last executing test programs:

3m45.547253278s ago: executing program 1 (id=97):
r0 = semget$private(0x0, 0x6, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240))

3m45.39174033s ago: executing program 1 (id=99):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000ac0)=""/137, 0x89, 0x10000, &(0x7f0000000b80)={0x11, 0x4, 0x0, 0x1, 0xa0, 0x6, @local}, 0x14)
mknod$loop(0x0, 0x100000000000600d, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)

3m45.204337103s ago: executing program 1 (id=101):
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8a, &(0x7f0000000080)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {}, {@nobarrier}, {@errors_remount}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x12b042, 0xba)
pwrite64(r0, &(0x7f00000003c0)="06273454", 0x4, 0xcfb9)
openat$dir(0xffffffffffffff9c, 0x0, 0x141240, 0x42)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_io_uring_setup(0x2, &(0x7f0000000380)={0x0, 0xe456, 0x400, 0x0, 0xfffffffd}, &(0x7f0000000000), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000005c0), 0x0)

3m45.050422196s ago: executing program 1 (id=102):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f0000000300)={[], [{@permit_directio}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}, {@subj_role={'subj_role', 0x3d, 'syz3'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r3}}]}, 0x1, 0x519, &(0x7f0000000640)="$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")
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40106614, 0x0)

3m44.458499305s ago: executing program 1 (id=108):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chmod(&(0x7f0000000000)='./file0\x00', 0x121)

3m43.892162563s ago: executing program 1 (id=112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0)

3m43.891776723s ago: executing program 32 (id=112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0)

4.929523045s ago: executing program 0 (id=3405):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)

4.830572506s ago: executing program 0 (id=3406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x4)
write$cgroup_int(r2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

4.62812448s ago: executing program 0 (id=3407):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
lseek(0xffffffffffffffff, 0x10001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.707827784s ago: executing program 0 (id=3415):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0xa, 0x1, 0x106)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r2)

2.820945127s ago: executing program 0 (id=3421):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x90)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)

2.689634309s ago: executing program 2 (id=3424):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
socket$kcm(0xa, 0x5, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)

2.670141749s ago: executing program 5 (id=3425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x10, 0x2, 0x0)
ptrace$getregset(0x4204, 0x0, 0x6, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000010000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004)

2.653469739s ago: executing program 2 (id=3426):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x48960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x110081, 0x2000000000000000, 0x4}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x4}, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

2.442399853s ago: executing program 4 (id=3430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000001f00000000000000c4dcdcadfa07ba2d3d58bcac83bccc158aa5829e91a4b5b0db05f9a5ca4bd2e264c173a709eea604eb2a26f97ea34ad0395ae32ba6af53cd8704ed48a439e6fa12bc82dd8a81a0c0ce59f96e238bc8d43180238b1e19544721d6f2c25594e274fa359c92500311ebd8eff20218bd85ab14c89f51e55bac6424bbaf4a9adcf5db0e15c278b5886f6f5ddc828c3409b4bf065f674284b55763f9e631265504831a8d7e8eeb0861a43eafa7a4969dcced22be3b78565a4b592ae0e302d34cbe0e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
dup2(r0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x35, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r5 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0xd34d, 0x400, 0x1, 0x20b}, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000680)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})
io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x20)
close_range(r3, 0xffffffffffffffff, 0x0)

2.295598255s ago: executing program 4 (id=3433):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0xa, 0x1, 0x106)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r2)

2.177183026s ago: executing program 3 (id=3435):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x300})
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x40000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)

2.098080508s ago: executing program 2 (id=3436):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4)
socket$kcm(0xa, 0x5, 0x0)
readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)

2.077278958s ago: executing program 2 (id=3437):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x41048, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = io_uring_setup(0x23d6, &(0x7f00000001c0)={0x0, 0x4053, 0x10000, 0x3, 0x27})
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc)
read(r4, &(0x7f0000000180)=""/52, 0xfffffdef)
close_range(r3, 0xffffffffffffffff, 0x0)

1.750717303s ago: executing program 4 (id=3438):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9e28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0})
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0)

1.638131835s ago: executing program 5 (id=3439):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setscheduler(0x0, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x800)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'ip_vti0\x00', 0x0})
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000007c0)={@dev}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, 0x0, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

1.583342426s ago: executing program 5 (id=3440):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18)
close(r1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x18)
listen(r0, 0x3)

1.582688326s ago: executing program 4 (id=3441):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)

1.524235087s ago: executing program 5 (id=3442):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000080000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = semget$private(0x0, 0x6, 0x84)
semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r1, &(0x7f0000001240)=[{}, {0x2, 0x9, 0x2000}], 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x3, @empty, 'dvmrp0\x00'}}, 0x1e)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}]}, 0x28}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=@newsa={0x328, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x4e20, 0x1ff, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x2, r2, r4}, {@in6=@mcast2, 0x4d3, 0x3c}, @in6=@mcast1, {0x6, 0xb, 0x3, 0x5, 0x100000001, 0x8000000000000000, 0x9, 0x6f}, {0x800000000000000, 0x6b55, 0x80000000, 0x7}, {0x7, 0x6, 0x8}, 0x70bd2b, 0x3500, 0x2, 0x0, 0x30, 0x44}, [@user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@private=0xa010101, 0x0, 0xa}}, @algo_crypt={0xc6, 0x2, {{'cbc-serpent-avx\x00'}, 0x3f0, "3bb8f2253641d283f5b199c77540fbc24cf2fff7f9005ef8a57d0dcb5bcaa3e7fe7b09d59874e88a1865bae52c444b664aa3fe7a322eef5ad38e920f017ea8a79703d321ccf15b0b4f66de936c539153c6577e908ba1b04d9b76258f1da8b2f6c8a348b66d11c4a3791cb5c3456dedb927e617c83e2106eee513572412bb"}}, @tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d5, 0xff}, 0xa, @in=@multicast2, 0x0, 0x1, 0x1, 0x79, 0x1, 0x9, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x3, 0x81, 0x15, 0x4, 0xc}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3506, 0x0, 0x1, 0x6, 0xf, 0x6}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xfffffffc, 0x8}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x58, 0x6, 0x401, 0x7}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000}, 0x8084)
setuid(r4)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)

1.523970487s ago: executing program 4 (id=3443):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x173540)
r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x80002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000)

1.255191791s ago: executing program 3 (id=3444):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffc}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@private1, <r2=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', r2, @fallback=0x1f, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.182078222s ago: executing program 3 (id=3445):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000000c0))
pipe2(&(0x7f0000000000)={<r2=>0x0, 0x0}, 0x0)
close(r2)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @ndisc_rs}}}}}, 0x0)

1.007917225s ago: executing program 0 (id=3446):
syz_usb_connect(0x5, 0x2eb, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x5, 0x7, 0x10, 0x7f}, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="050f5e000603100b0a10030008000103ff7f0c100a07c0000000000f0080071002181e03000b10010c2000400101fcf82e100d35f93e140f165334e46181000038ce71f875bb5a303c440c6051d3e83fe7"], 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}, {0xb5, &(0x7f0000000180)=@string={0xb5, 0x3, "e38cd212c50a3b4e70f76abfb92cd94e150371a4fb3c2872dd031e09f6c279db3ce15ebc295f641a18db04d2c44b34fa94a8c499e333fdc9f47a6cbe5f4be402466b523f5ce9f048f5562b89c485297c3aac0a5bb586967f55ae0ef30784450d0c9fb082ed3842c674cefc3a6216062c061d39c0b778188025a85e0f9a839b66d74bdd29e008ac2d7117f731bb90398415016767b30ad7b0b6d99d217b499d1433d665b8508129d0ed4f562c8e941fff3279f4"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xae, &(0x7f0000000d80)=ANY=[@ANYBLOB="ae031c3a5749fa65849bb246b2d6aee1ae710446e2cd0a2d92c4013598517a7967e17c4051ad5af96bdc1dfab391f677782f7e18e2c9f735cb00bfcaa8e840848a465323b1b124bf6f2ce7429f879957b7103bfce350f32b97713218877c69ada46b51cabe4defa7c22823fbbde0ae590f788787a111632866424f397085aaaec77ef9b4cc5bd729b8382d646873d2d086ce8e9b19a0aba1fbc59d8c75314ba63604b36df03d78ce62e3dbe4108d"]}, {0xe7, &(0x7f0000000bc0)=@string={0xe7, 0x3, "03e90c3cba925068488e3868bb13f8f2bba04e19a5d21e2c9014b088ea8660b71583f46a70fda3eece79c4bbcb03a52740407f75e5afcaaa001321e2df7e887bb3cbdfb952135f656cf0413bc9102f9eb2ebcc118639ab94d83e447c01e86ddad19c09fc95bc850b00000000000030a82ae56a017c200f81ede23e5a72b4a1efbeba4d70f543087c820a63e0d263526be4a370841e3921e4501021ede3df9fdf26f9609f23327ac2f10914b29da1edf5ab06a5fe13843511c388777ff1612fe2e9a0f96a34a9a0554b1322b8316df2440048d957ced4f0fe3d1e8133a26130b049877aac0c"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2b}}, {0x8d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8d03f2b0dca4b53f9f9903bbd8e1647210aacaa5b74f4605ed1d3dde630513a43bcc74f4c52bd420bca71ace3c5c6f1c2afddfcb310442d74cb2597e05b865fdadc6b5fc2d50e4b741dfc5eb35a7eb7da57ba78771e723355d49097e4054134ac4dfb719374a4a250d011d2e9710d34ea923c248346c97f7c71aab67997e4293289d5fe853cb1f0ffd6c1f3eac"]}, {0x55, &(0x7f0000000980)=@string={0x55, 0x3, "1c3d48a9a80174d99f1aa33fe2e07d441c2e2b8f67cc50945b1f1165966a55aea4176e408f311a4142a1392c5a85c67a87c461a909292a513a6bec82b9792c024b2225fcc3284f5a6ffede5c9e9f0db6429a23"}}]})
syz_usb_connect(0x5, 0x4f5, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x10, 0x8}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4d, 0x6, 0x8, 0x3}]}, 0x4, [{0x4, &(0x7f0000000640)=@lang_id={0xfffffffffffffed8, 0x3, 0x1bf95efbee26cb27}}, {0x38, &(0x7f00000006c0)=@string={0x38, 0x3, "1a726bf28ca10cd48e58d80eefbabb78af681e69c117ab027ae3e2ce69f54c5a0730b777fd8708eda81c35e5881f96ac71651d830ad0"}}, {0xfb, &(0x7f0000001b00)=@string={0xfb, 0x3, "3d60facade6ad23141c5199a0da97dc38fa09f716de4a7a4e3e0c206921e859e372b1ecca949694143a80825bfda1e4dab8e2b9567b9686a3bf154dadd4e374fdbf9557ea8d8ce42c4f87a4f7301f237a2ceaccef7f04a56ea454f3b61fd698bacc8768d71f268a17c3f3aafb5a67839126d61d60b6bf9aeb3124c389b8f5258d5f3336cdd29c42e78d7ff6381c45a0c17fc35f217e77312dc83b5e93f5638cf446de516482fd757e95f0f2c385831f8c146188cdad1696d4dda588a8ecd943ba9e3e129b82d3104205a25f2015779bf4901523e5079ea1cca428e4bab23de714d217a70cb6d2f01e3c67fbb98bf92b73122c86104c116f8b9"}}, {0xe, &(0x7f0000000940)=@string={0xe, 0x3, "638598e2daedbaf2ee798167"}}]})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid={'resgid', 0x3d, r1}}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)=0xc)
setresgid(0xffffffffffffffff, r3, r3)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x34, 0x0, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xfffffe8c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
getegid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x100000000000000)

949.916395ms ago: executing program 3 (id=3447):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000046557b30b0c9d5c150f381fee9eaa3f21dde3027101346eb9feb35f522d9568ac16eb6b3ed6aff9653341f91bf3c3843310bb5359b75a6ffe7720159ac84f68cda4b8abb87"], 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fdatasync(r1)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40800)
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x4000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xd59, 0x5, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munlock(&(0x7f00009c1000/0x3000)=nil, 0x3000)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @loopback}}}}}}, 0x0)

770.752908ms ago: executing program 2 (id=3448):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4)
socket$kcm(0xa, 0x5, 0x0)
readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)

751.914029ms ago: executing program 2 (id=3449):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e0001006970366772657461700000004000028006000f000000000005000b00ff000000080005000400000014000600fe"], 0x7c}, 0x1, 0xb00}, 0x0)

628.20441ms ago: executing program 4 (id=3450):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x10, 0x2, 0x0)
ptrace$getregset(0x4204, 0x0, 0x6, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000010000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004)

624.33691ms ago: executing program 5 (id=3451):
bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x65, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
writev(r2, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0)

598.817711ms ago: executing program 5 (id=3452):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@inlinecrypt}, {@jqfmt_vfsv1}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}], [{@appraise}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8)
unshare(0x8000000)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9fcc", 0x2, r1)
keyctl$instantiate(0xc, r2, 0x0, 0x0, r2)
semget$private(0x0, 0x4000, 0x555)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r4, &(0x7f0000004200)='t', 0x1)
fsopen(&(0x7f0000000000)='cpuset\x00', 0x0)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0)

263.851186ms ago: executing program 3 (id=3453):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = add_key$keyring(&(0x7f0000000e80), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f0000000540)={0x2a004700, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1}, 0x58)

0s ago: executing program 3 (id=3454):
r0 = memfd_secret(0x80000)
unshare(0x42000000)
syz_usb_disconnect(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet(0x2, 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0)
r5 = getpgrp(r4)
kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

type 1 family 0 port 8472 - 0
[  199.527548][T10950] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.570919][T10963] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  199.606511][T10963] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.2841: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  199.683920][T10963] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2841: couldn't read orphan inode 11 (err -117)
[  199.730235][T10963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.755840][T10975] loop3: detected capacity change from 0 to 1024
[  199.768910][T10963] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2841: Invalid block bitmap block 0 in block_group 0
[  199.790406][T10975] EXT4-fs: inline encryption not supported
[  199.806465][T10963] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2841: Failed to acquire dquot type 0
[  199.827924][T10975] EXT4-fs: Ignoring removed orlov option
[  199.833733][T10975] ext4: Unknown parameter 'appraise'
[  199.896764][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.908481][T10975] loop3: detected capacity change from 0 to 1024
[  199.955628][T10975] EXT4-fs: Ignoring removed orlov option
[  200.029572][T10975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.049873][T10977] lo speed is unknown, defaulting to 1000
[  200.077909][T10977] lo speed is unknown, defaulting to 1000
[  200.721270][   T29] kauditd_printk_skb: 110 callbacks suppressed
[  200.721293][   T29] audit: type=1400 audit(1749969625.287:23325): avc:  denied  { read } for  pid=10995 comm="syz.4.2853" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  200.751961][   T29] audit: type=1400 audit(1749969625.287:23326): avc:  denied  { open } for  pid=10995 comm="syz.4.2853" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  200.969460][T11000] xt_hashlimit: size too large, truncated to 1048576
[  200.976232][T11000] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  201.060224][T11002] loop4: detected capacity change from 0 to 512
[  201.079998][T11002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.092899][T11002] ext4 filesystem being mounted at /609/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.153411][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.484786][T11015] ieee802154 phy0 wpan0: encryption failed: -22
[  201.498983][   T29] audit: type=1400 audit(1749969626.047:23327): avc:  denied  { setopt } for  pid=11014 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  201.519075][   T29] audit: type=1400 audit(1749969626.047:23328): avc:  denied  { write } for  pid=11014 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  201.538865][   T29] audit: type=1400 audit(1749969626.047:23329): avc:  denied  { create } for  pid=11014 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  201.559183][   T29] audit: type=1400 audit(1749969626.047:23330): avc:  denied  { write } for  pid=11014 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  201.774190][T11023] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.867615][T11023] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.883273][   T29] audit: type=1326 audit(1749969626.447:23331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.3.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  201.907322][   T29] audit: type=1326 audit(1749969626.447:23332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.3.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  201.907353][   T29] audit: type=1326 audit(1749969626.447:23333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.3.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  201.907385][   T29] audit: type=1326 audit(1749969626.447:23334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.3.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  201.958698][T11023] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.018235][T11023] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.067979][T11023] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.089532][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.127500][T11023] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.140871][T11023] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.152813][T11023] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.310281][T11033] 1ªX¹¦À: left allmulticast mode
[  202.320632][T11033] veth19: left promiscuous mode
[  202.337390][T11033] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.345822][T11033] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.354362][T11033] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.362819][T11033] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  202.401863][T11034] lo speed is unknown, defaulting to 1000
[  202.422122][T11034] lo speed is unknown, defaulting to 1000
[  202.565276][T11043] hub 9-0:1.0: USB hub found
[  202.581902][T11043] hub 9-0:1.0: 8 ports detected
[  202.602031][T11043] lo speed is unknown, defaulting to 1000
[  202.627932][T11043] lo speed is unknown, defaulting to 1000
[  202.682631][T11048] loop5: detected capacity change from 0 to 2048
[  202.901980][T11051] loop0: detected capacity change from 0 to 512
[  202.926403][T11048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.049928][T11058] lo speed is unknown, defaulting to 1000
[  203.058508][T11058] lo speed is unknown, defaulting to 1000
[  203.640132][T11051] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  203.938032][T11051] EXT4-fs (loop0): invalid journal inode
[  203.957993][T11051] EXT4-fs (loop0): can't get journal size
[  203.983767][T11051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  204.010431][T11051] System zones: 1-12, 13-13
[  204.024057][T11051] EXT4-fs (loop0): 1 truncate cleaned up
[  204.038336][T11051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.352887][T11057] lo speed is unknown, defaulting to 1000
[  204.398385][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.444405][T11057] lo speed is unknown, defaulting to 1000
[  205.080176][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.344366][T11082] syzkaller0: entered promiscuous mode
[  205.349939][T11082] syzkaller0: entered allmulticast mode
[  205.368827][T11087] lo speed is unknown, defaulting to 1000
[  205.376092][T11087] lo speed is unknown, defaulting to 1000
[  205.566041][T11094] program syz.5.2882 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.708385][T11100] loop5: detected capacity change from 0 to 512
[  205.729674][T11100] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  205.738189][   T29] kauditd_printk_skb: 188 callbacks suppressed
[  205.738205][   T29] audit: type=1326 audit(1749969630.307:23523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0091ea58e7 code=0x7ffc0000
[  205.767950][   T29] audit: type=1326 audit(1749969630.307:23524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0091e4ab19 code=0x7ffc0000
[  205.791556][   T29] audit: type=1326 audit(1749969630.307:23525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  205.837604][T11100] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.2884: iget: bad i_size value: 12154757448730
[  205.892444][T11100] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2884: couldn't read orphan inode 13 (err -117)
[  205.922808][T11100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.956985][T11100] erspan0: left allmulticast mode
[  205.971205][T11100] batadv_slave_0: left promiscuous mode
[  205.978673][T11100] wireguard0: left promiscuous mode
[  205.984007][T11100] wireguard0: left allmulticast mode
[  205.989864][T11100] veth3: left promiscuous mode
[  205.994911][T11100] geneve2: left promiscuous mode
[  206.000281][T11100] gretap1: left promiscuous mode
[  206.012314][   T29] audit: type=1326 audit(1749969630.387:23526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0091ea58e7 code=0x7ffc0000
[  206.035996][   T29] audit: type=1326 audit(1749969630.387:23527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0091e4ab19 code=0x7ffc0000
[  206.059626][   T29] audit: type=1326 audit(1749969630.387:23528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  206.083848][   T29] audit: type=1326 audit(1749969630.387:23529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0091ea58e7 code=0x7ffc0000
[  206.107401][   T29] audit: type=1326 audit(1749969630.387:23530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0091e4ab19 code=0x7ffc0000
[  206.130978][   T29] audit: type=1326 audit(1749969630.387:23531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  206.154517][   T29] audit: type=1326 audit(1749969630.397:23532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0091ea58e7 code=0x7ffc0000
[  206.250749][T11100] veth7: left promiscuous mode
[  206.328440][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.366158][T11107] lo speed is unknown, defaulting to 1000
[  206.431943][T11107] lo speed is unknown, defaulting to 1000
[  206.802028][T11115] loop4: detected capacity change from 0 to 512
[  206.808757][T11115] EXT4-fs: Ignoring removed mblk_io_submit option
[  206.828167][T11115] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  206.837124][T11115] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  209.495884][T11133] lo speed is unknown, defaulting to 1000
[  209.527468][T11133] lo speed is unknown, defaulting to 1000
[  209.618846][T11142] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2902'.
[  209.775327][T11147] loop4: detected capacity change from 0 to 164
[  209.783862][T11146] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.795364][T11147] isofs_fill_super: root inode is not a directory. Corrupted media?
[  209.829339][T11147] lo speed is unknown, defaulting to 1000
[  209.836046][T11147] lo speed is unknown, defaulting to 1000
[  209.989944][T11149] netlink: 'syz.3.2897': attribute type 10 has an invalid length.
[  209.997908][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2897'.
[  210.144514][T11146] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.179428][T11149] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  210.268234][T11146] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.304421][T11144] lo speed is unknown, defaulting to 1000
[  210.320749][T11144] lo speed is unknown, defaulting to 1000
[  210.335573][T11146] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.347630][T11151] loop5: detected capacity change from 0 to 512
[  210.361713][T11151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.426889][T11151] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2898: invalid indirect mapped block 4294967295 (level 1)
[  210.451200][T11151] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2898: invalid indirect mapped block 4294967295 (level 1)
[  210.465755][T11151] EXT4-fs (loop5): 2 truncates cleaned up
[  210.479603][T11146] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.485253][T11151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.503926][T11146] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.515830][T11146] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.528085][T11146] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.629061][T11151] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.2898: Abort forced by user
[  210.649806][T11151] EXT4-fs (loop5): Remounting filesystem read-only
[  210.656527][T11151] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  210.712346][T11164] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.756534][T11165] loop4: detected capacity change from 0 to 2048
[  210.836943][   T29] kauditd_printk_skb: 399 callbacks suppressed
[  210.836957][   T29] audit: type=1400 audit(1749969635.408:23932): avc:  denied  { unmount } for  pid=3992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  210.898818][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.928658][T11164] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.960110][T11168] xt_ecn: cannot match TCP bits for non-tcp packets
[  210.992822][T11167] program syz.0.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.057841][T11165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.089802][T11164] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.103851][   T29] audit: type=1400 audit(1749969635.448:23933): avc:  denied  { write } for  pid=11166 comm="syz.0.2904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  211.123368][   T29] audit: type=1400 audit(1749969635.508:23934): avc:  denied  { create } for  pid=11160 comm="syz.2.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  211.143276][   T29] audit: type=1400 audit(1749969635.528:23935): avc:  denied  { setopt } for  pid=11160 comm="syz.2.2901" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  211.163855][   T29] audit: type=1400 audit(1749969635.548:23936): avc:  denied  { read } for  pid=11166 comm="syz.0.2904" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  211.187573][   T29] audit: type=1400 audit(1749969635.548:23937): avc:  denied  { open } for  pid=11166 comm="syz.0.2904" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  211.211860][   T29] audit: type=1400 audit(1749969635.558:23938): avc:  denied  { create } for  pid=11166 comm="syz.0.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  211.959171][T11175] lo speed is unknown, defaulting to 1000
[  211.965336][T11175] lo speed is unknown, defaulting to 1000
[  212.048028][T11164] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.132287][T11181] loop0: detected capacity change from 0 to 512
[  212.148384][T11182] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  212.166444][T11181] EXT4-fs: Ignoring removed bh option
[  212.192389][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11182 comm=syz.2.2916
[  212.209884][T11181] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  212.219083][T11181] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  212.267028][T11181] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  212.292305][T11181] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  212.303140][T11181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.482076][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.658686][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.351021][T11164] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.362073][T11164] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.373317][T11164] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.384900][T11164] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.428482][   T29] audit: type=1400 audit(1749969637.998:23939): avc:  denied  { create } for  pid=11190 comm="syz.5.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  213.448411][   T29] audit: type=1400 audit(1749969637.998:23940): avc:  denied  { create } for  pid=11189 comm="syz.0.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  213.473835][T11196] loop3: detected capacity change from 0 to 512
[  213.512894][T11200] loop0: detected capacity change from 0 to 512
[  213.525751][   T29] audit: type=1400 audit(1749969638.018:23941): avc:  denied  { module_request } for  pid=11186 comm="syz.2.2911" kmod="fs-cpuset" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  213.557825][T11196] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  213.587270][T11196] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.2908: iget: bad i_size value: 12154757448730
[  213.636304][T11206] loop4: detected capacity change from 0 to 2048
[  213.649511][T11196] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2908: couldn't read orphan inode 13 (err -117)
[  213.667628][T11206] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  213.672670][T11200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.707712][T11196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.730503][T11200] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.777431][T11196] 0ªX¹¦À: left allmulticast mode
[  213.788422][T11196] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.796978][T11196] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.805396][T11196] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.813874][T11196] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.827633][ T3388] lo speed is unknown, defaulting to 1000
[  213.833475][ T3388] syz2: Port: 1 Link DOWN
[  213.863566][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.180218][T11217] lo speed is unknown, defaulting to 1000
[  214.194014][T11217] lo speed is unknown, defaulting to 1000
[  214.270434][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.307359][T11220] loop4: detected capacity change from 0 to 2048
[  214.328599][T11222] loop0: detected capacity change from 0 to 512
[  214.349968][T11220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.368563][T11222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  214.427841][T11222] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2918: invalid indirect mapped block 4294967295 (level 1)
[  214.458378][T11222] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2918: invalid indirect mapped block 4294967295 (level 1)
[  214.496040][T11222] EXT4-fs (loop0): 2 truncates cleaned up
[  214.502457][T11222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.554984][T11222] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.2918: Abort forced by user
[  214.566808][T11222] EXT4-fs (loop0): Remounting filesystem read-only
[  214.573710][T11222] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  214.602820][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.623657][T11228] loop5: detected capacity change from 0 to 128
[  214.674407][T11231] loop3: detected capacity change from 0 to 256
[  214.704765][T11231] FAT-fs (loop3): bogus number of FAT sectors
[  214.711190][T11231] FAT-fs (loop3): Can't find a valid FAT filesystem
[  214.957554][T11228] syz.5.2920: attempt to access beyond end of device
[  214.957554][T11228] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[  214.957630][T11242] lo speed is unknown, defaulting to 1000
[  214.982818][T11242] lo speed is unknown, defaulting to 1000
[  215.004051][T11228] syz.5.2920: attempt to access beyond end of device
[  215.004051][T11228] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  215.052328][T11228] syz.5.2920: attempt to access beyond end of device
[  215.052328][T11228] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  215.066043][T11228] syz.5.2920: attempt to access beyond end of device
[  215.066043][T11228] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[  215.080164][T11228] syz.5.2920: attempt to access beyond end of device
[  215.080164][T11228] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[  215.094026][T11228] syz.5.2920: attempt to access beyond end of device
[  215.094026][T11228] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[  215.109506][T11228] syz.5.2920: attempt to access beyond end of device
[  215.109506][T11228] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[  215.123235][T11228] syz.5.2920: attempt to access beyond end of device
[  215.123235][T11228] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[  215.137309][T11228] syz.5.2920: attempt to access beyond end of device
[  215.137309][T11228] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128
[  215.399222][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.426778][T11228] syz.5.2920: attempt to access beyond end of device
[  215.426778][T11228] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128
[  215.480611][T11245] netlink: 'syz.4.2924': attribute type 13 has an invalid length.
[  215.628021][T11250] netlink: 'syz.4.2926': attribute type 10 has an invalid length.
[  215.635912][T11250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2926'.
[  215.658635][T11250] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  215.696126][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'.
[  215.718921][T11252] loop0: detected capacity change from 0 to 2048
[  215.752936][T11252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.820793][T11252] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 1 with error 28
[  215.833233][T11252] EXT4-fs (loop0): This should not happen!! Data will be lost
[  215.833233][T11252] 
[  215.842937][T11252] EXT4-fs (loop0): Total free blocks count 0
[  215.849145][T11252] EXT4-fs (loop0): Free/Dirty block details
[  215.855071][T11252] EXT4-fs (loop0): free_blocks=0
[  215.860098][T11252] EXT4-fs (loop0): dirty_blocks=0
[  215.865144][T11252] EXT4-fs (loop0): Block reservation details
[  215.871300][T11252] EXT4-fs (loop0): i_reserved_data_blocks=0
[  215.953547][   T29] kauditd_printk_skb: 67 callbacks suppressed
[  215.953562][   T29] audit: type=1400 audit(1749969640.518:24009): avc:  denied  { read write } for  pid=11263 comm="syz.4.2930" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  215.983566][   T29] audit: type=1400 audit(1749969640.518:24010): avc:  denied  { open } for  pid=11263 comm="syz.4.2930" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  216.024428][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.042498][   T29] audit: type=1400 audit(1749969640.608:24011): avc:  denied  { unmount } for  pid=3992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  216.221802][T11276] loop5: detected capacity change from 0 to 128
[  216.250251][T11277] loop0: detected capacity change from 0 to 512
[  216.326869][T11277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  216.421076][T11277] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2933: invalid indirect mapped block 4294967295 (level 1)
[  216.482149][T11277] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2933: invalid indirect mapped block 4294967295 (level 1)
[  216.574090][T11277] EXT4-fs (loop0): 2 truncates cleaned up
[  216.613626][T11277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.718364][T11277] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.2933: Abort forced by user
[  216.730667][T11277] EXT4-fs (loop0): Remounting filesystem read-only
[  216.737261][T11277] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  216.828304][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.954800][   T29] audit: type=1400 audit(1749969641.518:24012): avc:  denied  { getopt } for  pid=11284 comm="syz.0.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  216.974946][   T29] audit: type=1400 audit(1749969641.518:24013): avc:  denied  { setopt } for  pid=11284 comm="syz.0.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  217.164981][T11289] loop4: detected capacity change from 0 to 512
[  217.175244][T11289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.231804][T11289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.283968][T11289] ext4 filesystem being mounted at /626/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  217.326256][   T29] audit: type=1400 audit(1749969641.888:24014): avc:  denied  { create } for  pid=11288 comm="syz.4.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  217.494968][   T29] audit: type=1400 audit(1749969641.918:24015): avc:  denied  { connect } for  pid=11288 comm="syz.4.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  217.515235][   T29] audit: type=1400 audit(1749969641.918:24016): avc:  denied  { read } for  pid=11288 comm="syz.4.2938" path="socket:[32915]" dev="sockfs" ino=32915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  218.042800][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.379006][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.386622][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.394024][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.401579][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.409010][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.416499][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.423925][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x4
[  218.431416][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.438837][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.446274][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.453678][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x2
[  218.461182][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.468705][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.476151][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x4
[  218.483719][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.491226][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.498771][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x2
[  218.506197][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.513661][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.521409][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.528846][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.536438][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.544021][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.551537][ T3395] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  218.568596][   T29] audit: type=1400 audit(1749969642.458:24017): avc:  denied  { mount } for  pid=11288 comm="syz.4.2938" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  218.591222][   T29] audit: type=1400 audit(1749969642.458:24018): avc:  denied  { remove_name } for  pid=11288 comm="syz.4.2938" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  218.750338][T11316] loop0: detected capacity change from 0 to 2048
[  218.757961][T11316] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  218.878461][ T3395] hid-generic 0006:0000:0000.0001: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1
[  218.946267][T11324] lo speed is unknown, defaulting to 1000
[  218.971818][T11324] lo speed is unknown, defaulting to 1000
[  219.223156][T11325] fido_id[11325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  219.635726][T11341] loop0: detected capacity change from 0 to 2048
[  219.717838][T11341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.752475][T11346] loop4: detected capacity change from 0 to 512
[  219.813968][T11350] lo speed is unknown, defaulting to 1000
[  219.835771][T11346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.866292][T11350] lo speed is unknown, defaulting to 1000
[  219.933391][T11346] ext4 filesystem being mounted at /629/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.978518][T11346] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.2957: iget: bad i_size value: 2533274857506816
[  219.997287][T11356] netlink: 12 bytes leftover after parsing attributes in process `wg1'.
[  220.005718][T11356] netlink: 28 bytes leftover after parsing attributes in process `wg1'.
[  220.014129][T11356] netlink: 12 bytes leftover after parsing attributes in process `wg1'.
[  220.030509][T11356] netlink: 28 bytes leftover after parsing attributes in process `wg1'.
[  220.038941][T11356] netlink: 'wg1': attribute type 6 has an invalid length.
[  220.067298][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.137701][ T2996] udevd[2996]: worker [6713] terminated by signal 33 (Unknown signal 33)
[  220.175432][ T2996] udevd[2996]: worker [6713] failed while handling '/devices/virtual/block/loop4'
[  220.232074][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2963'.
[  220.269232][T11370] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2962'.
[  220.298830][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2965'.
[  220.363432][T11374] netlink: 'syz.5.2965': attribute type 2 has an invalid length.
[  220.376631][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.488962][T11378] loop5: detected capacity change from 0 to 512
[  220.497297][T11384] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[  220.536639][T11378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  220.576085][T11378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.636121][T11378] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.766323][T11394] loop3: detected capacity change from 0 to 512
[  220.795377][T11396] loop0: detected capacity change from 0 to 256
[  220.802351][T11399] netlink: 'syz.4.2973': attribute type 10 has an invalid length.
[  220.810341][T11399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2973'.
[  220.819696][T11399] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  220.819884][T11378] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  220.846227][T11394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.898997][T11394] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  220.915055][T11378] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  220.935892][T11404] loop0: detected capacity change from 0 to 128
[  220.958432][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.098005][T11412] lo speed is unknown, defaulting to 1000
[  221.104186][T11412] lo speed is unknown, defaulting to 1000
[  221.247193][   T29] kauditd_printk_skb: 134 callbacks suppressed
[  221.247211][   T29] audit: type=1400 audit(1749969645.818:24153): avc:  denied  { read } for  pid=11416 comm="syz.4.2979" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  221.276949][   T29] audit: type=1400 audit(1749969645.818:24154): avc:  denied  { open } for  pid=11416 comm="syz.4.2979" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  221.381800][T11417] loop4: detected capacity change from 0 to 128
[  221.408235][T11415] loop5: detected capacity change from 0 to 2048
[  221.463707][T11404] bio_check_eod: 58 callbacks suppressed
[  221.463802][T11404] syz.0.2975: attempt to access beyond end of device
[  221.463802][T11404] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  221.561965][T11415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.578497][   T29] audit: type=1400 audit(1749969645.918:24155): avc:  denied  { ioctl } for  pid=11416 comm="syz.4.2979" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  221.603920][T11404] syz.0.2975: attempt to access beyond end of device
[  221.603920][T11404] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  221.624732][T11404] syz.0.2975: attempt to access beyond end of device
[  221.624732][T11404] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  221.639885][T11404] syz.0.2975: attempt to access beyond end of device
[  221.639885][T11404] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  221.653769][T11404] syz.0.2975: attempt to access beyond end of device
[  221.653769][T11404] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  221.655625][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.668732][T11404] syz.0.2975: attempt to access beyond end of device
[  221.668732][T11404] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  221.690398][T11404] syz.0.2975: attempt to access beyond end of device
[  221.690398][T11404] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  221.704373][T11404] syz.0.2975: attempt to access beyond end of device
[  221.704373][T11404] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  221.718158][T11404] syz.0.2975: attempt to access beyond end of device
[  221.718158][T11404] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  221.731914][T11404] syz.0.2975: attempt to access beyond end of device
[  221.731914][T11404] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  221.859905][T11426] loop3: detected capacity change from 0 to 512
[  221.871954][T11426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  221.904484][T11426] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2981: invalid indirect mapped block 4294967295 (level 1)
[  221.919518][T11426] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2981: invalid indirect mapped block 4294967295 (level 1)
[  221.934312][T11426] EXT4-fs (loop3): 2 truncates cleaned up
[  221.940837][T11426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.961139][T11432] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2980'.
[  221.970609][T11426] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.2981: Abort forced by user
[  221.982095][T11426] EXT4-fs (loop3): Remounting filesystem read-only
[  221.988932][T11426] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  221.999385][   T29] audit: type=1400 audit(1749969646.568:24156): avc:  denied  { getopt } for  pid=11433 comm="syz.4.2983" lport=12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  222.022213][T11434] loop4: detected capacity change from 0 to 128
[  222.037677][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.080993][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.218326][   T29] audit: type=1326 audit(1749969646.778:24157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  222.242077][   T29] audit: type=1326 audit(1749969646.778:24158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  222.265802][   T29] audit: type=1326 audit(1749969646.778:24159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  222.289827][   T29] audit: type=1326 audit(1749969646.778:24160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  222.313532][   T29] audit: type=1326 audit(1749969646.778:24161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  222.337194][   T29] audit: type=1326 audit(1749969646.778:24162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1c2bd58e7 code=0x7ffc0000
[  222.365270][T11438] loop4: detected capacity change from 0 to 512
[  222.385555][T11438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  222.398641][T11438] ext4 filesystem being mounted at /639/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.446054][T11440] policy can only be matched on NF_INET_PRE_ROUTING
[  222.446068][T11440] unable to load match
[  222.480792][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2992'.
[  222.491519][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  222.510265][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'.
[  222.533834][T11456] loop4: detected capacity change from 0 to 512
[  222.553141][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2994'.
[  222.567170][T11456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.609798][T11456] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.626852][T11466] loop0: detected capacity change from 0 to 512
[  222.629262][T11456] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2993: corrupted xattr block 19: overlapping e_value 
[  222.637280][T11466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  222.656282][T11456] EXT4-fs (loop4): Remounting filesystem read-only
[  222.662835][T11456] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  222.672329][T11456] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  222.682196][T11472] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  222.685341][T11466] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2997: invalid block
[  222.714323][T11466] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2997: invalid indirect mapped block 4294967295 (level 1)
[  222.728714][T11466] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2997: invalid indirect mapped block 4294967295 (level 1)
[  222.743430][T11466] EXT4-fs (loop0): 2 truncates cleaned up
[  222.750693][T11466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.771116][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3000'.
[  222.780744][T11466] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.2997: Abort forced by user
[  222.792849][T11477] bridge7: port 1(ip6gretap1) entered blocking state
[  222.799816][T11477] bridge7: port 1(ip6gretap1) entered disabled state
[  222.816033][T11466] EXT4-fs (loop0): Remounting filesystem read-only
[  222.822685][T11466] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  222.834549][T11477] ip6gretap1: entered allmulticast mode
[  222.834547][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.853227][T11477] ip6gretap1: entered promiscuous mode
[  222.872901][T11480] veth15: entered promiscuous mode
[  222.882240][T11480] bridge7: port 2(veth15) entered blocking state
[  222.889061][T11480] bridge7: port 2(veth15) entered disabled state
[  222.913208][T11480] veth15: entered allmulticast mode
[  222.928736][ T3622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.102809][T11490] loop3: detected capacity change from 0 to 512
[  223.112799][T11493] lo speed is unknown, defaulting to 1000
[  223.120327][T11490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  223.133250][T11493] lo speed is unknown, defaulting to 1000
[  223.279001][T11490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  223.373021][T11490] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.539711][T11490] EXT4-fs (loop3): shut down requested (2)
[  223.558537][T11498] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  223.619871][T11502] loop4: detected capacity change from 0 to 256
[  223.687674][T11502] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  223.759834][T11502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  223.768455][T11502] FAT-fs (loop4): Filesystem has been set read-only
[  223.800815][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  223.887826][T11505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  223.971289][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'.
[  224.011129][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'.
[  224.060257][T11515] xt_connbytes: Forcing CT accounting to be enabled
[  224.091073][T11515] set match dimension is over the limit!
[  224.200885][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'.
[  224.334817][T11527] loop3: detected capacity change from 0 to 128
[  224.344044][T11531] loop4: detected capacity change from 0 to 512
[  224.351865][T11531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  224.379395][T11531] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3018: invalid block
[  224.398421][T11531] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3018: invalid indirect mapped block 4294967295 (level 1)
[  224.412943][T11531] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3018: invalid indirect mapped block 4294967295 (level 1)
[  224.427491][T11531] EXT4-fs (loop4): 2 truncates cleaned up
[  224.433638][T11531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.459775][T11531] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3018: Abort forced by user
[  224.496981][T11531] EXT4-fs (loop4): Remounting filesystem read-only
[  224.503670][T11531] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  224.550358][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.573268][T11539] wireguard1: entered promiscuous mode
[  224.579068][T11539] wireguard1: entered allmulticast mode
[  224.599391][T11553] netlink: 'syz.4.3025': attribute type 39 has an invalid length.
[  224.627709][T11557] 9pnet_fd: Insufficient options for proto=fd
[  224.831175][T11574] SELinux:  policydb table sizes (10000000,0) do not match mine (6,7)
[  224.839929][T11574] SELinux: failed to load policy
[  224.848488][T11566] loop3: detected capacity change from 0 to 512
[  224.878225][T11566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  224.890881][T11566] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.017975][T11590] loop5: detected capacity change from 0 to 512
[  225.552111][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  225.914873][T11646] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3046'.
[  225.946614][T11651] loop5: detected capacity change from 0 to 512
[  225.979714][T11651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.992602][T11651] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.055573][T11651] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.3047: corrupted inode contents
[  226.074488][T11651] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.3047: mark_inode_dirty error
[  226.086429][T11651] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.3047: corrupted inode contents
[  226.099866][T11651] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3047: mark_inode_dirty error
[  226.130012][T11675] loop4: detected capacity change from 0 to 164
[  226.154086][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.331948][T11685] loop5: detected capacity change from 0 to 2048
[  226.360586][T11685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.438531][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.469748][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'.
[  226.498422][T11710] loop3: detected capacity change from 0 to 512
[  226.505778][T11710] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  226.520334][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3056'.
[  226.527674][T11710] EXT4-fs (loop3): 1 truncate cleaned up
[  226.532829][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'.
[  226.535563][T11710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.551429][T11712] loop5: detected capacity change from 0 to 1024
[  226.567739][T11712] EXT4-fs: Ignoring removed nomblk_io_submit option
[  226.575844][   T29] kauditd_printk_skb: 307 callbacks suppressed
[  226.575884][   T29] audit: type=1400 audit(1749969651.138:24470): avc:  denied  { setattr } for  pid=11709 comm="syz.3.3059" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  226.578505][T11712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  226.598790][T11710] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  226.629531][T11712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.643423][T11710] EXT4-fs (loop3): Remounting filesystem read-only
[  226.655095][T11710] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30)
[  226.684094][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.698939][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.712262][T11719] loop5: detected capacity change from 0 to 512
[  226.719860][T11719] EXT4-fs: Ignoring removed i_version option
[  226.726078][T11719] EXT4-fs: Ignoring removed mblk_io_submit option
[  226.733483][T11719] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  226.743909][T11719] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  226.840554][T11725] lo speed is unknown, defaulting to 1000
[  226.847322][T11725] lo speed is unknown, defaulting to 1000
[  226.974165][T11724] lo speed is unknown, defaulting to 1000
[  227.005409][T11724] lo speed is unknown, defaulting to 1000
[  227.157127][T11728] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3063'.
[  228.542723][ T3388] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  228.561740][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  228.570764][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  228.620456][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  228.629601][ T3388] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  228.689311][T11750] loop3: detected capacity change from 0 to 512
[  228.825219][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  228.834184][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  228.881943][T11750] EXT4-fs: Ignoring removed oldalloc option
[  228.891435][T11750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  228.946458][T11750] EXT4-fs (loop3): 1 truncate cleaned up
[  228.958924][   T29] audit: type=1400 audit(1749969653.529:24471): avc:  denied  { append } for  pid=11747 comm="syz.3.3070" path="/590/bus/file0/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  229.070056][   T29] audit: type=1400 audit(1749969653.639:24472): avc:  denied  { mount } for  pid=11762 comm="syz.3.3074" name="/" dev="ramfs" ino=32713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  229.126421][   T29] audit: type=1400 audit(1749969653.679:24473): avc:  denied  { execute } for  pid=11764 comm="syz.4.3075" path="/proc/consoles" dev="proc" ino=4026532035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
[  229.150081][   T29] audit: type=1326 audit(1749969653.679:24474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  229.173757][   T29] audit: type=1326 audit(1749969653.679:24475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  229.197412][   T29] audit: type=1326 audit(1749969653.679:24476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  229.221058][   T29] audit: type=1326 audit(1749969653.679:24477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  229.244800][   T29] audit: type=1326 audit(1749969653.679:24478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  229.268976][   T29] audit: type=1326 audit(1749969653.679:24479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  229.360820][T11781] netlink: 'syz.4.3082': attribute type 4 has an invalid length.
[  229.554384][T11792] loop4: detected capacity change from 0 to 1024
[  229.804863][T11818] loop4: detected capacity change from 0 to 1024
[  229.812871][T11818] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  229.823854][T11818] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  229.834350][T11818] JBD2: no valid journal superblock found
[  229.840316][T11818] EXT4-fs (loop4): Could not load journal inode
[  229.891783][T11822] xt_connbytes: Forcing CT accounting to be enabled
[  229.898694][T11822] set match dimension is over the limit!
[  230.059773][T11827] lo speed is unknown, defaulting to 1000
[  230.088575][T11827] lo speed is unknown, defaulting to 1000
[  230.152525][T11835] netlink: 'syz.4.3101': attribute type 2 has an invalid length.
[  230.231567][T11843] loop4: detected capacity change from 0 to 512
[  230.407146][T11847] wireguard0: entered promiscuous mode
[  230.412935][T11847] wireguard0: entered allmulticast mode
[  230.502822][T11858] loop4: detected capacity change from 0 to 512
[  230.511205][T11858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  230.525567][T11858] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3110: invalid block
[  230.538560][T11858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3110: invalid indirect mapped block 4294967295 (level 1)
[  230.553208][T11858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3110: invalid indirect mapped block 4294967295 (level 1)
[  230.568780][T11858] EXT4-fs (loop4): 2 truncates cleaned up
[  230.575135][T11858] EXT4-fs mount: 4 callbacks suppressed
[  230.575152][T11858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.616125][T11858] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3110: Abort forced by user
[  230.657557][T11858] EXT4-fs (loop4): Remounting filesystem read-only
[  230.664146][T11858] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  230.684436][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.978582][T11903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11903 comm=syz.2.3123
[  232.043153][T11907] __nla_validate_parse: 10 callbacks suppressed
[  232.043169][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3125'.
[  232.058698][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3125'.
[  232.129985][T11907] loop5: detected capacity change from 0 to 512
[  232.147134][T11907] EXT4-fs (loop5): too many log groups per flexible block group
[  232.154991][T11907] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  232.162222][T11907] EXT4-fs (loop5): mount failed
[  232.299642][T11915] wireguard0: entered promiscuous mode
[  232.306771][T11915] wireguard0: entered allmulticast mode
[  232.344061][   T29] kauditd_printk_skb: 373 callbacks suppressed
[  232.344079][   T29] audit: type=1400 audit(1749969656.909:24853): avc:  denied  { name_connect } for  pid=11924 comm="syz.5.3132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  232.408674][T11890] loop4: detected capacity change from 0 to 8192
[  232.422411][   T29] audit: type=1400 audit(1749969656.959:24854): avc:  denied  { listen } for  pid=11924 comm="syz.5.3132" lport=48031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  232.445847][   T29] audit: type=1400 audit(1749969656.959:24855): avc:  denied  { accept } for  pid=11924 comm="syz.5.3132" lport=48031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  232.469344][   T29] audit: type=1400 audit(1749969656.959:24856): avc:  denied  { write } for  pid=11924 comm="syz.5.3132" lport=48031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  232.493274][   T29] audit: type=1400 audit(1749969656.969:24857): avc:  denied  { setopt } for  pid=11924 comm="syz.5.3132" lport=48031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  232.592955][T11920] lo speed is unknown, defaulting to 1000
[  232.604085][T11920] lo speed is unknown, defaulting to 1000
[  232.636697][T11923] dvmrp1: entered allmulticast mode
[  232.659228][T11923] dvmrp1: left allmulticast mode
[  232.847290][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3134'.
[  232.862983][T11937] loop3: detected capacity change from 0 to 128
[  232.914909][T11936] loop4: detected capacity change from 0 to 1024
[  232.943792][T11936] EXT4-fs: Ignoring removed nomblk_io_submit option
[  232.970767][T11936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  233.012478][T11936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.034060][T11937] bio_check_eod: 16 callbacks suppressed
[  233.034106][T11937] syz.3.3135: attempt to access beyond end of device
[  233.034106][T11937] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  233.131157][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.141789][T11937] syz.3.3135: attempt to access beyond end of device
[  233.141789][T11937] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  233.157580][T11937] syz.3.3135: attempt to access beyond end of device
[  233.157580][T11937] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  233.171375][T11937] syz.3.3135: attempt to access beyond end of device
[  233.171375][T11937] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  233.186717][T11937] syz.3.3135: attempt to access beyond end of device
[  233.186717][T11937] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  233.200526][T11937] syz.3.3135: attempt to access beyond end of device
[  233.200526][T11937] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  233.214953][T11937] syz.3.3135: attempt to access beyond end of device
[  233.214953][T11937] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  233.230071][T11937] syz.3.3135: attempt to access beyond end of device
[  233.230071][T11937] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  233.244782][T11937] syz.3.3135: attempt to access beyond end of device
[  233.244782][T11937] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  233.295867][T11942] lo speed is unknown, defaulting to 1000
[  233.301849][T11937] syz.3.3135: attempt to access beyond end of device
[  233.301849][T11937] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  233.316638][T11942] lo speed is unknown, defaulting to 1000
[  233.407221][T11945] loop3: detected capacity change from 0 to 512
[  233.429061][T11945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  233.467566][   T29] audit: type=1326 audit(1749969657.409:24858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  233.481479][T11945] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3138: invalid block
[  233.491311][   T29] audit: type=1326 audit(1749969657.409:24859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  233.513629][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  233.526763][   T29] audit: type=1326 audit(1749969657.419:24860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  233.535676][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  233.559306][   T29] audit: type=1326 audit(1749969657.419:24861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  233.568281][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  233.591760][   T29] audit: type=1326 audit(1749969657.419:24862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.3.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  233.657394][T11958] loop4: detected capacity change from 0 to 512
[  233.665581][T11958] EXT4-fs: Ignoring removed oldalloc option
[  233.690072][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  233.699144][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  233.709457][T11945] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3138: invalid indirect mapped block 4294967295 (level 1)
[  233.738947][T11945] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3138: invalid indirect mapped block 4294967295 (level 1)
[  233.771696][T11958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  233.786715][T11945] EXT4-fs (loop3): 2 truncates cleaned up
[  233.800352][T11945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.815532][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  233.845559][T11958] EXT4-fs (loop4): 1 truncate cleaned up
[  233.856623][T11958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.881083][T11945] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.3138: Abort forced by user
[  233.910659][T11945] EXT4-fs (loop3): Remounting filesystem read-only
[  233.917305][T11945] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  233.969812][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  234.034150][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.063148][T11969] loop5: detected capacity change from 0 to 512
[  234.101074][T11969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  234.121621][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.133848][T11969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.148363][T11969] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  234.431854][T11984] macvtap1: entered promiscuous mode
[  234.446777][T11984] macvtap1: entered allmulticast mode
[  234.447170][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.462505][T11984] dummy0: entered allmulticast mode
[  234.556675][T11989] netlink: 'syz.5.3148': attribute type 13 has an invalid length.
[  234.637778][T11995] xt_connbytes: Forcing CT accounting to be enabled
[  234.656993][T11995] set match dimension is over the limit!
[  234.748737][T12004] loop5: detected capacity change from 0 to 512
[  234.760353][T12004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  234.770847][T12004] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3154: invalid block
[  234.784682][T12004] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3154: invalid indirect mapped block 4294967295 (level 1)
[  234.800391][T12004] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3154: invalid indirect mapped block 4294967295 (level 1)
[  234.824719][T12004] EXT4-fs (loop5): 2 truncates cleaned up
[  234.831258][T12004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.847085][T12004] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3154: Abort forced by user
[  234.862321][T12004] EXT4-fs (loop5): Remounting filesystem read-only
[  234.869003][T12004] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  234.920584][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.001412][T12028] loop5: detected capacity change from 0 to 1024
[  235.014958][T12030] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  235.024050][T12028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.038326][T12028] ext4 filesystem being mounted at /602/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.600009][T12047] netlink: 'syz.0.3164': attribute type 6 has an invalid length.
[  236.093959][T12051] loop4: detected capacity change from 0 to 8192
[  236.244013][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.363238][T12058] lo speed is unknown, defaulting to 1000
[  236.369951][T12058] lo speed is unknown, defaulting to 1000
[  236.849712][T12060] loop4: detected capacity change from 0 to 512
[  236.865123][T12060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  236.887889][T12060] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3169: invalid block
[  237.042119][T12060] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3169: invalid indirect mapped block 4294967295 (level 1)
[  237.057453][T12060] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3169: invalid indirect mapped block 4294967295 (level 1)
[  237.071958][T12060] EXT4-fs (loop4): 2 truncates cleaned up
[  237.145197][T12072] lo speed is unknown, defaulting to 1000
[  237.151700][T12072] lo speed is unknown, defaulting to 1000
[  237.272835][T12060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.513429][T12075] loop3: detected capacity change from 0 to 512
[  237.527283][T12060] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3169: Abort forced by user
[  237.609086][T12060] EXT4-fs (loop4): Remounting filesystem read-only
[  237.615812][T12060] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  237.669486][T12075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  237.682229][T12075] ext4 filesystem being mounted at /602/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.713012][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.731434][   T29] kauditd_printk_skb: 425 callbacks suppressed
[  237.731452][   T29] audit: type=1326 audit(1749969662.279:25288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.761418][   T29] audit: type=1326 audit(1749969662.279:25289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.785368][   T29] audit: type=1326 audit(1749969662.279:25290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.809143][   T29] audit: type=1326 audit(1749969662.279:25291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.832997][   T29] audit: type=1326 audit(1749969662.279:25292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.856590][   T29] audit: type=1326 audit(1749969662.279:25293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.880327][   T29] audit: type=1326 audit(1749969662.279:25294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.904081][   T29] audit: type=1326 audit(1749969662.279:25295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.927720][   T29] audit: type=1326 audit(1749969662.279:25296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.951313][   T29] audit: type=1326 audit(1749969662.279:25297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  237.977357][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  238.299055][T12094] loop3: detected capacity change from 0 to 2048
[  238.306463][T12094] EXT4-fs: Ignoring removed bh option
[  238.317189][T12094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.361011][T12094] __nla_validate_parse: 9 callbacks suppressed
[  238.361031][T12094] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  238.388952][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.702979][T12118] loop5: detected capacity change from 0 to 2048
[  239.079547][T12109] Set syz1 is full, maxelem 65536 reached
[  239.395253][T12126] loop3: detected capacity change from 0 to 512
[  239.483205][T12118]  loop5: p1 < > p4
[  239.504432][T12128] bond_slave_1: entered promiscuous mode
[  239.510790][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'.
[  239.521164][T12128] bond0: (slave bond_slave_1): Releasing backup interface
[  239.530770][T12118] loop5: p4 size 8388608 extends beyond EOD, truncated
[  239.538460][T12128] bond_slave_1 (unregistering): left promiscuous mode
[  239.548001][T12126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  239.560686][T12126] ext4 filesystem being mounted at /608/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.622441][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  239.930376][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.949092][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.984029][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'.
[  240.192658][T12149] loop3: detected capacity change from 0 to 128
[  240.414573][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'.
[  240.456234][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'.
[  240.505606][T12156] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  240.532357][T12149] bio_check_eod: 28 callbacks suppressed
[  240.532380][T12149] syz.3.3190: attempt to access beyond end of device
[  240.532380][T12149] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  240.541315][T12157] xt_hashlimit: overflow, rate too high: 1125899906842624
[  240.554329][T12149] syz.3.3190: attempt to access beyond end of device
[  240.554329][T12149] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  240.572655][T12149] syz.3.3190: attempt to access beyond end of device
[  240.572655][T12149] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  240.586687][T12149] syz.3.3190: attempt to access beyond end of device
[  240.586687][T12149] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  240.600431][T12149] syz.3.3190: attempt to access beyond end of device
[  240.600431][T12149] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  240.615689][T12149] syz.3.3190: attempt to access beyond end of device
[  240.615689][T12149] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  240.630043][T12149] syz.3.3190: attempt to access beyond end of device
[  240.630043][T12149] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  240.644171][T12149] syz.3.3190: attempt to access beyond end of device
[  240.644171][T12149] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  240.689134][T12149] syz.3.3190: attempt to access beyond end of device
[  240.689134][T12149] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  240.702761][T12149] syz.3.3190: attempt to access beyond end of device
[  240.702761][T12149] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  240.845911][T12164] lo speed is unknown, defaulting to 1000
[  240.852776][T12164] lo speed is unknown, defaulting to 1000
[  241.373375][T12166] loop5: detected capacity change from 0 to 512
[  241.398749][T12166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  241.412236][T12166] ext4 filesystem being mounted at /610/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.428227][T12171] loop4: detected capacity change from 0 to 128
[  241.505220][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  241.629275][T12186] loop5: detected capacity change from 0 to 512
[  241.637439][T12186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  241.649056][T12186] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3210: invalid block
[  241.663397][T12186] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3210: invalid indirect mapped block 4294967295 (level 1)
[  241.666212][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.678991][T12186] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3210: invalid indirect mapped block 4294967295 (level 1)
[  241.701300][T12186] EXT4-fs (loop5): 2 truncates cleaned up
[  241.707599][T12186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.726943][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.745928][T12188] vlan2: entered promiscuous mode
[  241.751140][T12188] dummy0: entered promiscuous mode
[  241.761216][T12186] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3210: Abort forced by user
[  241.771524][T12186] EXT4-fs (loop5): Remounting filesystem read-only
[  241.778138][T12186] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  241.812662][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.850909][T12194] xt_hashlimit: max too large, truncated to 1048576
[  241.971546][T12200] lo speed is unknown, defaulting to 1000
[  241.977863][T12200] lo speed is unknown, defaulting to 1000
[  243.287985][T12206] lo speed is unknown, defaulting to 1000
[  243.294259][T12206] lo speed is unknown, defaulting to 1000
[  243.337617][T12210] loop4: detected capacity change from 0 to 512
[  243.376967][T12210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  243.389781][T12210] ext4 filesystem being mounted at /695/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.330590][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  244.351636][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'.
[  244.360810][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3228'.
[  244.367734][T12221] loop5: detected capacity change from 0 to 512
[  244.369900][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'.
[  244.385395][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'.
[  244.385925][T12221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  244.395288][T12220] loop3: detected capacity change from 0 to 1024
[  244.412984][T12221] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3218: invalid block
[  244.426179][T12221] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3218: invalid indirect mapped block 4294967295 (level 1)
[  244.430980][T12226] loop4: detected capacity change from 0 to 128
[  244.443606][T12221] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3218: invalid indirect mapped block 4294967295 (level 1)
[  244.450330][T12220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.462952][T12221] EXT4-fs (loop5): 2 truncates cleaned up
[  244.473826][T12220] ext4 filesystem being mounted at /613/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.480746][T12221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.523068][   T29] kauditd_printk_skb: 386 callbacks suppressed
[  244.523086][   T29] audit: type=1326 audit(1749969669.089:25684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.553469][T12221] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3218: Abort forced by user
[  244.553519][   T29] audit: type=1326 audit(1749969669.089:25685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.564459][T12221] EXT4-fs (loop5): Remounting filesystem read-only
[  244.587399][   T29] audit: type=1326 audit(1749969669.129:25686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.593930][T12221] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  244.631883][   T29] audit: type=1326 audit(1749969669.199:25687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.667489][   T29] audit: type=1326 audit(1749969669.199:25688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.691263][   T29] audit: type=1326 audit(1749969669.199:25689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.714972][   T29] audit: type=1326 audit(1749969669.199:25690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.738856][   T29] audit: type=1326 audit(1749969669.209:25691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.762881][   T29] audit: type=1326 audit(1749969669.209:25692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.786782][   T29] audit: type=1326 audit(1749969669.209:25693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baefde929 code=0x7ffc0000
[  244.815172][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.842128][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.874416][T12237] loop5: detected capacity change from 0 to 512
[  244.882525][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'.
[  244.883511][T12237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  244.905616][T12237] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3223: invalid block
[  244.929792][T12237] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3223: invalid indirect mapped block 4294967295 (level 1)
[  244.931907][T12241] lo speed is unknown, defaulting to 1000
[  244.944046][T12237] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3223: invalid indirect mapped block 4294967295 (level 1)
[  244.959672][T12241] lo speed is unknown, defaulting to 1000
[  244.965296][T12237] EXT4-fs (loop5): 2 truncates cleaned up
[  244.976770][T12237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.994089][T12237] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3223: Abort forced by user
[  245.005047][T12237] EXT4-fs (loop5): Remounting filesystem read-only
[  245.011630][T12237] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  245.038337][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.100502][T12241] loop3: detected capacity change from 0 to 512
[  245.116580][T12241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.129318][T12241] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.240489][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.438959][T12258] loop3: detected capacity change from 0 to 512
[  245.460174][T12258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  245.472814][T12258] ext4 filesystem being mounted at /616/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.521938][T12263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.564205][T12265] loop5: detected capacity change from 0 to 1024
[  245.587904][T12265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.730371][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.227284][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  247.352034][T12295] loop5: detected capacity change from 0 to 512
[  247.364511][T12295] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.3244: bad orphan inode 11
[  247.386081][T12295] ext4_test_bit(bit=10, block=4) = 1
[  247.391443][T12295] is_bad_inode(inode)=0
[  247.395670][T12295] NEXT_ORPHAN(inode)=2080374784
[  247.400555][T12295] max_ino=32
[  247.403769][T12295] i_nlink=0
[  247.450103][T12295] EXT4-fs (loop5): 1 truncate cleaned up
[  247.529356][T12295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.556309][T12300] loop4: detected capacity change from 0 to 512
[  247.585984][T12300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  247.607483][T12300] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3245: invalid block
[  247.620350][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.629898][T12300] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3245: invalid indirect mapped block 4294967295 (level 1)
[  247.644952][T12300] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3245: invalid indirect mapped block 4294967295 (level 1)
[  247.671226][T12300] EXT4-fs (loop4): 2 truncates cleaned up
[  247.689969][T12300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.717162][T12300] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3245: Abort forced by user
[  247.728355][T12300] EXT4-fs (loop4): Remounting filesystem read-only
[  247.734950][T12300] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  247.783130][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.866807][T12310] lo speed is unknown, defaulting to 1000
[  247.876555][T12310] lo speed is unknown, defaulting to 1000
[  247.973986][T12320] netlink: 'syz.5.3251': attribute type 4 has an invalid length.
[  249.632063][T12327] loop5: detected capacity change from 0 to 512
[  249.674151][T12327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  249.686862][T12327] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.900647][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  250.107261][T12346] xt_hashlimit: max too large, truncated to 1048576
[  250.255841][   T29] kauditd_printk_skb: 225 callbacks suppressed
[  250.255856][   T29] audit: type=1326 audit(1749969674.830:25919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.293300][   T29] audit: type=1326 audit(1749969674.860:25920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.317209][   T29] audit: type=1326 audit(1749969674.860:25921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.340936][   T29] audit: type=1326 audit(1749969674.860:25922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.364704][   T29] audit: type=1326 audit(1749969674.860:25923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.388346][   T29] audit: type=1326 audit(1749969674.860:25924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.412004][   T29] audit: type=1326 audit(1749969674.860:25925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.435830][   T29] audit: type=1326 audit(1749969674.860:25926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.459560][   T29] audit: type=1326 audit(1749969674.860:25927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.483361][   T29] audit: type=1326 audit(1749969674.860:25928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  250.675893][T12360] netlink: 'syz.2.3265': attribute type 13 has an invalid length.
[  250.781996][T12363] xt_hashlimit: overflow, rate too high: 1125899906842624
[  251.079275][T12372] netlink: 'syz.4.3268': attribute type 10 has an invalid length.
[  251.087194][T12372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3268'.
[  251.096288][T12372] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  251.642407][T12379] loop3: detected capacity change from 0 to 512
[  251.669228][T12379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  251.691589][T12377] loop5: detected capacity change from 0 to 8192
[  251.700977][T12379] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3271: invalid block
[  251.713935][T12379] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3271: invalid indirect mapped block 4294967295 (level 1)
[  251.714942][T12377] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  251.810430][T12379] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3271: invalid indirect mapped block 4294967295 (level 1)
[  251.855159][T12379] EXT4-fs (loop3): 2 truncates cleaned up
[  251.861089][T12390] loop4: detected capacity change from 0 to 2048
[  251.861361][T12379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.911951][T12394] netlink: 'syz.2.3276': attribute type 1 has an invalid length.
[  251.922015][T12390]  loop4: p1 < > p4
[  251.926681][T12390] loop4: p4 size 8388608 extends beyond EOD, truncated
[  251.926825][T12379] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.3271: Abort forced by user
[  251.962794][T12394] 8021q: adding VLAN 0 to HW filter on device bond8
[  251.971519][T12379] EXT4-fs (loop3): Remounting filesystem read-only
[  251.978148][T12379] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  251.991073][T12394] bond7: (slave bond8): making interface the new active one
[  251.998853][T12394] bond7: (slave bond8): Enslaving as an active interface with an up link
[  252.019893][T12394] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[  252.032535][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3276'.
[  252.042261][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.042490][T12394] 8021q: adding VLAN 0 to HW filter on device bond7
[  252.090774][T12408] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  252.190249][T12427] loop4: detected capacity change from 0 to 2048
[  252.260492][T12427]  loop4: p2 p3 p7
[  252.261024][T12440] lo speed is unknown, defaulting to 1000
[  252.272227][T12440] lo speed is unknown, defaulting to 1000
[  252.344810][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'.
[  252.474921][T12470] loop5: detected capacity change from 0 to 512
[  252.482065][T12470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  252.493746][T12470] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3288: invalid block
[  252.507572][T12470] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3288: invalid indirect mapped block 4294967295 (level 1)
[  252.522215][T12470] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3288: invalid indirect mapped block 4294967295 (level 1)
[  252.537231][T12470] EXT4-fs (loop5): 2 truncates cleaned up
[  252.547223][T12470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.563747][T12470] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3288: Abort forced by user
[  252.580862][T12470] EXT4-fs (loop5): Remounting filesystem read-only
[  252.587535][T12470] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  252.630640][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.725420][T12494] netlink: 'syz.2.3290': attribute type 10 has an invalid length.
[  252.733343][T12494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3290'.
[  252.785373][T12494] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  253.121342][T12539] lo speed is unknown, defaulting to 1000
[  253.132047][T12539] lo speed is unknown, defaulting to 1000
[  253.380439][T12539] loop4: detected capacity change from 0 to 512
[  253.397813][T12572] lo speed is unknown, defaulting to 1000
[  253.399203][T12539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3299: bg 0: block 5: invalid block bitmap
[  253.404357][T12572] lo speed is unknown, defaulting to 1000
[  253.416779][T12539] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  253.432203][T12539] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3299: invalid indirect mapped block 3 (level 2)
[  253.446866][T12539] EXT4-fs (loop4): 2 truncates cleaned up
[  253.454489][T12539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.479709][T12539] dvmrp1: entered allmulticast mode
[  253.492635][T12539] dvmrp1: left allmulticast mode
[  253.763736][T12618] loop3: detected capacity change from 0 to 512
[  253.776328][T12618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.789050][T12618] ext4 filesystem being mounted at /622/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.806010][T12618] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  253.824508][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.098143][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.228649][T12638] bridge0: port 1(gretap0) entered blocking state
[  254.235311][T12638] bridge0: port 1(gretap0) entered disabled state
[  254.253643][T12638] gretap0: entered allmulticast mode
[  254.262440][T12638] gretap0: entered promiscuous mode
[  254.572747][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'.
[  255.741413][T12668] lo speed is unknown, defaulting to 1000
[  255.754496][T12668] lo speed is unknown, defaulting to 1000
[  255.763524][T12666] syzkaller0: refused to change device tx_queue_len
[  255.791323][T12666] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.802986][T12666] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  255.993541][T12668] loop5: detected capacity change from 0 to 512
[  256.003634][T12668] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3318: bg 0: block 5: invalid block bitmap
[  256.024143][T12668] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  256.033195][T12668] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3318: invalid indirect mapped block 3 (level 2)
[  256.067145][   T29] kauditd_printk_skb: 316 callbacks suppressed
[  256.067167][   T29] audit: type=1400 audit(1749969680.620:26245): avc:  denied  { setopt } for  pid=12680 comm="syz.0.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.165644][T12668] EXT4-fs (loop5): 2 truncates cleaned up
[  256.171985][T12668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.219774][T12668] dvmrp1: entered allmulticast mode
[  256.232438][T12668] dvmrp1: left allmulticast mode
[  256.819055][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.910324][T12705] loop5: detected capacity change from 0 to 2048
[  256.956891][T12705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.115011][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.253381][T12715] loop5: detected capacity change from 0 to 2048
[  257.288554][T12715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.323087][   T29] audit: type=1326 audit(1749969681.890:26246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  257.346310][   T29] audit: type=1326 audit(1749969681.890:26247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  257.369368][   T29] audit: type=1326 audit(1749969681.890:26248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  257.448015][   T29] audit: type=1326 audit(1749969682.020:26249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  257.471152][   T29] audit: type=1326 audit(1749969682.020:26250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  257.482846][T12721] loop3: detected capacity change from 0 to 512
[  257.524141][T12721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  257.625457][T12721] EXT4-fs (loop3): 1 truncate cleaned up
[  257.632454][T12721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.640915][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.656464][   T29] audit: type=1400 audit(1749969682.230:26251): avc:  denied  { watch watch_reads } for  pid=12720 comm="syz.3.3330" path="/629/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  257.680348][   T29] audit: type=1326 audit(1749969682.230:26252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  257.684367][T12725] loop4: detected capacity change from 0 to 512
[  257.704009][   T29] audit: type=1326 audit(1749969682.230:26253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  257.704040][   T29] audit: type=1326 audit(1749969682.240:26254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12724 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0091eae929 code=0x7ffc0000
[  257.758404][T12725] EXT4-fs: Ignoring removed nobh option
[  257.785719][T12733] batadv_slave_0: entered promiscuous mode
[  257.792582][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3333'.
[  257.833367][T12725] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3332: corrupted inode contents
[  257.847149][T12733] batadv_slave_0 (unregistering): left promiscuous mode
[  257.873189][T12725] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3332: mark_inode_dirty error
[  257.912922][T12725] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3332: corrupted inode contents
[  257.986101][T12725] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3332: mark_inode_dirty error
[  258.014203][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.030392][T12725] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3332: Failed to acquire dquot type 0
[  258.058133][T12737] loop5: detected capacity change from 0 to 512
[  258.065490][T12725] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3332: corrupted inode contents
[  258.079122][T12737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  258.088443][T12737] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  258.098864][T12725] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3332: mark_inode_dirty error
[  258.110973][T12737] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3334: invalid block
[  258.125126][T12725] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3332: corrupted inode contents
[  258.137277][T12737] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3334: invalid indirect mapped block 4294967295 (level 1)
[  258.293119][T12725] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3332: mark_inode_dirty error
[  258.304594][T12737] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3334: invalid indirect mapped block 4294967295 (level 1)
[  258.415335][T12725] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3332: corrupted inode contents
[  258.434897][T12737] EXT4-fs (loop5): 2 truncates cleaned up
[  258.441502][T12737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.492633][T12621] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  258.544234][T12725] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  258.563156][T12725] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3332: corrupted inode contents
[  258.593783][T12725] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3332: mark_inode_dirty error
[  258.619473][T12725] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  258.675219][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.694603][T12725] EXT4-fs (loop4): 1 truncate cleaned up
[  258.711907][T12725] ext4 filesystem being mounted at /724/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.795319][T12756] tipc: Cannot configure node identity twice
[  259.765687][T12775] netlink: 'syz.2.3346': attribute type 4 has an invalid length.
[  260.245797][T12787] netlink: 'syz.4.3351': attribute type 4 has an invalid length.
[  260.386653][T12790] netlink: 'syz.4.3352': attribute type 1 has an invalid length.
[  260.394656][T12790] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3352'.
[  260.606648][T12795] netlink: 'syz.4.3354': attribute type 1 has an invalid length.
[  260.614541][T12795] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3354'.
[  261.115976][   T29] kauditd_printk_skb: 43 callbacks suppressed
[  261.115994][   T29] audit: type=1326 audit(1749969685.690:26296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  261.147422][   T29] audit: type=1326 audit(1749969685.720:26297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e5bce929 code=0x7ffc0000
[  261.204943][T12825] loop4: detected capacity change from 0 to 1024
[  261.211961][T12825] EXT4-fs: inline encryption not supported
[  261.218553][T12825] EXT4-fs: Ignoring removed orlov option
[  261.224410][T12825] ext4: Unknown parameter 'appraise'
[  261.243326][T12825] loop4: detected capacity change from 0 to 1024
[  261.250247][T12825] EXT4-fs: Ignoring removed orlov option
[  261.258681][T12825] EXT4-fs mount: 2 callbacks suppressed
[  261.258700][T12825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.390522][T12831] lo speed is unknown, defaulting to 1000
[  261.396924][T12831] lo speed is unknown, defaulting to 1000
[  261.488511][T12833] loop5: detected capacity change from 0 to 164
[  261.543576][T12833] isofs_fill_super: root inode is not a directory. Corrupted media?
[  261.568528][T12833] lo speed is unknown, defaulting to 1000
[  261.574814][T12833] lo speed is unknown, defaulting to 1000
[  262.464512][   T29] audit: type=1400 audit(1749969687.030:26298): avc:  denied  { listen } for  pid=12836 comm="syz.3.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  262.492692][   T29] audit: type=1400 audit(1749969687.060:26299): avc:  denied  { mount } for  pid=12839 comm="syz.2.3369" name="/" dev="hugetlbfs" ino=37935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  262.629072][T12851] loop3: detected capacity change from 0 to 512
[  262.675263][T12851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  262.686678][T12851] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3373: invalid block
[  262.707389][T12851] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3373: invalid indirect mapped block 4294967295 (level 1)
[  262.732278][T12851] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3373: invalid indirect mapped block 4294967295 (level 1)
[  262.748635][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.757886][T12851] EXT4-fs (loop3): 2 truncates cleaned up
[  262.764293][T12851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.786498][T12851] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.3373: Abort forced by user
[  262.808518][T12857] lo speed is unknown, defaulting to 1000
[  262.815249][T12851] EXT4-fs (loop3): Remounting filesystem read-only
[  262.821920][T12851] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  262.841659][T12857] lo speed is unknown, defaulting to 1000
[  262.879583][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.981426][T12863] loop3: detected capacity change from 0 to 512
[  262.995105][T12863] ext3: Bad value for 'mb_optimize_scan'
[  263.000870][   T29] audit: type=1400 audit(1749969687.571:26300): avc:  denied  { mounton } for  pid=12862 comm="syz.3.3376" path="/636/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.086248][   T29] audit: type=1326 audit(1749969687.651:26301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.4.3375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0091eae929 code=0x0
[  263.116905][T12867] loop5: detected capacity change from 0 to 128
[  263.131394][T12871] loop3: detected capacity change from 0 to 512
[  263.143967][T12871] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  263.160377][ T3395] kernel write not supported for file bpf-prog (pid: 3395 comm: kworker/1:4)
[  263.523464][   T29] audit: type=1326 audit(1749969688.091:26302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12878 comm="syz.2.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  263.548031][T12879] No such timeout policy "syz0"
[  263.562726][   T29] audit: type=1326 audit(1749969688.091:26303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12878 comm="syz.2.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  263.586657][   T29] audit: type=1326 audit(1749969688.101:26304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12878 comm="syz.2.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  263.610226][   T29] audit: type=1326 audit(1749969688.101:26305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12878 comm="syz.2.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2bde929 code=0x7ffc0000
[  263.664125][T12881] dns_resolver: Unsupported server list version (0)
[  263.913756][T10212] bio_check_eod: 1337 callbacks suppressed
[  263.913773][T10212] kworker/u8:50: attempt to access beyond end of device
[  263.913773][T10212] loop5: rw=1, sector=153, nr_sectors = 8 limit=128
[  263.944332][T10212] kworker/u8:50: attempt to access beyond end of device
[  263.944332][T10212] loop5: rw=1, sector=169, nr_sectors = 8 limit=128
[  263.957979][T10212] kworker/u8:50: attempt to access beyond end of device
[  263.957979][T10212] loop5: rw=1, sector=185, nr_sectors = 8 limit=128
[  263.972606][T10212] kworker/u8:50: attempt to access beyond end of device
[  263.972606][T10212] loop5: rw=1, sector=201, nr_sectors = 8 limit=128
[  263.986367][T10212] kworker/u8:50: attempt to access beyond end of device
[  263.986367][T10212] loop5: rw=1, sector=217, nr_sectors = 8 limit=128
[  264.000001][T10212] kworker/u8:50: attempt to access beyond end of device
[  264.000001][T10212] loop5: rw=1, sector=233, nr_sectors = 8 limit=128
[  264.019200][T10212] kworker/u8:50: attempt to access beyond end of device
[  264.019200][T10212] loop5: rw=1, sector=249, nr_sectors = 8 limit=128
[  264.033174][T10212] kworker/u8:50: attempt to access beyond end of device
[  264.033174][T10212] loop5: rw=1, sector=265, nr_sectors = 8 limit=128
[  264.069689][T10212] kworker/u8:50: attempt to access beyond end of device
[  264.069689][T10212] loop5: rw=1, sector=281, nr_sectors = 8 limit=128
[  264.084216][T10212] kworker/u8:50: attempt to access beyond end of device
[  264.084216][T10212] loop5: rw=1, sector=297, nr_sectors = 8 limit=128
[  264.826558][T12904] loop5: detected capacity change from 0 to 512
[  264.881631][T12904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.898073][T12904] ext4 filesystem being mounted at /657/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.365251][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.588555][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'.
[  265.611010][T12921] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.619511][T12921] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.627985][T12921] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.636455][T12921] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.654465][T12921] geneve2: entered promiscuous mode
[  265.911176][T12938] lo speed is unknown, defaulting to 1000
[  265.922424][T12938] lo speed is unknown, defaulting to 1000
[  265.979499][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'.
[  266.034070][T12945] loop3: detected capacity change from 0 to 1024
[  266.041388][T12945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  266.051431][T12945] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  266.134990][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  266.135011][   T29] audit: type=1400 audit(1749969690.671:26366): avc:  denied  { name_bind } for  pid=12937 comm="syz.0.3401" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  266.319719][T12945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  266.329808][   T29] audit: type=1400 audit(1749969690.881:26367): avc:  denied  { mount } for  pid=12950 comm="syz.0.3406" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  266.352175][   T29] audit: type=1400 audit(1749969690.881:26368): avc:  denied  { unmount } for  pid=12950 comm="syz.0.3406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  266.417655][T12945] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3404: lblock 2 mapped to illegal pblock 2 (length 1)
[  266.654350][T12945] EXT4-fs (loop3): Remounting filesystem read-only
[  266.660941][T12945] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  266.670132][T12945] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  266.679248][T12945] EXT4-fs (loop3): 1 orphan inode deleted
[  266.685607][T12945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.698151][T12945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.794590][T12956] lo speed is unknown, defaulting to 1000
[  266.800752][T12956] lo speed is unknown, defaulting to 1000
[  266.969451][T12964] loop4: detected capacity change from 0 to 512
[  267.002486][T12964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  267.021520][T12964] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3410: invalid block
[  267.035111][T12964] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3410: invalid indirect mapped block 4294967295 (level 1)
[  267.049845][T12964] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3410: invalid indirect mapped block 4294967295 (level 1)
[  267.065458][T12964] EXT4-fs (loop4): 2 truncates cleaned up
[  267.074819][T12966] loop5: detected capacity change from 0 to 164
[  267.085270][T12964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.326538][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.390254][T12974] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 39127 - 0
[  267.398650][T12974] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 39127 - 0
[  267.406981][T12974] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 39127 - 0
[  267.415519][T12974] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 39127 - 0
[  267.424063][T12974] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 55320 - 0
[  267.432515][T12974] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 55320 - 0
[  267.441069][T12974] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 55320 - 0
[  267.449526][T12974] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 55320 - 0
[  267.460289][T12974] geneve3: entered promiscuous mode
[  267.465720][T12974] geneve3: entered allmulticast mode
[  267.499706][T12976] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.664995][T12976] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.976959][T12976] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.058287][T12976] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.144798][T12976] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.171067][T12976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.183858][T12976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.198841][T12976] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.310264][T13003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.355171][T13005] netlink: 'syz.3.3423': attribute type 1 has an invalid length.
[  268.363003][T13005] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3423'.
[  268.424318][T13003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.580171][   T29] audit: type=1400 audit(1749969693.151:26369): avc:  denied  { getopt } for  pid=13013 comm="syz.4.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  268.601031][T13003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.657815][T13003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.677769][   T29] audit: type=1400 audit(1749969693.251:26370): avc:  denied  { write } for  pid=13020 comm="syz.4.3430" path="socket:[39251]" dev="sockfs" ino=39251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  268.719708][   T29] audit: type=1326 audit(1749969693.291:26371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.3.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  268.743519][   T29] audit: type=1326 audit(1749969693.291:26372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.3.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  268.767182][   T29] audit: type=1326 audit(1749969693.291:26373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.3.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff813fae929 code=0x7ffc0000
[  268.842243][T13035] loop3: detected capacity change from 0 to 512
[  268.849233][T13035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  268.859542][T13035] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3434: invalid block
[  268.872746][T13035] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3434: invalid indirect mapped block 4294967295 (level 1)
[  268.887250][T13035] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3434: invalid indirect mapped block 4294967295 (level 1)
[  268.901703][T13035] EXT4-fs (loop3): 2 truncates cleaned up
[  268.908179][T13035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.935661][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.571853][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'.
[  269.940175][T13067] loop3: detected capacity change from 0 to 512
[  269.947473][T13067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  269.962149][T13003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.972981][T13067] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3445: invalid block
[  269.974838][T13003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.993729][T13067] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3445: invalid indirect mapped block 4294967295 (level 1)
[  270.011682][T13003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.021098][T13067] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3445: invalid indirect mapped block 4294967295 (level 1)
[  270.040037][T13003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.052207][T13067] EXT4-fs (loop3): 2 truncates cleaned up
[  270.059672][T13067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.074719][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.083396][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.092335][T13067] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.3445: Abort forced by user
[  270.094679][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.111323][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.125999][T13067] EXT4-fs (loop3): Remounting filesystem read-only
[  270.132667][T13067] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  270.162150][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.494389][T13087] No such timeout policy "syz0"
[  270.525126][T13089] loop5: detected capacity change from 0 to 1024
[  270.531976][T13089] EXT4-fs: inline encryption not supported
[  270.553912][T13089] EXT4-fs: Ignoring removed orlov option
[  270.559654][T13089] ext4: Unknown parameter 'appraise'
[  270.593247][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'.
[  270.602287][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3449'.
[  270.682404][T13089] loop5: detected capacity change from 0 to 1024
[  270.707398][T13089] EXT4-fs: Ignoring removed orlov option
[  270.746003][T13089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.088127][T13099] lo speed is unknown, defaulting to 1000
[  271.094617][T13099] lo speed is unknown, defaulting to 1000
[  271.137532][T13089] ==================================================================
[  271.145703][T13089] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  271.152866][T13089] 
[  271.155198][T13089] write to 0xffff888106ba0b3c of 4 bytes by task 13094 on cpu 1:
[  271.163099][T13089]  xas_set_mark+0x12b/0x140
[  271.167668][T13089]  __folio_start_writeback+0x1dd/0x440
[  271.173158][T13089]  ext4_bio_write_folio+0x5ad/0x9f0
[  271.178385][T13089]  mpage_submit_folio+0xe4/0x170
[  271.183341][T13089]  mpage_process_page_bufs+0x39b/0x4a0
[  271.188824][T13089]  mpage_prepare_extent_to_map+0x741/0xaa0
[  271.194656][T13089]  ext4_do_writepages+0xa1a/0x21c0
[  271.199780][T13089]  ext4_writepages+0x176/0x300
[  271.204585][T13089]  do_writepages+0x1c6/0x310
[  271.209241][T13089]  file_write_and_wait_range+0x156/0x2c0
[  271.215244][T13089]  generic_buffers_fsync_noflush+0x45/0x120
[  271.221177][T13089]  ext4_sync_file+0x1ab/0x690
[  271.225869][T13089]  vfs_fsync_range+0x10a/0x130
[  271.230670][T13089]  ext4_buffered_write_iter+0x34f/0x3c0
[  271.236287][T13089]  ext4_file_write_iter+0x383/0xf00
[  271.241527][T13089]  iter_file_splice_write+0x5ef/0x970
[  271.246958][T13089]  direct_splice_actor+0x153/0x2a0
[  271.252102][T13089]  splice_direct_to_actor+0x30f/0x680
[  271.257503][T13089]  do_splice_direct+0xda/0x150
[  271.262288][T13089]  do_sendfile+0x380/0x650
[  271.266718][T13089]  __x64_sys_sendfile64+0x105/0x150
[  271.271935][T13089]  x64_sys_call+0xb39/0x2fb0
[  271.276546][T13089]  do_syscall_64+0xd2/0x200
[  271.281087][T13089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.287004][T13089] 
[  271.289342][T13089] read to 0xffff888106ba0b3c of 4 bytes by task 13089 on cpu 0:
[  271.296988][T13089]  xas_find_marked+0x5dc/0x620
[  271.301775][T13089]  find_get_entry+0x5d/0x380
[  271.306394][T13089]  filemap_get_folios_tag+0x92/0x210
[  271.311714][T13089]  filemap_fdatawait_range+0x88/0x1d0
[  271.317115][T13089]  __writeback_single_inode+0xdb/0x7c0
[  271.322610][T13089]  writeback_single_inode+0x167/0x3e0
[  271.328010][T13089]  sync_inode_metadata+0x5b/0x90
[  271.332966][T13089]  generic_buffers_fsync_noflush+0xd9/0x120
[  271.338893][T13089]  ext4_sync_file+0x1ab/0x690
[  271.343592][T13089]  vfs_fsync_range+0x10a/0x130
[  271.348368][T13089]  ext4_buffered_write_iter+0x34f/0x3c0
[  271.353934][T13089]  ext4_file_write_iter+0x383/0xf00
[  271.359150][T13089]  iter_file_splice_write+0x5ef/0x970
[  271.364576][T13089]  direct_splice_actor+0x153/0x2a0
[  271.369715][T13089]  splice_direct_to_actor+0x30f/0x680
[  271.375119][T13089]  do_splice_direct+0xda/0x150
[  271.379916][T13089]  do_sendfile+0x380/0x650
[  271.384356][T13089]  __x64_sys_sendfile64+0x105/0x150
[  271.389577][T13089]  x64_sys_call+0xb39/0x2fb0
[  271.394184][T13089]  do_syscall_64+0xd2/0x200
[  271.398703][T13089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.404706][T13089] 
[  271.407039][T13089] value changed: 0x0a000021 -> 0x04000021
[  271.412762][T13089] 
[  271.415108][T13089] Reported by Kernel Concurrency Sanitizer on:
[  271.421300][T13089] CPU: 0 UID: 0 PID: 13089 Comm: syz.5.3452 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) 
[  271.433822][T13089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  271.443987][T13089] ==================================================================
[  271.524691][   T29] kauditd_printk_skb: 101 callbacks suppressed
[  271.524712][   T29] audit: type=1326 audit(1749969696.061:26475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff813fae929 code=0x0
[  271.596112][ T3992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.