo speed is unknown, defaulting to 1000
[  604.013193][ T4579] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  604.024436][ T4579] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.063030][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.097919][ T4579] bridge_slave_1: left allmulticast mode
[  604.103632][ T4579] bridge_slave_1: left promiscuous mode
[  604.109322][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.118835][ T4579] bridge_slave_0: left allmulticast mode
[  604.124544][ T4579] bridge_slave_0: left promiscuous mode
[  604.130425][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.201880][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.213098][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.222708][ T4579] bond0 (unregistering): Released all slaves
[  604.235249][T19056] infiniband syb2: ib_query_port failed (-19)
[  604.280763][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  604.286926][T28705] Bluetooth: hci0: command 0x1003 tx timeout
[  604.298418][ T7050] chnl_net:caif_netlink_parms(): no params data found
[  604.312029][ T4579] tipc: Left network mode
[  604.313098][ T6916] veth0_vlan: entered promiscuous mode
[  604.345119][ T6916] veth1_vlan: entered promiscuous mode
[  604.369283][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.377713][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.385241][ T7050] bridge_slave_0: entered allmulticast mode
[  604.394442][ T7050] bridge_slave_0: entered promiscuous mode
[  604.402661][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.410717][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.417939][ T7050] bridge_slave_1: entered allmulticast mode
[  604.424317][ T7050] bridge_slave_1: entered promiscuous mode
[  604.447298][ T4579] hsr_slave_0: left promiscuous mode
[  604.453472][ T4579] hsr_slave_1: left promiscuous mode
[  604.459383][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.467022][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.476473][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  604.483959][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.494809][ T7080] loop9: detected capacity change from 0 to 512
[  604.502288][ T4579] veth1_macvtap: left promiscuous mode
[  604.507885][ T4579] veth0_macvtap: left promiscuous mode
[  604.514671][ T4579] veth1_vlan: left promiscuous mode
[  604.521214][ T7080] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.14025: bg 0: block 393: padding at end of block bitmap is not set
[  604.522257][ T4579] veth0_vlan: left promiscuous mode
[  604.543129][ T7080] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  604.560979][ T7080] EXT4-fs (loop9): 2 truncates cleaned up
[  604.572924][ T7080] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.621113][ T7080] loop9: detected capacity change from 512 to 0
[  604.633342][ T7080] EXT4-fs error (device loop9): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.9.14025: unable to read itable block
[  604.648285][ T7080] buffer_io_error: 106 callbacks suppressed
[  604.648299][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.663433][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.671735][ T7080] EXT4-fs error (device loop9): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.9.14025: unable to read itable block
[  604.686921][ T7050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.707884][ T7050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.717273][ T6916] veth0_macvtap: entered promiscuous mode
[  604.724856][ T6916] veth1_macvtap: entered promiscuous mode
[  604.732467][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.743906][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.750813][ T7080] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: IO failure
[  604.765052][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.772653][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.781075][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.788030][ T7080] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #18: comm syz.9.14025: mark_inode_dirty error
[  604.811591][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.821429][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1
[  604.829403][ T7050] team0: Port device team_slave_0 added
[  604.830747][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.836380][ T7050] team0: Port device team_slave_1 added
[  604.848696][ T7080] EXT4-fs error (device loop9): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.9.14025: unable to read itable block
[  604.863378][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.877956][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.884835][ T7080] EXT4-fs error (device loop9): ext4_get_max_inline_size:121: inode #18: comm syz.9.14025: can't get inode location 18
[  604.898911][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.907567][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.914837][ T7080] EXT4-fs error (device loop9): ext4_get_inode_loc:4970: inode #18: block 9: comm syz.9.14025: unable to read itable block
[  604.929297][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.934773][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.945506][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.969432][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  604.972449][ T7050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.978193][ T7080] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: IO failure
[  604.978224][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  604.998513][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.008041][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  605.008061][ T7080] EXT4-fs error (device loop9): ext4_truncate:4637: inode #18: comm syz.9.14025: mark_inode_dirty error
[  605.016133][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.030331][ T7080] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  605.035577][ T7050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.069941][ T7080] EXT4-fs (loop9): I/O error while writing superblock
[  605.093151][ T4658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.112482][ T4658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.123344][ T2947] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  605.138175][ T2947] EXT4-fs error (device loop9): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block
[  605.152366][ T2947] Buffer I/O error on dev loop9, logical block 1, lost sync page write
[  605.162002][ T4658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.183228][ T6963] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  605.192916][ T7050] hsr_slave_0: entered promiscuous mode
[  605.199001][ T7050] hsr_slave_1: entered promiscuous mode
[  605.207070][ T7050] debugfs: 'hsr0' already exists in 'hsr'
[  605.214203][ T7050] Cannot create hsr debugfs directory
[  605.230720][ T4658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.339379][ T7130] loop6: detected capacity change from 0 to 512
[  605.351594][ T7130] EXT4-fs (loop6): corrupt root inode, run e2fsck
[  605.358093][ T7130] EXT4-fs (loop6): mount failed
[  605.396275][ T4579] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.396429][ T7139] loop6: detected capacity change from 0 to 512
[  605.415056][ T7139] EXT4-fs: Ignoring removed oldalloc option
[  605.422599][ T7139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  605.443418][ T7139] EXT4-fs (loop6): too many log groups per flexible block group
[  605.457130][ T7139] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  605.466082][ T4579] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.474295][ T7139] EXT4-fs (loop6): mount failed
[  605.532008][ T7155] loop6: detected capacity change from 0 to 1024
[  605.541392][ T4579] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.557022][ T7155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.596259][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.634653][ T4579] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.657117][ T7146] lo speed is unknown, defaulting to 1000
[  605.657930][ T7050] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  605.674567][ T7050] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  605.692042][ T7146] lo speed is unknown, defaulting to 1000
[  605.692214][ T7050] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  605.728826][ T7050] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  605.756457][ T7174] SELinux: ebitmap: truncated map
[  605.770344][ T7174] SELinux: failed to load policy
[  605.810961][ T4579] bridge_slave_1: left allmulticast mode
[  605.816700][ T4579] bridge_slave_1: left promiscuous mode
[  605.823460][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.838307][ T4579] bridge_slave_0: left allmulticast mode
[  605.845041][ T4579] bridge_slave_0: left promiscuous mode
[  605.851810][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.890909][ T7187] SELinux: failure in sel_netif_sid_slow(), invalid network interface (72)
[  605.921721][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14069'.
[  605.991697][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.002213][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.011997][ T4579] bond0 (unregistering): Released all slaves
[  606.068428][ T4579] tipc: Disabling bearer <udp:�>
[  606.074587][ T4579] tipc: Left network mode
[  606.090192][ T7050] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.145975][ T7210] netlink: 'syz.4.14074': attribute type 3 has an invalid length.
[  606.168555][ T7050] 8021q: adding VLAN 0 to HW filter on device team0
[  606.220615][ T4579] hsr_slave_0: left promiscuous mode
[  606.240411][ T4579] hsr_slave_1: left promiscuous mode
[  606.246015][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.254469][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0
[  606.270938][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.278319][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.296413][ T7224] loop0: detected capacity change from 0 to 128
[  606.308057][ T4579] veth1_macvtap: left promiscuous mode
[  606.320028][ T4579] veth0_macvtap: left promiscuous mode
[  606.325713][ T4579] veth1_vlan: left promiscuous mode
[  606.333429][ T4579] veth0_vlan: left promiscuous mode
[  606.340662][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14078'.
[  606.410429][ T4579] team0 (unregistering): Port device team_slave_1 removed
[  606.423103][ T4579] team0 (unregistering): Port device team_slave_0 removed
[  606.456595][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.463760][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  606.482690][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.489772][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state
[  606.508720][ T7146] chnl_net:caif_netlink_parms(): no params data found
[  606.561897][ T7231] lo speed is unknown, defaulting to 1000
[  606.570271][ T7231] lo speed is unknown, defaulting to 1000
[  606.582606][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.591093][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.598459][ T7146] bridge_slave_0: entered allmulticast mode
[  606.605994][ T7146] bridge_slave_0: entered promiscuous mode
[  606.614292][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.622792][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.630395][ T7146] bridge_slave_1: entered allmulticast mode
[  606.636956][ T7146] bridge_slave_1: entered promiscuous mode
[  606.666934][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.686707][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.716192][ T7146] team0: Port device team_slave_0 added
[  606.723882][ T7146] team0: Port device team_slave_1 added
[  606.748247][ T7050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.761692][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.768647][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.795272][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.808407][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.815384][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.842261][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.883703][ T7146] hsr_slave_0: entered promiscuous mode
[  606.890197][ T7146] hsr_slave_1: entered promiscuous mode
[  606.896014][ T7146] debugfs: 'hsr0' already exists in 'hsr'
[  606.902593][ T7146] Cannot create hsr debugfs directory
[  606.987540][ T7050] veth0_vlan: entered promiscuous mode
[  606.996352][ T7050] veth1_vlan: entered promiscuous mode
[  607.017354][ T7050] veth0_macvtap: entered promiscuous mode
[  607.025216][ T7050] veth1_macvtap: entered promiscuous mode
[  607.036068][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.050525][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.066758][ T4574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.081432][ T4574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.095140][ T4574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.106869][ T4574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.121558][   T29] kauditd_printk_skb: 52 callbacks suppressed
[  607.121581][   T29] audit: type=1400 audit(2000000060.934:47513): avc:  denied  { ioctl } for  pid=7250 comm="syz.0.14085" path="socket:[127884]" dev="sockfs" ino=127884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  607.179316][ T7258] loop0: detected capacity change from 0 to 512
[  607.187828][ T7256] SELinux: ebitmap: truncated map
[  607.196284][ T7256] SELinux: failed to load policy
[  607.209824][ T7258] journal_path: Non-blockdev passed as './bus'
[  607.215994][ T7258] EXT4-fs: error: could not find journal device path
[  607.224302][ T7146] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  607.244431][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.252930][ T7146] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  607.260141][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.267875][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.273373][   T29] audit: type=1400 audit(2000000061.054:47514): avc:  denied  { read write } for  pid=7259 comm="syz.6.14087" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  607.275637][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.300210][   T29] audit: type=1400 audit(2000000061.054:47515): avc:  denied  { open } for  pid=7259 comm="syz.6.14087" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  607.308221][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.339653][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.347740][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.355585][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.363371][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.372461][   T23] hid-generic 0004:FFFFF800:0000.0005: unknown main item tag 0x0
[  607.388334][ T7146] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  607.398932][   T23] hid-generic 0004:FFFFF800:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  607.421134][ T7146] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  607.460571][ T7268] vhci_hcd: invalid port number 96
[  607.465772][ T7268] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  607.518669][ T7282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14094'.
[  607.538049][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.549129][ T7281] SELinux: failed to load policy
[  607.555455][ T7282] IPVS: Unknown mcast interface: 
[  607.565447][ T7146] 8021q: adding VLAN 0 to HW filter on device team0
[  607.593515][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.600670][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  607.617960][ T7291] sd 0:0:1:0: device reset
[  607.660600][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.667716][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state
[  607.696194][ T7146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  607.709085][   T29] audit: type=1326 audit(2000000061.504:47516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.733848][   T29] audit: type=1326 audit(2000000061.504:47517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.758486][   T29] audit: type=1326 audit(2000000061.514:47518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.782120][   T29] audit: type=1326 audit(2000000061.514:47519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.806395][   T29] audit: type=1326 audit(2000000061.514:47520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.830079][   T29] audit: type=1326 audit(2000000061.514:47521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.854285][   T29] audit: type=1326 audit(2000000061.514:47522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.4.14106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c785f6c9 code=0x7ffc0000
[  607.907455][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.925957][ T7319] program syz.2.14110 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  607.981424][ T7146] veth0_vlan: entered promiscuous mode
[  607.989265][ T7146] veth1_vlan: entered promiscuous mode
[  608.002565][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14113'.
[  608.009396][ T7146] veth0_macvtap: entered promiscuous mode
[  608.031655][ T7146] veth1_macvtap: entered promiscuous mode
[  608.043306][ T7333] netlink: 'syz.4.14114': attribute type 21 has an invalid length.
[  608.046635][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  608.064136][ T7335] netlink: 'syz.2.14115': attribute type 13 has an invalid length.
[  608.064586][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  608.087746][ T7335] gretap0: refused to change device tx_queue_len
[  608.096279][ T7335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  608.112821][ T4579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.130175][ T4579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.143901][ T4579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.155814][ T2181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.191278][   T23] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  608.319199][ T7361] loop1: detected capacity change from 0 to 512
[  608.349799][ T7361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  608.379665][ T7361] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  608.412939][ T7146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.551418][ T7391] loop6: detected capacity change from 0 to 2048
[  608.561576][ T7391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.592160][T28191] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  608.620668][T28191] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  608.627512][ T7397] loop2: detected capacity change from 0 to 128
[  608.638847][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.649296][ T7397] FAT-fs (loop2): Directory bread(block 162) failed
[  608.657834][ T7397] FAT-fs (loop2): Directory bread(block 163) failed
[  608.664705][ T7397] FAT-fs (loop2): Directory bread(block 164) failed
[  608.671799][ T7397] FAT-fs (loop2): Directory bread(block 165) failed
[  608.678402][ T7397] FAT-fs (loop2): Directory bread(block 166) failed
[  608.687779][ T7397] FAT-fs (loop2): Directory bread(block 167) failed
[  608.704362][ T7397] FAT-fs (loop2): Directory bread(block 168) failed
[  608.712680][ T7397] FAT-fs (loop2): Directory bread(block 169) failed
[  608.721489][ T7397] FAT-fs (loop2): Directory bread(block 162) failed
[  608.728078][ T7397] FAT-fs (loop2): Directory bread(block 163) failed
[  608.736040][ T7397] bio_check_eod: 72 callbacks suppressed
[  608.736052][ T7397] syz.2.14141: attempt to access beyond end of device
[  608.736052][ T7397] loop2: rw=3, sector=226, nr_sectors = 6 limit=128
[  608.761283][ T7408] loop6: detected capacity change from 0 to 512
[  608.767315][ T7397] syz.2.14141: attempt to access beyond end of device
[  608.767315][ T7397] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128
[  608.769278][ T7408] EXT4-fs: dax option not supported
[  608.821136][ T7415] loop6: detected capacity change from 0 to 164
[  608.836490][ T7416] atomic_op ffff88814cc87128 conn xmit_atomic 0000000000000000
[  608.862638][ T7187] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  608.943634][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14157'.
[  608.984839][ T7436] loop0: detected capacity change from 0 to 1764
[  609.013287][ T7443] loop2: detected capacity change from 0 to 512
[  609.044489][ T7443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.057218][ T7443] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  609.086654][ T7050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.122068][ T7453] loop6: detected capacity change from 0 to 2048
[  609.144267][ T7453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.198997][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.220641][T19056] hid-generic 0000:3000000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  609.295207][ T7484] loop2: detected capacity change from 0 to 512
[  609.301222][ T7492] loop6: detected capacity change from 0 to 1024
[  609.312438][ T7484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.14180: error while reading EA inode 32 err=-116
[  609.335656][ T7492] EXT4-fs: Ignoring removed mblk_io_submit option
[  609.338099][ T7484] EXT4-fs (loop2): Remounting filesystem read-only
[  609.353448][ T7484] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  609.363819][ T7484] EXT4-fs (loop2): 1 orphan inode deleted
[  609.372061][ T7484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.391840][ T7492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.405388][ T7484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.441219][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.451422][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14189'.
[  609.460953][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14189'.
[  609.494760][ T7506] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  609.499325][ T7516] loop6: detected capacity change from 0 to 1024
[  609.501315][ T7506] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  609.502440][ T7506] vhci_hcd vhci_hcd.0: Device attached
[  609.522958][ T7516] EXT4-fs: Ignoring removed nobh option
[  609.528714][ T7516] EXT4-fs: Ignoring removed bh option
[  609.535276][ T7512] vhci_hcd: invalid port number 96
[  609.541410][ T7512] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  609.552101][ T7514] vhci_hcd: connection closed
[  609.552599][ T4658] vhci_hcd: stop threads
[  609.562888][ T4658] vhci_hcd: release socket
[  609.567363][ T4658] vhci_hcd: disconnect device
[  609.576540][ T7516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.591239][ T7527] atomic_op ffff88814cc84928 conn xmit_atomic 0000000000000000
[  609.613898][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.090385][ T7561] loop2: detected capacity change from 0 to 8192
[  610.120977][T20877] hid-generic 0000:0004:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  610.187856][ T7583] loop1: detected capacity change from 0 to 164
[  610.205595][ T7583] ISOFS: unable to read i-node block
[  610.215702][ T7583] isofs_fill_super: get root inode failed
[  610.227038][ T7588] netlink: 'syz.2.14221': attribute type 6 has an invalid length.
[  610.277265][ T7597] SELinux: security policydb version 17 (MLS) not backwards compatible
[  610.286263][ T7597] SELinux: failed to load policy
[  610.292494][ T4581] Bluetooth: hci0: Frame reassembly failed (-84)
[  610.416452][ T7617] netlink: 92 bytes leftover after parsing attributes in process `syz.4.14237'.
[  610.425966][ T7617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14237'.
[  610.438841][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.449150][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.467708][ T7623] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  610.617806][ T7629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14243'.
[  610.805389][ T7647] netlink: 19 bytes leftover after parsing attributes in process `syz.4.14251'.
[  610.875978][ T7657] xt_nat: multiple ranges no longer supported
[  610.927454][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14258'.
[  611.102446][ T7690] loop2: detected capacity change from 0 to 512
[  611.109394][ T7690] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  611.118591][ T7690] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  611.128829][ T7690] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  611.138836][ T7690] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  611.146986][ T7690] System zones: 0-2, 18-18, 34-35
[  611.153891][ T7690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.191815][ T7699] loop6: detected capacity change from 0 to 256
[  611.201706][ T7050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.245949][ T7707] loop2: detected capacity change from 0 to 512
[  611.261542][ T7707] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  611.267715][ T7705] syzkaller0: entered promiscuous mode
[  611.271547][ T7707] EXT4-fs (loop2): orphan cleanup on readonly fs
[  611.276272][ T7705] syzkaller0: entered allmulticast mode
[  611.282973][ T7707] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  611.283107][ T7707] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  611.283477][ T7707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14277: bg 0: block 40: padding at end of block bitmap is not set
[  611.283709][ T7707] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  611.335623][ T7707] EXT4-fs (loop2): 1 truncate cleaned up
[  611.341843][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  611.373555][ T7050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.648018][ T7757] netlink: 'syz.4.14300': attribute type 1 has an invalid length.
[  611.657994][ T7758] loop6: detected capacity change from 0 to 128
[  611.681377][ T7760] loop2: detected capacity change from 0 to 1024
[  611.693743][ T7760] EXT4-fs: Ignoring removed bh option
[  611.699214][ T7760] EXT4-fs: inline encryption not supported
[  611.711672][ T7760] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  611.751059][ T7760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  611.761544][ T7760] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.14301: lblock 2 mapped to illegal pblock 2 (length 1)
[  611.775807][ T7760] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.14301: lblock 0 mapped to illegal pblock 48 (length 1)
[  611.792788][ T7760] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.14301: Failed to acquire dquot type 0
[  611.815392][ T7776] loop6: detected capacity change from 0 to 1024
[  611.821773][ T7760] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  611.832389][ T7760] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.14301: mark_inode_dirty error
[  611.844157][ T7760] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  611.854487][ T7760] EXT4-fs (loop2): 1 orphan inode deleted
[  611.862958][ T7776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.864232][ T7760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  611.890732][ T4607] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:51: lblock 1 mapped to illegal pblock 1 (length 1)
[  611.910307][ T4607] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:51: Failed to release dquot type 0
[  611.924139][ T7760] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.14301: lblock 0 mapped to illegal pblock 48 (length 1)
[  611.946524][ T7776] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.14308: Allocating blocks 465-513 which overlap fs metadata
[  611.966845][ T7776] EXT4-fs (loop6): pa ffff888100622540: logic 256, phys. 369, len 9
[  611.976332][ T7776] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 3
[  611.987185][ T7776] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[  611.987605][ T7050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.046895][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.119041][ T7803] loop2: detected capacity change from 0 to 128
[  612.202034][ T7811] loop6: detected capacity change from 0 to 1024
[  612.208692][ T7811] EXT4-fs: inline encryption not supported
[  612.250120][   T29] kauditd_printk_skb: 204 callbacks suppressed
[  612.250208][   T29] audit: type=1400 audit(2000000066.064:47722): avc:  denied  { create } for  pid=7817 comm="syz.2.14326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  612.277857][   T29] audit: type=1400 audit(2000000066.064:47723): avc:  denied  { write } for  pid=7817 comm="syz.2.14326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  612.301241][ T7811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.320153][ T7811] EXT4-fs (loop6): shut down requested (1)
[  612.346925][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.359758][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  612.360808][T28705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  612.380793][   T29] audit: type=1326 audit(2000000066.184:47724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.0.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b01ff6c9 code=0x7ffc0000
[  612.405612][   T29] audit: type=1400 audit(2000000066.184:47725): avc:  denied  { mount } for  pid=7826 comm="syz.2.14329" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  612.428879][   T29] audit: type=1400 audit(2000000066.184:47726): avc:  denied  { mounton } for  pid=7826 comm="syz.2.14329" path="/62/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  612.452203][   T29] audit: type=1326 audit(2000000066.184:47727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.0.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f40b01ff6c9 code=0x7ffc0000
[  612.495860][ T7836] loop1: detected capacity change from 0 to 1024
[  612.519908][   T29] audit: type=1326 audit(2000000066.184:47728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.0.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b01ff6c9 code=0x7ffc0000
[  612.524683][ T7836] EXT4-fs: Ignoring removed nomblk_io_submit option
[  612.544881][   T29] audit: type=1326 audit(2000000066.244:47729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.0.14330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b01ff6c9 code=0x7ffc0000
[  612.576271][   T29] audit: type=1400 audit(2000000066.294:47730): avc:  denied  { unmount } for  pid=7050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  612.596484][   T29] audit: type=1400 audit(2000000066.324:47731): avc:  denied  { create } for  pid=7839 comm="syz.4.14336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  612.633565][ T7836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.692445][ T7146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.705055][ T7858] IPv6: NLM_F_CREATE should be specified when creating new route
[  612.752291][ T7866] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  612.886056][ T7885] __nla_validate_parse: 1 callbacks suppressed
[  612.886073][ T7885] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14356'.
[  612.957901][ T7899] loop1: detected capacity change from 0 to 1024
[  612.966162][ T7899] EXT4-fs: Ignoring removed mblk_io_submit option
[  612.978132][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.997930][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.006355][ T7899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.055709][ T7146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.282745][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14377'.
[  613.291818][ T7935] netlink: 'syz.4.14377': attribute type 30 has an invalid length.
[  613.324519][ T4581] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  613.353006][ T4581] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  613.372124][ T4581] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  613.390596][ T4581] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  613.444599][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14379'.
[  613.464182][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14379'.
[  613.722856][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14392'.
[  613.733178][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14392'.
[  613.830859][ T7975] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  613.898501][ T7981] sd 0:0:1:0: device reset
[  613.953566][ T7986] loop1: detected capacity change from 0 to 512
[  613.976564][ T7986] EXT4-fs (loop1): 1 orphan inode deleted
[  614.004378][ T7986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.047604][ T7994] netlink: 'syz.0.14406': attribute type 1 has an invalid length.
[  614.056514][ T7994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14406'.
[  614.125550][ T7146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.176695][ T8005] netlink: 92 bytes leftover after parsing attributes in process `syz.4.14410'.
[  614.207474][ T4581] Bluetooth: hci0: Frame reassembly failed (-84)
[  614.215226][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14410'.
[  614.216261][ T8011] netlink: 'syz.0.14412': attribute type 10 has an invalid length.
[  614.236840][ T8011] team0: Port device dummy0 added
[  614.452897][ T8044] SELinux: failed to load policy
[  614.480840][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14429'.
[  614.553167][T19056] hid_parser_main: 92 callbacks suppressed
[  614.553180][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.566412][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.573794][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.582578][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.591681][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.599074][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.606534][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.615298][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.622765][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.630175][T19056] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  614.638673][T19056] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  614.666013][ T8062] loop6: detected capacity change from 0 to 512
[  614.682667][ T8062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.696003][ T8062] ext4 filesystem being mounted at /830/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.721766][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.744791][ T8066] ALSA: seq fatal error: cannot create timer (-19)
[  614.935319][ T8077] SELinux: failed to load policy
[  615.421131][ T8109] vhci_hcd: invalid port number 9
[  615.468865][ T8123] can0: slcan on ptm1.
[  615.517042][ T8131] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  615.526854][ T8123] can0 (unregistered): slcan off ptm1.
[  615.532875][ T8123] Falling back ldisc for ptm1.
[  615.560524][ T8129] Falling back ldisc for ttyS3.
[  615.604618][ T8145] loop2: detected capacity change from 0 to 128
[  615.613651][ T8145] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  615.626365][ T8145] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  615.664984][ T4579] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  616.023556][ T8225] x_tables: ip_tables: udp match: only valid for protocol 17
[  616.079216][ T8233] netlink: 'syz.6.14512': attribute type 3 has an invalid length.
[  616.088050][ T8233] netlink: 'syz.6.14512': attribute type 3 has an invalid length.
[  616.193893][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.203956][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.280813][T28705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  616.821779][ T8310] SELinux: ebitmap: truncated map
[  616.830676][ T8310] SELinux: failed to load policy
[  617.108986][ T8340] loop6: detected capacity change from 0 to 512
[  617.116455][ T8340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  617.135059][ T8340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  617.166221][ T8340] ext4 filesystem being mounted at /861/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.180436][ T8343] vhci_hcd: invalid port number 96
[  617.185582][ T8343] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  617.207255][T28191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  617.274737][   T29] kauditd_printk_skb: 134 callbacks suppressed
[  617.274753][   T29] audit: type=1400 audit(2000000071.084:47866): avc:  denied  { create } for  pid=8354 comm="syz.0.14565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  617.314927][   T29] audit: type=1400 audit(2000000071.114:47867): avc:  denied  { write } for  pid=8354 comm="syz.0.14565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  617.335564][   T29] audit: type=1400 audit(2000000071.114:47868): avc:  denied  { read } for  pid=8354 comm="syz.0.14565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  617.381440][ T8359] hub 9-0:1.0: USB hub found
[  617.391038][   T29] audit: type=1400 audit(2000000071.184:47869): avc:  denied  { read write } for  pid=8357 comm="syz.1.14566" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  617.396425][ T8359] hub 9-0:1.0: 8 ports detected
[  617.416784][   T29] audit: type=1400 audit(2000000071.184:47870): avc:  denied  { open } for  pid=8357 comm="syz.1.14566" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  617.555708][   T29] audit: type=1400 audit(2000000071.274:47871): avc:  denied  { open } for  pid=8360 comm="syz.6.14568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  617.576385][   T29] audit: type=1400 audit(2000000071.274:47872): avc:  denied  { kernel } for  pid=8360 comm="syz.6.14568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  617.596126][   T29] audit: type=1400 audit(2000000071.274:47873): avc:  denied  { tracepoint } for  pid=8360 comm="syz.6.14568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  617.617393][   T29] audit: type=1400 audit(2000000071.274:47874): avc:  denied  { create } for  pid=8361 comm="syz.1.14569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  617.620695][ T8377] sd 0:0:1:0: device reset
[  617.637362][   T29] audit: type=1400 audit(2000000071.274:47875): avc:  denied  { setopt } for  pid=8361 comm="syz.1.14569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  617.678858][ T8375] syzkaller0: entered promiscuous mode
[  617.685436][ T8375] syzkaller0: entered allmulticast mode
[  617.778338][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.787464][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.957604][ T8406] SELinux: ebitmap: truncated map
[  617.969049][ T8406] SELinux: failed to load policy
[  618.110287][ T8425] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125
[  618.138097][ T8427] sg_write: process 1908 (syz.6.14596) changed security contexts after opening file descriptor, this is not allowed.
[  618.190887][ T8434] __nla_validate_parse: 6 callbacks suppressed
[  618.190902][ T8434] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.14600'.
[  618.208707][ T8434] netlink: zone id is out of range
[  618.214841][ T8434] netlink: zone id is out of range
[  618.233102][ T8434] netlink: set zone limit has 8 unknown bytes
[  618.338211][ T8438] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  618.408470][ T8441] syzkaller1: entered promiscuous mode
[  618.415299][ T8441] syzkaller1: entered allmulticast mode
[  618.718984][ T8460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  618.774685][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14617'.
[  618.841079][T19056] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  619.007589][ T8485] SELinux: failed to load policy
[  619.038034][ T8470] netlink: 332 bytes leftover after parsing attributes in process `syz.6.14618'.
[  619.058858][ T8470] netlink: 'syz.6.14618': attribute type 9 has an invalid length.
[  619.066708][ T8470] netlink: 108 bytes leftover after parsing attributes in process `syz.6.14618'.
[  619.077280][ T8470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14618'.
[  619.275351][ T8502] SELinux: failed to load policy
[  619.773872][T19056] hid_parser_main: 18 callbacks suppressed
[  619.773892][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.787170][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.796006][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.803454][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.812065][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.820925][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.828517][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.836013][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.843502][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.852758][T19056] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  619.863109][T19056] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  619.944426][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14663'.
[  620.123647][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14668'.
[  620.124881][T19056] hid-generic 0000:3000000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  620.154464][T20876] hid-generic 0000:0000:0000.000E: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  620.456978][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14687'.
[  621.263492][ T8669] loop9: detected capacity change from 0 to 7
[  621.270911][ T8669] buffer_io_error: 31 callbacks suppressed
[  621.270923][ T8669] Buffer I/O error on dev loop9, logical block 0, async page read
[  621.274590][ T8658] SELinux: failed to load policy
[  621.284634][ T8669] Buffer I/O error on dev loop9, logical block 0, async page read
[  621.284729][ T8669]  loop9: unable to read partition table
[  621.346998][ T8669] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  621.346998][ T8669] 
) failed (rc=-5)
[  621.548803][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14718'.
[  621.591878][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  621.598414][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  621.606835][ T8708] vhci_hcd vhci_hcd.0: Device attached
[  621.630578][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5)
[  621.637135][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  621.645672][ T8708] vhci_hcd vhci_hcd.0: Device attached
[  621.656234][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7)
[  621.662831][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  621.671027][ T8708] vhci_hcd vhci_hcd.0: Device attached
[  621.682350][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9)
[  621.688886][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  621.696566][ T8708] vhci_hcd vhci_hcd.0: Device attached
[  621.716470][ T8708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  621.727170][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13)
[  621.733780][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  621.742620][ T8708] vhci_hcd vhci_hcd.0: Device attached
[  621.754939][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15)
[  621.761549][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  621.769026][ T8708] vhci_hcd vhci_hcd.0: Device attached
[  621.783149][ T8732] vhci_hcd: connection closed
[  621.783428][ T8725] vhci_hcd: connection closed
[  621.785846][ T8709] vhci_hcd: connection closed
[  621.788186][ T8716] vhci_hcd: connection closed
[  621.796749][ T8730] vhci_hcd: connection closed
[  621.801223][ T8721] vhci_hcd: connection closed
[  621.803496][ T4574] vhci_hcd: stop threads
[  621.816822][ T4574] vhci_hcd: release socket
[  621.822398][ T4574] vhci_hcd: disconnect device
[  621.831324][ T4574] vhci_hcd: stop threads
[  621.835567][ T4574] vhci_hcd: release socket
[  621.841039][ T4574] vhci_hcd: disconnect device
[  621.845911][ T4574] vhci_hcd: stop threads
[  621.851279][ T4574] vhci_hcd: release socket
[  621.855698][ T4574] vhci_hcd: disconnect device
[  621.861770][ T4574] vhci_hcd: stop threads
[  621.866026][ T4574] vhci_hcd: release socket
[  621.871734][ T4574] vhci_hcd: disconnect device
[  621.882535][ T4574] vhci_hcd: stop threads
[  621.886869][ T4574] vhci_hcd: release socket
[  621.891508][ T4574] vhci_hcd: disconnect device
[  621.898533][ T4574] vhci_hcd: stop threads
[  621.903591][ T4574] vhci_hcd: release socket
[  621.908011][ T4574] vhci_hcd: disconnect device
[  622.220281][ T8755] syzkaller1: entered promiscuous mode
[  622.225816][ T8755] syzkaller1: entered allmulticast mode
[  622.393235][ T8773] loop6: detected capacity change from 0 to 164
[  622.402056][ T8762] ==================================================================
[  622.410173][ T8762] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission
[  622.419134][ T8762] 
[  622.421451][ T8762] read to 0xffff8881194122a0 of 4 bytes by task 8774 on cpu 1:
[  622.428986][ T8762]  selinux_inode_permission+0x334/0x740
[  622.434543][ T8762]  security_inode_permission+0x6d/0xb0
[  622.440011][ T8762]  inode_permission+0x106/0x310
[  622.444879][ T8762]  link_path_walk+0x162/0x900
[  622.449568][ T8762]  path_openat+0x1de/0x2170
[  622.454074][ T8762]  do_filp_open+0x109/0x230
[  622.458579][ T8762]  io_openat2+0x272/0x390
[  622.462910][ T8762]  io_openat+0x1b/0x30
[  622.466981][ T8762]  __io_issue_sqe+0xfe/0x2e0
[  622.471590][ T8762]  io_issue_sqe+0x56/0xa80
[  622.476019][ T8762]  io_wq_submit_work+0x3f7/0x5f0
[  622.480965][ T8762]  io_worker_handle_work+0x44e/0x9b0
[  622.486261][ T8762]  io_wq_worker+0x22e/0x860
[  622.490769][ T8762]  ret_from_fork+0x122/0x1b0
[  622.495358][ T8762]  ret_from_fork_asm+0x1a/0x30
[  622.500126][ T8762] 
[  622.502439][ T8762] write to 0xffff8881194122a0 of 4 bytes by task 8762 on cpu 0:
[  622.510057][ T8762]  selinux_inode_permission+0x3ac/0x740
[  622.515614][ T8762]  security_inode_permission+0x6d/0xb0
[  622.521066][ T8762]  inode_permission+0x106/0x310
[  622.525920][ T8762]  link_path_walk+0x162/0x900
[  622.530598][ T8762]  path_openat+0x1de/0x2170
[  622.535089][ T8762]  do_filp_open+0x109/0x230
[  622.539588][ T8762]  io_openat2+0x272/0x390
[  622.543914][ T8762]  io_openat+0x1b/0x30
[  622.547973][ T8762]  __io_issue_sqe+0xfe/0x2e0
[  622.552561][ T8762]  io_issue_sqe+0x56/0xa80
[  622.556974][ T8762]  io_submit_sqes+0x675/0x1060
[  622.561738][ T8762]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  622.567284][ T8762]  __x64_sys_io_uring_enter+0x78/0x90
[  622.572660][ T8762]  x64_sys_call+0x2df0/0x3000
[  622.577331][ T8762]  do_syscall_64+0xd2/0x200
[  622.581825][ T8762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.587706][ T8762] 
[  622.590014][ T8762] value changed: 0x00000000 -> 0x00000001
[  622.595712][ T8762] 
[  622.598019][ T8762] Reported by Kernel Concurrency Sanitizer on:
[  622.604157][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.0.14740 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  622.615523][ T8762] Tainted: [W]=WARN
[  622.619310][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  622.629349][ T8762] ==================================================================
[  622.655716][ T8773] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  622.663029][   T29] kauditd_printk_skb: 112 callbacks suppressed
[  622.663044][   T29] audit: type=1400 audit(2000000076.474:47988): avc:  denied  { firmware_load } for  pid=8775 comm="syz.4.14745" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  622.708287][   T29] audit: type=1400 audit(2000000076.484:47989): avc:  denied  { mount } for  pid=8772 comm="syz.6.14744" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  622.758206][ T8773] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  622.775953][ T8773] rock: directory entry would overflow storage
[  622.783436][ T8773] rock: sig=0x4f50, size=4, remaining=3
[  622.788981][ T8773] iso9660: Corrupted directory entry in block 4 of inode 1792
[  622.815115][   T29] audit: type=1400 audit(2000000076.624:47990): avc:  denied  { unmount } for  pid=28191 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1