last executing test programs:

5.014298235s ago: executing program 1 (id=477):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="54010000100013070000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000004e2200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000002000400200000000000000048000200656362286369706865725f6e756c6c29"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{r6, r7/1000+10000}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x88000cc, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14)

4.247419566s ago: executing program 1 (id=484):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
msgctl$IPC_SET(0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
setfsuid(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)

4.162341328s ago: executing program 1 (id=487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
socket(0x4, 0x80000, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0xffffffffffffffdb, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}}, 0x14b6deac033214c2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0), 0xfe, 0x444, &(0x7f0000000980)="$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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x1)
splice(r3, 0x0, r2, 0x0, 0x3, 0x0)

3.96462248s ago: executing program 1 (id=501):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32=0x0], 0x50)
mlockall(0x6)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000402)
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'O/!\x00'})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)

3.34450918s ago: executing program 1 (id=504):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
getrlimit(0x4, &(0x7f0000000240))
openat$hwrng(0xffffffffffffff9c, 0x0, 0x82100, 0x0)
unshare(0x62040200)

2.70122392s ago: executing program 0 (id=496):
r0 = socket(0x1e, 0x80004, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)

2.62198895s ago: executing program 0 (id=497):
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
r0 = open(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41, 0x111, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0)

2.436730823s ago: executing program 3 (id=498):
socket(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00"/11], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000048020000000000000000850000000e000000855700000500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073799579000000000900010073797a300000000014000000020a0101000000000000000000000006140000001100010000000000000000000300000a"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
r1 = socket(0x25, 0x5, 0x1)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f62e196f71f153ee47a665c9", 0x7, 0xffffffff, 0x7ff, 0x7756}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)

2.432931234s ago: executing program 0 (id=510):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, r4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)

2.337143785s ago: executing program 3 (id=499):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
getrlimit(0xc, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x6240, 0x0)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x9, 0xf9, 0x1, 0x4}, {0xe36, 0xd, 0x2}, {0x9, 0x0, 0x81, 0x8}, {0x8cec, 0x6, 0x8, 0x7a}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000ec0)={0x49c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "a90d5fca27cfabf37be1e333ec3e90e366ee26d8b19f9295bf657c8acd6d79f1ef13cbf8939686cb56e85a27b511d112e18cd268181773c1d1b2891156a1c8f7fa679251daa3262b897aa8504c3975787451512e80198a5eff657bbed449b2cb44f1ba653cc5e2081ab9f6365c74465460368face48c2640fdc9"}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-!\\}\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffe7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'+.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe14}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf7000}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "5596cfa406827df7da9689955a5d60b2bc5b66635f19dad2c754aaa328bbd7b4d69d02ee902adc6bf8aa3c8b6b5e2ee0e68a"}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "2682356c9cf25c3e48b4f38569ed641be05a0843b87f04e2def4b9ae36c964c09f807f43495b213e32fe2b29f4ca6ef0219b592244b6368f6e4fbfd7d8b2bc79f0bcf470510e258ec500"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "595bdfa46551ebe56bcb06a6ed764c35576235e8957e0f5c6c3da8870920beb7ae0a1d010d0a9cce17c921e877e6efbe8fb312a8f6f5821054e75fb1e599d4b5747ea8b863c01d9d927eb06000bff4a0ec24222461f004243a3149d280cbf10e00ceed0e0159d4a0a2749cb5b82e7bd24e8ac4e250aae606b9e53bc9550a67aa0598e5d689bb9b232270994c3ef6af"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "c914e07f8d6f2ac800b79544fa4ba26731dd342bbee9b62f7f4c1a08ecf1092633ad7b4dd4539199381db8d92938bb5743f2ce57e9ec7d1834e2212ada478b7966616815fceae9d7dedfffa066cfc764f85afd225620abcab3414d9feb05e4c97db173e547694179de1ffeb86a0e81b55986828ecaf44094d3787c15b538e5297fa1c06158f56260da65fa85ff89a8ad54781815101f7b20c8d4f570"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00')

2.298338906s ago: executing program 0 (id=500):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1805000000000000d1b1ba767a07be8a8b6ba50000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x88, &(0x7f0000000380)=""/136, 0x41100, 0x30, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x6, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x2, 0x2}, {0x4, 0x1, 0x9, 0x2}], 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {@in=@rand_addr=0x64010102, 0x4d0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)

2.272823336s ago: executing program 3 (id=503):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r0, r3, 0xfffffffffffffc01, 0x0)
tee(r0, r3, 0x60000000000, 0x0)

2.123391819s ago: executing program 4 (id=508):
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
open(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41, 0x111, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)

2.082427489s ago: executing program 4 (id=509):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_batadv\x00', &(0x7f0000000740)=@ethtool_gfeatures})
msgget(0x2, 0x2c4)
r1 = getpgrp(0xffffffffffffffff)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10)
sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4048091)
r6 = dup3(r4, r5, 0x80000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88)

1.99437322s ago: executing program 4 (id=511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring)
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000300)='\x00', r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10)
pause()
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

1.33742522s ago: executing program 2 (id=512):
socket(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00"/11], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000048020000000000000000850000000e000000855700000500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073799579000000000900010073797a300000000014000000020a0101000000000000000000000006140000001100010000000000000000000300000a"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
r1 = socket(0x25, 0x5, 0x1)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f62e196f71f153ee47a665c9", 0x7, 0xffffffff, 0x7ff, 0x7756}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)

1.33693568s ago: executing program 3 (id=513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
socket(0x4, 0x80000, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0xffffffffffffffdb, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}}, 0x14b6deac033214c2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0), 0xfe, 0x444, &(0x7f0000000980)="$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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x1)
splice(r3, 0x0, r2, 0x0, 0x3, 0x0)

1.33649018s ago: executing program 0 (id=522):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$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")
chdir(&(0x7f0000000540)='./file0\x00')
creat(&(0x7f0000000200)='./file1\x00', 0x12e)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_setup(0x8, &(0x7f0000002740)=<r3=>0x0)
io_destroy(r3)

1.261865631s ago: executing program 2 (id=514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x4, 0x80000, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0xffffffffffffffdb, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}}, 0x14b6deac033214c2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0), 0xfe, 0x444, &(0x7f0000000980)="$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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x1)
splice(r4, 0x0, r3, 0x0, 0x3, 0x0)

1.223776872s ago: executing program 3 (id=515):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, r4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)

1.180405603s ago: executing program 0 (id=516):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d4, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)

1.176184933s ago: executing program 2 (id=527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
socket(0x4, 0x80000, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0xffffffffffffffdb, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}}, 0x14b6deac033214c2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0), 0xfe, 0x444, &(0x7f0000000980)="$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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x1)
splice(r3, 0x0, r2, 0x0, 0x3, 0x0)

1.077327834s ago: executing program 3 (id=517):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getpgid(0xffffffffffffffff)
syz_open_procfs(r1, &(0x7f0000000740)='stack\x00')
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000007000000088000000400000005000000", @ANYBLOB="000000000000a102000000000000000000100000ba4871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4008031, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0xa, "bf7fa159ea60785a5fcf"}, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x103)

1.076287274s ago: executing program 2 (id=529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
socket(0x4, 0x80000, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0), 0xfe, 0x444, &(0x7f0000000980)="$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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x1)
splice(r4, 0x0, r3, 0x0, 0x3, 0x0)

1.022349995s ago: executing program 2 (id=518):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
getrlimit(0xc, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x6240, 0x0)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x9, 0xf9, 0x1, 0x4}, {0xe36, 0xd, 0x2}, {0x9, 0x0, 0x81, 0x8}, {0x8cec, 0x6, 0x8, 0x7a}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000ec0)={0x49c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "a90d5fca27cfabf37be1e333ec3e90e366ee26d8b19f9295bf657c8acd6d79f1ef13cbf8939686cb56e85a27b511d112e18cd268181773c1d1b2891156a1c8f7fa679251daa3262b897aa8504c3975787451512e80198a5eff657bbed449b2cb44f1ba653cc5e2081ab9f6365c74465460368face48c2640fdc9"}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-!\\}\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffe7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'+.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe14}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf7000}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "5596cfa406827df7da9689955a5d60b2bc5b66635f19dad2c754aaa328bbd7b4d69d02ee902adc6bf8aa3c8b6b5e2ee0e68a"}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "2682356c9cf25c3e48b4f38569ed641be05a0843b87f04e2def4b9ae36c964c09f807f43495b213e32fe2b29f4ca6ef0219b592244b6368f6e4fbfd7d8b2bc79f0bcf470510e258ec500"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "595bdfa46551ebe56bcb06a6ed764c35576235e8957e0f5c6c3da8870920beb7ae0a1d010d0a9cce17c921e877e6efbe8fb312a8f6f5821054e75fb1e599d4b5747ea8b863c01d9d927eb06000bff4a0ec24222461f004243a3149d280cbf10e00ceed0e0159d4a0a2749cb5b82e7bd24e8ac4e250aae606b9e53bc9550a67aa0598e5d689bb9b232270994c3ef6af"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "c914e07f8d6f2ac800b79544fa4ba26731dd342bbee9b62f7f4c1a08ecf1092633ad7b4dd4539199381db8d92938bb5743f2ce57e9ec7d1834e2212ada478b7966616815fceae9d7dedfffa066cfc764f85afd225620abcab3414d9feb05e4c97db173e547694179de1ffeb86a0e81b55986828ecaf44094d3787c15b538e5297fa1c06158f56260da65fa85ff89a8ad54781815101f7b20c8d4f570"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00')

1.017253795s ago: executing program 4 (id=531):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
socket(0x4, 0x80000, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0), 0xfe, 0x444, &(0x7f0000000980)="$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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x1)
splice(r4, 0x0, r3, 0x0, 0x3, 0x0)

971.278136ms ago: executing program 2 (id=519):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440))
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000a80)={0x2a, 0x1, 0x4001}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r1}, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa3)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

856.140777ms ago: executing program 4 (id=520):
r0 = socket$igmp6(0xa, 0x3, 0x2)
readahead(0xffffffffffffffff, 0x3, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x4, 0x0, [0x9, 0x6, 0x9, 0x15b0, 0x1, 0x8, 0x9, 0x7, 0x6, 0x7, 0xfff8, 0x0, 0x2, 0x3ff, 0x4, 0xe94], 0xb}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x0, 0xcde6, 0x6, 0x1, 0x1000, 0x4, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x401, 'netbios-ns\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0)

286.204676ms ago: executing program 1 (id=521):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r2)
r3 = inotify_init1(0x0)
fcntl$setstatus(r2, 0x4, 0x2c00)
r4 = gettid()
fcntl$setown(r2, 0x8, r4)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x80000010)
rmdir(&(0x7f0000000100)='./control\x00')

0s ago: executing program 4 (id=523):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000100)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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")
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa00, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040840)
link(&(0x7f0000000200)='./file1\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

[   22.246678][   T29] audit: type=1400 audit(1743570210.582:81): avc:  denied  { read } for  pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts.
[   26.613511][   T29] audit: type=1400 audit(1743570214.942:82): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.614668][ T3288] cgroup: Unknown subsys name 'net'
[   26.636326][   T29] audit: type=1400 audit(1743570214.942:83): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.664009][   T29] audit: type=1400 audit(1743570214.972:84): avc:  denied  { unmount } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.777025][ T3288] cgroup: Unknown subsys name 'cpuset'
[   26.783370][ T3288] cgroup: Unknown subsys name 'rlimit'
[   26.895497][   T29] audit: type=1400 audit(1743570215.222:85): avc:  denied  { setattr } for  pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.918830][   T29] audit: type=1400 audit(1743570215.222:86): avc:  denied  { create } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.939400][   T29] audit: type=1400 audit(1743570215.222:87): avc:  denied  { write } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.942828][ T3294] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.959830][   T29] audit: type=1400 audit(1743570215.222:88): avc:  denied  { read } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.983294][ T3288] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.988768][   T29] audit: type=1400 audit(1743570215.222:89): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.022246][   T29] audit: type=1400 audit(1743570215.222:90): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.045590][   T29] audit: type=1400 audit(1743570215.302:91): avc:  denied  { relabelto } for  pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.741295][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   28.750548][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   28.778343][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   28.789916][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   28.812338][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   28.911561][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.918733][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.925971][ T3310] bridge_slave_0: entered allmulticast mode
[   28.932615][ T3310] bridge_slave_0: entered promiscuous mode
[   28.944534][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.951659][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.958834][ T3306] bridge_slave_0: entered allmulticast mode
[   28.965353][ T3306] bridge_slave_0: entered promiscuous mode
[   28.983621][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.990806][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.998374][ T3310] bridge_slave_1: entered allmulticast mode
[   29.004893][ T3310] bridge_slave_1: entered promiscuous mode
[   29.016288][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.023453][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.030809][ T3306] bridge_slave_1: entered allmulticast mode
[   29.037241][ T3306] bridge_slave_1: entered promiscuous mode
[   29.043539][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.050723][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.057930][ T3308] bridge_slave_0: entered allmulticast mode
[   29.064241][ T3308] bridge_slave_0: entered promiscuous mode
[   29.091328][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.098454][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.105621][ T3302] bridge_slave_0: entered allmulticast mode
[   29.112153][ T3302] bridge_slave_0: entered promiscuous mode
[   29.123507][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.130634][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.137784][ T3308] bridge_slave_1: entered allmulticast mode
[   29.144153][ T3308] bridge_slave_1: entered promiscuous mode
[   29.150471][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.157606][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.164757][ T3301] bridge_slave_0: entered allmulticast mode
[   29.171421][ T3301] bridge_slave_0: entered promiscuous mode
[   29.178998][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.188478][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.195597][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.202869][ T3301] bridge_slave_1: entered allmulticast mode
[   29.209418][ T3301] bridge_slave_1: entered promiscuous mode
[   29.220390][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.227530][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.234654][ T3302] bridge_slave_1: entered allmulticast mode
[   29.241118][ T3302] bridge_slave_1: entered promiscuous mode
[   29.262515][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.289169][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.299432][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.314212][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.329827][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.339623][ T3310] team0: Port device team_slave_0 added
[   29.346582][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.362149][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.372422][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.382099][ T3310] team0: Port device team_slave_1 added
[   29.388950][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.426641][ T3306] team0: Port device team_slave_0 added
[   29.432668][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.439680][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.465652][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.487642][ T3301] team0: Port device team_slave_0 added
[   29.499684][ T3306] team0: Port device team_slave_1 added
[   29.506377][ T3302] team0: Port device team_slave_0 added
[   29.512533][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.519605][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.545574][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.560732][ T3308] team0: Port device team_slave_0 added
[   29.567500][ T3301] team0: Port device team_slave_1 added
[   29.574099][ T3308] team0: Port device team_slave_1 added
[   29.580659][ T3302] team0: Port device team_slave_1 added
[   29.613088][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.620212][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.646234][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.658057][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.665046][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.690982][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.728726][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.735808][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.761884][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.772944][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.779982][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.805943][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.825080][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.832092][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.858136][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.871302][ T3310] hsr_slave_0: entered promiscuous mode
[   29.877701][ T3310] hsr_slave_1: entered promiscuous mode
[   29.889220][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.896311][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.922303][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.933279][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.940269][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.966314][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.977440][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.984407][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.010436][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.033915][ T3306] hsr_slave_0: entered promiscuous mode
[   30.039948][ T3306] hsr_slave_1: entered promiscuous mode
[   30.045857][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.053516][ T3306] Cannot create hsr debugfs directory
[   30.120236][ T3301] hsr_slave_0: entered promiscuous mode
[   30.126335][ T3301] hsr_slave_1: entered promiscuous mode
[   30.132237][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.139974][ T3301] Cannot create hsr debugfs directory
[   30.152749][ T3302] hsr_slave_0: entered promiscuous mode
[   30.158922][ T3302] hsr_slave_1: entered promiscuous mode
[   30.164792][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.172486][ T3302] Cannot create hsr debugfs directory
[   30.190120][ T3308] hsr_slave_0: entered promiscuous mode
[   30.196103][ T3308] hsr_slave_1: entered promiscuous mode
[   30.202124][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.209760][ T3308] Cannot create hsr debugfs directory
[   30.326803][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.347613][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.356592][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.381058][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.443960][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.458501][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.478204][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.489545][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.498650][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.510180][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.522288][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.536405][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.560988][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.588882][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.598625][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.607808][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.620111][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.629075][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.638197][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.654524][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.679967][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.728233][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   30.754059][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.764455][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.773977][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.781212][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.797873][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.804975][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.819693][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   30.850527][  T387] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.857810][  T387] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.868639][  T387] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.875755][  T387] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.887078][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   30.898624][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.918894][  T387] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.926048][  T387] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.947937][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.958300][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.965423][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.998188][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   31.009338][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   31.030209][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.037378][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.049399][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.056536][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.067171][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.074274][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.091741][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.098956][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.148081][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.158582][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.193807][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.211003][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.233204][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.255918][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.364526][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.382036][ T3310] veth0_vlan: entered promiscuous mode
[   31.399862][ T3310] veth1_vlan: entered promiscuous mode
[   31.419805][ T3302] veth0_vlan: entered promiscuous mode
[   31.429893][ T3302] veth1_vlan: entered promiscuous mode
[   31.446108][ T3310] veth0_macvtap: entered promiscuous mode
[   31.461911][ T3301] veth0_vlan: entered promiscuous mode
[   31.481203][ T3310] veth1_macvtap: entered promiscuous mode
[   31.498306][ T3302] veth0_macvtap: entered promiscuous mode
[   31.505982][ T3301] veth1_vlan: entered promiscuous mode
[   31.515518][ T3302] veth1_macvtap: entered promiscuous mode
[   31.530123][ T3306] veth0_vlan: entered promiscuous mode
[   31.541662][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.558222][ T3306] veth1_vlan: entered promiscuous mode
[   31.569243][ T3301] veth0_macvtap: entered promiscuous mode
[   31.583969][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.593363][ T3301] veth1_macvtap: entered promiscuous mode
[   31.600915][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.611453][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.622697][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.631641][ T3308] veth0_vlan: entered promiscuous mode
[   31.640124][ T3308] veth1_vlan: entered promiscuous mode
[   31.649884][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.660521][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.671391][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.680029][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.688907][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.697762][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.706611][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.717779][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.726585][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.735302][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.744087][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.770668][ T3306] veth0_macvtap: entered promiscuous mode
[   31.779236][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.789799][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.799734][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.810283][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.821026][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.836051][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.846765][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.856799][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.867374][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.877932][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.890286][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   31.890313][   T29] audit: type=1400 audit(1743570220.222:110): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/root/syzkaller.KJduyD/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   31.901976][ T3306] veth1_macvtap: entered promiscuous mode
[   31.926335][   T29] audit: type=1400 audit(1743570220.222:111): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.948729][   T29] audit: type=1400 audit(1743570220.222:112): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/root/syzkaller.KJduyD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.974084][   T29] audit: type=1400 audit(1743570220.222:113): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   31.995979][   T29] audit: type=1400 audit(1743570220.222:114): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/root/syzkaller.KJduyD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   32.022707][   T29] audit: type=1400 audit(1743570220.222:115): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/root/syzkaller.KJduyD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   32.050223][   T29] audit: type=1400 audit(1743570220.222:116): avc:  denied  { unmount } for  pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.073056][   T29] audit: type=1400 audit(1743570220.262:117): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   32.080302][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.095978][   T29] audit: type=1400 audit(1743570220.262:118): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=3595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   32.104995][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.136199][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.144922][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.155463][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.169836][ T3308] veth0_macvtap: entered promiscuous mode
[   32.184554][   T29] audit: type=1400 audit(1743570220.512:119): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.216059][ T3308] veth1_macvtap: entered promiscuous mode
[   32.234801][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.245476][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.255407][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.266005][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.275892][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.286590][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.297535][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.305815][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.316365][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.326245][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.336742][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.346612][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.357165][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.367700][ T3446] netlink: 'syz.1.2': attribute type 13 has an invalid length.
[   32.369668][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.390262][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.400959][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.410952][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.421451][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.431325][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.441793][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.451649][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.462130][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.473335][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.513636][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.520904][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.551057][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   32.561007][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   32.591478][ T3446] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   32.600658][ T3446] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   32.609890][ T3446] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   32.618966][ T3446] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   32.633603][ T3447] tun0: tun_chr_ioctl cmd 1074025675
[   32.639043][ T3447] tun0: persist enabled
[   32.645259][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.654082][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.662872][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.671640][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.685940][ T3449] tun0: tun_chr_ioctl cmd 1074025675
[   32.691400][ T3449] tun0: persist disabled
[   32.699939][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.710660][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.720668][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.731226][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.741103][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.751670][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.785342][ T3446] syz.1.2 (3446) used greatest stack depth: 10856 bytes left
[   32.801758][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.843294][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.852147][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.861027][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.869892][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.919928][ T3460] vlan2: entered allmulticast mode
[   32.982248][ T3460] mmap: +}[@ (3460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   33.055338][ T3469] loop4: detected capacity change from 0 to 512
[   33.089867][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   33.093212][ T3469] EXT4-fs (loop4): too many log groups per flexible block group
[   33.106473][ T3469] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   33.121855][ T3472] tipc: Started in network mode
[   33.126843][ T3472] tipc: Node identity 6678217cde68, cluster identity 4711
[   33.134110][ T3472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   33.146274][ T3469] EXT4-fs (loop4): mount failed
[   33.151949][ T3470] tipc: Resetting bearer <eth:syzkaller0>
[   33.168539][ T3470] tipc: Disabling bearer <eth:syzkaller0>
[   33.245097][    C0] hrtimer: interrupt took 37576 ns
[   33.299295][ T3483] Zero length message leads to an empty skb
[   33.299328][ T3484] loop1: detected capacity change from 0 to 128
[   33.315168][ T3486] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.381200][ T3494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19'.
[   33.512953][ T3504] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.113383][ T3517] loop3: detected capacity change from 0 to 2048
[   34.133882][ T3517] EXT4-fs: Ignoring removed bh option
[   34.256889][ T3517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.543111][ T3523] binfmt_misc: register: failed to install interpreter file ./file0
[   34.822387][ T3529] SELinux:  policydb magic number 0x6f6d656d does not match expected magic number 0xf97cff8c
[   34.832860][ T3529] SELinux: failed to load policy
[   34.846383][   T51] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   34.866784][   T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   34.879155][   T51] EXT4-fs (loop3): This should not happen!! Data will be lost
[   34.879155][   T51] 
[   34.888833][   T51] EXT4-fs (loop3): Total free blocks count 0
[   34.894880][   T51] EXT4-fs (loop3): Free/Dirty block details
[   34.900842][   T51] EXT4-fs (loop3): free_blocks=2415919104
[   34.906614][   T51] EXT4-fs (loop3): dirty_blocks=8224
[   34.911920][   T51] EXT4-fs (loop3): Block reservation details
[   34.918160][   T51] EXT4-fs (loop3): i_reserved_data_blocks=514
[   34.942308][ T3412] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[   35.009782][ T3539] SELinux:  Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped).
[   35.189866][ T3544] loop3: detected capacity change from 0 to 128
[   35.196545][ T3544] =======================================================
[   35.196545][ T3544] WARNING: The mand mount option has been deprecated and
[   35.196545][ T3544]          and is ignored by this kernel. Remove the mand
[   35.196545][ T3544]          option from the mount to silence this warning.
[   35.196545][ T3544] =======================================================
[   35.239872][ T3544] EXT4-fs: test_dummy_encryption option not supported
[   35.647565][ T3551] pim6reg: entered allmulticast mode
[   35.680048][ T3554] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[   35.748040][ T3559] loop4: detected capacity change from 0 to 8192
[   35.764735][ T3560] bond1: entered promiscuous mode
[   35.770041][ T3560] bond1: entered allmulticast mode
[   35.775670][ T3560] 8021q: adding VLAN 0 to HW filter on device bond1
[   35.785376][ T3560] bond1 (unregistering): Released all slaves
[   36.318936][ T3577] loop4: detected capacity change from 0 to 128
[   36.590243][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.626397][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.667456][ T3588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.693093][ T3588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.896189][   T29] kauditd_printk_skb: 515 callbacks suppressed
[   36.896206][   T29] audit: type=1400 audit(1743570225.222:635): avc:  denied  { getopt } for  pid=3576 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.015712][ T3594] loop0: detected capacity change from 0 to 1024
[   37.081415][ T3594] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   37.092440][ T3594] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   37.174906][ T3594] JBD2: no valid journal superblock found
[   37.180743][ T3594] EXT4-fs (loop0): Could not load journal inode
[   37.281109][   T29] audit: type=1400 audit(1743570225.582:636): avc:  denied  { create } for  pid=3599 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.300566][   T29] audit: type=1400 audit(1743570225.582:637): avc:  denied  { bind } for  pid=3599 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.320304][   T29] audit: type=1400 audit(1743570225.582:638): avc:  denied  { listen } for  pid=3599 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.340127][   T29] audit: type=1400 audit(1743570225.582:639): avc:  denied  { connect } for  pid=3599 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.359614][   T29] audit: type=1400 audit(1743570225.582:640): avc:  denied  { write } for  pid=3599 comm="syz.2.51" path="socket:[3860]" dev="sockfs" ino=3860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.382874][   T29] audit: type=1400 audit(1743570225.582:641): avc:  denied  { accept } for  pid=3599 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.403091][   T29] audit: type=1400 audit(1743570225.582:642): avc:  denied  { read } for  pid=3599 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.503581][ T3613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3613 comm=syz.0.54
[   37.516004][ T3613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3613 comm=syz.0.54
[   37.532126][ T3613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.540977][ T3613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.519512][   T29] audit: type=1400 audit(1743570226.852:643): avc:  denied  { create } for  pid=3624 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   38.581797][ T3613] batman_adv: batadv0: Adding interface: dummy0
[   38.588283][ T3613] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.643178][ T3613] batman_adv: batadv0: Interface activated: dummy0
[   38.718364][ T3637] loop4: detected capacity change from 0 to 2048
[   38.786806][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.817854][ T3651] loop3: detected capacity change from 0 to 2048
[   38.835201][   T29] audit: type=1400 audit(1743570227.162:644): avc:  denied  { create } for  pid=3636 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   38.856776][ T3651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.884322][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.398986][ T3703] smc: net device bond0 applied user defined pnetid SYZ0
[   39.448025][ T3693] syz.3.58 (3693) used greatest stack depth: 10368 bytes left
[   39.491428][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.013872][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.033261][ T3754] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   40.042223][ T3754] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   40.044686][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.051036][ T3754] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   40.072056][ T3754] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   40.073695][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.083206][ T3754] geneve2: entered promiscuous mode
[   40.098446][ T3754] geneve2: entered allmulticast mode
[   40.102968][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.116801][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.129633][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.152130][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.164908][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3756 comm=syz.1.67
[   40.380906][ T3759] Set syz1 is full, maxelem 65536 reached
[   40.454178][ T3765] loop0: detected capacity change from 0 to 512
[   40.473274][ T3765] EXT4-fs: test_dummy_encryption option not supported
[   41.241092][ T3776] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   41.268768][ T3439] IPVS: starting estimator thread 0...
[   41.399060][ T3783] loop1: detected capacity change from 0 to 2048
[   41.420735][ T3783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.434036][ T3783] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.463625][ T3778] loop3: detected capacity change from 0 to 1024
[   41.477689][ T3780] IPVS: using max 2112 ests per chain, 105600 per kthread
[   41.539033][ T3798] loop4: detected capacity change from 0 to 512
[   41.553399][ T3778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.588092][ T3798] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   41.610854][ T3798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.654869][ T3722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set
[   41.657209][ T3798] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.81: corrupted inode contents
[   41.682662][ T3798] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.81: mark_inode_dirty error
[   41.685019][ T3809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'.
[   41.694168][ T3798] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.81: corrupted inode contents
[   41.732779][ T3722] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 404 with error 117
[   41.745463][ T3722] EXT4-fs (loop1): This should not happen!! Data will be lost
[   41.745463][ T3722] 
[   41.807446][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.862931][ T3730] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 420 with max blocks 1 with error 117
[   41.875501][ T3730] EXT4-fs (loop1): This should not happen!! Data will be lost
[   41.875501][ T3730] 
[   41.938057][ T3825] netlink: 156 bytes leftover after parsing attributes in process `syz.0.87'.
[   42.003633][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.259059][   T29] kauditd_printk_skb: 184 callbacks suppressed
[   42.259078][   T29] audit: type=1326 audit(1743570230.582:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.288474][   T29] audit: type=1326 audit(1743570230.582:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.311528][   T29] audit: type=1326 audit(1743570230.582:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.334835][   T29] audit: type=1326 audit(1743570230.582:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.358072][   T29] audit: type=1326 audit(1743570230.582:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.571838][ T3847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.90'.
[   42.660883][ T3783] syz.1.76 (3783) used greatest stack depth: 7128 bytes left
[   42.752795][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.841941][   T29] audit: type=1326 audit(1743570230.802:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc28b85fa25 code=0x7ffc0000
[   42.865458][   T29] audit: type=1326 audit(1743570230.802:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.888828][   T29] audit: type=1326 audit(1743570230.802:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3838 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   42.912096][   T29] audit: type=1400 audit(1743570230.942:837): avc:  denied  { ioctl } for  pid=3848 comm="syz.2.91" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   42.936600][   T29] audit: type=1326 audit(1743570230.972:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   43.073188][ T3861] gre1: entered allmulticast mode
[   43.081892][ T3861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'.
[   43.152402][ T3865] loop0: detected capacity change from 0 to 256
[   43.167933][ T3862] loop4: detected capacity change from 0 to 2048
[   43.177412][ T3865] FAT-fs (loop0): codepage cp936 not found
[   43.190249][ T1038] IPVS: starting estimator thread 0...
[   43.200152][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.336969][ T3872] IPVS: using max 1632 ests per chain, 81600 per kthread
[   43.391660][ T3862] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   43.533696][ T3876] GUP no longer grows the stack in syz.3.98 (3876): 200000004000-20000000a000 (200000002000)
[   43.545043][ T3876] CPU: 0 UID: 0 PID: 3876 Comm: syz.3.98 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(voluntary) 
[   43.545077][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   43.545110][ T3876] Call Trace:
[   43.545117][ T3876]  <TASK>
[   43.545124][ T3876]  dump_stack_lvl+0xf6/0x150
[   43.545190][ T3876]  dump_stack+0x15/0x1a
[   43.545209][ T3876]  __get_user_pages+0x1dc1/0x2340
[   43.545250][ T3876]  get_user_pages_remote+0x1f4/0x800
[   43.545284][ T3876]  __access_remote_vm+0x160/0x590
[   43.545393][ T3876]  access_remote_vm+0x34/0x50
[   43.545413][ T3876]  proc_pid_cmdline_read+0x3fd/0x720
[   43.545482][ T3876]  vfs_readv+0x3e5/0x660
[   43.545507][ T3876]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[   43.545624][ T3876]  __x64_sys_preadv+0xf9/0x1c0
[   43.545664][ T3876]  x64_sys_call+0x1410/0x2e10
[   43.545689][ T3876]  do_syscall_64+0xc9/0x1c0
[   43.545716][ T3876]  ? clear_bhb_loop+0x25/0x80
[   43.545742][ T3876]  ? clear_bhb_loop+0x25/0x80
[   43.545812][ T3876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.545839][ T3876] RIP: 0033:0x7f242bfad169
[   43.545855][ T3876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.545873][ T3876] RSP: 002b:00007f242a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   43.545896][ T3876] RAX: ffffffffffffffda RBX: 00007f242c1c5fa0 RCX: 00007f242bfad169
[   43.545912][ T3876] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004
[   43.545926][ T3876] RBP: 00007f242c02e2a0 R08: 00000000fffffff9 R09: 0000000000000000
[   43.545938][ T3876] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000
[   43.545950][ T3876] R13: 0000000000000000 R14: 00007f242c1c5fa0 R15: 00007ffdd9148b68
[   43.545974][ T3876]  </TASK>
[   43.776781][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   43.786804][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.800295][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   43.912204][ T3881] smc: net device bond0 erased user defined pnetid SYZ0
[   43.929455][ T3883] loop4: detected capacity change from 0 to 8192
[   44.061906][ T3892] loop3: detected capacity change from 0 to 8192
[   44.139383][ T3898] Cannot find set identified by id 0 to match
[   44.160992][ T3893] loop0: detected capacity change from 0 to 512
[   44.164340][ T3901] loop1: detected capacity change from 0 to 256
[   44.218911][ T3905] sd 0:0:1:0: device reset
[   44.259015][ T3893] EXT4-fs (loop0): too many log groups per flexible block group
[   44.269374][ T3893] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   44.278209][ T3893] EXT4-fs (loop0): mount failed
[   44.374030][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[   44.422965][ T3915] loop0: detected capacity change from 0 to 2048
[   44.448689][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.584108][ T3921] selinux_netlink_send: 39 callbacks suppressed
[   44.584185][ T3921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3921 comm=syz.1.116
[   44.744502][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.821818][ T3931] loop0: detected capacity change from 0 to 128
[   44.940999][ T3929] SET target dimension over the limit!
[   45.127781][ T3939] SELinux: security_context_str_to_sid () failed with errno=-22
[   45.151360][ T3939] xt_CT: You must specify a L4 protocol and not use inversions on it
[   45.582753][ T3951] loop0: detected capacity change from 0 to 1024
[   45.597920][ T3951] EXT4-fs: Ignoring removed orlov option
[   45.782820][ T3951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.897618][ T3968] loop2: detected capacity change from 0 to 512
[   45.910811][ T3968] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.946659][ T3968] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   45.958369][ T3968] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it
[   45.968497][ T3968] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.130: Corrupt directory, running e2fsck is recommended
[   46.035235][ T3968] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   46.100957][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'.
[   46.100963][ T3968] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.130: corrupted in-inode xattr: invalid ea_ino
[   46.125242][ T3968] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.130: couldn't read orphan inode 15 (err -117)
[   46.162042][ T3968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.280694][ T3978] netlink: 'syz.1.131': attribute type 10 has an invalid length.
[   46.292649][ T3978] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.368319][ T3980] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   46.379934][ T3980] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it
[   46.390171][ T3980] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.130: Corrupt directory, running e2fsck is recommended
[   46.416830][ T3978] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   46.417600][ T3982] futex_wake_op: syz.4.132 tries to shift op by -1; fix this program
[   46.454705][ T3980] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   46.466405][ T3980] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it
[   46.476565][ T3980] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.130: Corrupt directory, running e2fsck is recommended
[   46.562567][ T3985] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   46.574192][ T3985] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it
[   46.584322][ T3985] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.130: Corrupt directory, running e2fsck is recommended
[   46.684735][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.722309][ T3987] loop3: detected capacity change from 0 to 512
[   46.777770][ T3987] EXT4-fs: Ignoring removed mblk_io_submit option
[   46.784968][ T3987] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   46.798159][ T3987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   46.841857][ T3987] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   46.858277][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.865385][ T3987] EXT4-fs (loop3): 1 truncate cleaned up
[   46.875239][ T3987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.914604][ T3987] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   46.931150][ T3987] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   46.998702][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.045465][ T3999] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   47.270833][   T29] kauditd_printk_skb: 446 callbacks suppressed
[   47.270851][   T29] audit: type=1326 audit(1743570235.602:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.336657][   T29] audit: type=1326 audit(1743570235.642:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.360063][   T29] audit: type=1326 audit(1743570235.642:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.383418][   T29] audit: type=1326 audit(1743570235.642:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.406769][   T29] audit: type=1326 audit(1743570235.642:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.430202][   T29] audit: type=1326 audit(1743570235.642:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.453580][   T29] audit: type=1326 audit(1743570235.642:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.477113][   T29] audit: type=1326 audit(1743570235.642:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.500595][   T29] audit: type=1326 audit(1743570235.642:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.524015][   T29] audit: type=1326 audit(1743570235.642:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f242bfad169 code=0x7ffc0000
[   47.657880][ T4015] loop3: detected capacity change from 0 to 512
[   47.686037][ T4017] loop4: detected capacity change from 0 to 512
[   47.700789][ T4015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.737298][ T4017] loop4: detected capacity change from 0 to 128
[   47.782947][ T4015] EXT4-fs (loop3): 1 truncate cleaned up
[   47.796618][ T4015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.991907][ T4012] macsec1: entered promiscuous mode
[   47.997236][ T4012] veth1_to_batadv: entered promiscuous mode
[   48.411035][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.794618][ T4039] loop4: detected capacity change from 0 to 512
[   49.810630][ T4039] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   49.981419][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'.
[   50.054685][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'.
[   50.184312][ T4048] loop4: detected capacity change from 0 to 2048
[   50.219198][ T4048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.359491][ T4048] netlink: 'syz.4.151': attribute type 4 has an invalid length.
[   50.411906][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.431417][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   50.448710][ T4055] bridge_slave_1 (unregistering): left allmulticast mode
[   50.455825][ T4055] bridge_slave_1 (unregistering): left promiscuous mode
[   50.462898][ T4055] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.471402][ T4053] loop3: detected capacity change from 0 to 8192
[   51.567796][   T36] Process accounting resumed
[   51.992484][ T4077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'.
[   52.001491][ T4077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'.
[   52.314356][   T29] kauditd_printk_skb: 119 callbacks suppressed
[   52.314373][   T29] audit: type=1326 audit(1743570240.642:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.369327][ T3993] syz.2.136 (3993) used greatest stack depth: 6896 bytes left
[   52.379731][   T29] audit: type=1326 audit(1743570240.682:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.404031][ T4080] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   52.410614][ T4080] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   52.418349][ T4080] vhci_hcd vhci_hcd.0: Device attached
[   52.436021][   T29] audit: type=1326 audit(1743570240.762:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.459405][   T29] audit: type=1326 audit(1743570240.762:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.482969][   T29] audit: type=1326 audit(1743570240.762:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.506350][   T29] audit: type=1326 audit(1743570240.762:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.529884][   T29] audit: type=1326 audit(1743570240.762:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.553243][   T29] audit: type=1326 audit(1743570240.762:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.555879][ T4076] loop0: detected capacity change from 0 to 2048
[   52.576677][   T29] audit: type=1326 audit(1743570240.762:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.606372][   T29] audit: type=1326 audit(1743570240.762:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   52.722068][ T3380] usb 9-1: new high-speed USB device number 2 using vhci_hcd
[   52.797864][ T4076]  loop0: p1 < > p4
[   52.810895][ T4076] loop0: p4 size 8388608 extends beyond EOD, truncated
[   53.230807][ T4081] vhci_hcd: connection reset by peer
[   53.237669][ T3730] vhci_hcd: stop threads
[   53.242010][ T3730] vhci_hcd: release socket
[   53.246547][ T3730] vhci_hcd: disconnect device
[   53.430047][ T4102] loop0: detected capacity change from 0 to 128
[   53.644029][ T4103] syz.0.165: attempt to access beyond end of device
[   53.644029][ T4103] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[   53.672151][ T4103] syz.0.165: attempt to access beyond end of device
[   53.672151][ T4103] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128
[   53.691932][ T4110] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   53.755110][ T4110] ipvlan0: entered allmulticast mode
[   53.760511][ T4110] veth0_vlan: entered allmulticast mode
[   53.783271][ T4110] team0: Device ipvlan0 failed to register rx_handler
[   53.792105][ T4103] syz.0.165: attempt to access beyond end of device
[   53.792105][ T4103] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   53.814611][ T4110] xt_CT: You must specify a L4 protocol and not use inversions on it
[   53.816247][ T4103] syz.0.165: attempt to access beyond end of device
[   53.816247][ T4103] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   53.863580][ T4110] loop1: detected capacity change from 0 to 164
[   53.909064][ T4110] process 'syz.1.168' launched '/dev/fd/11' with NULL argv: empty string added
[   53.925509][ T4110] syz.1.168: attempt to access beyond end of device
[   53.925509][ T4110] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   53.956324][ T4110] syz.1.168: attempt to access beyond end of device
[   53.956324][ T4110] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[   53.971825][ T4118] SELinux: security_context_str_to_sid (u) failed with errno=-22
[   54.025423][ T4122] loop2: detected capacity change from 0 to 736
[   54.068843][ T4122] Symlink component flag not implemented
[   54.082851][ T4122] Symlink component flag not implemented (122)
[   54.208104][ T4129] loop3: detected capacity change from 0 to 4096
[   54.227826][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.270698][ T4133] loop2: detected capacity change from 0 to 512
[   54.277805][ T4133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   54.289383][ T4133] EXT4-fs (loop2): 1 truncate cleaned up
[   54.295653][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.339631][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.661813][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'.
[   54.681053][ T4146] loop4: detected capacity change from 0 to 1024
[   54.695518][ T4146] EXT4-fs: Ignoring removed oldalloc option
[   54.710602][ T4150] bond1: entered promiscuous mode
[   54.715726][ T4150] bond1: entered allmulticast mode
[   54.723874][ T4150] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.768515][ T4146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.791005][ T4146] syz.4.181 uses obsolete (PF_INET,SOCK_PACKET)
[   54.891576][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.965415][ T4159] loop1: detected capacity change from 0 to 8192
[   54.983787][ T4159] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   55.083901][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.363417][ T4170] loop0: detected capacity change from 0 to 512
[   55.412007][ T4170] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.186: bg 0: block 248: padding at end of block bitmap is not set
[   55.438047][ T4170] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.186: Failed to acquire dquot type 1
[   55.460411][ T4166] cgroup2: Unknown parameter 'cpuacct'
[   55.466111][ T4170] EXT4-fs (loop0): 1 truncate cleaned up
[   55.477955][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.526276][ T4170] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.587711][ T4170] tipc: Enabled bearer <ib:wg2>, priority 10
[   55.629840][ T4182] loop2: detected capacity change from 0 to 512
[   55.663972][ T4170] hub 4-0:1.0: USB hub found
[   55.679207][ T4170] hub 4-0:1.0: 8 ports detected
[   55.685297][ T4182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.190: bg 0: block 248: padding at end of block bitmap is not set
[   55.738220][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.748501][ T4182] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.190: Failed to acquire dquot type 1
[   55.757169][ T3718] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1
[   55.773189][ T4182] EXT4-fs (loop2): 1 truncate cleaned up
[   55.793469][ T4182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.808627][ T4182] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.832050][ T4182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4182 comm=syz.2.190
[   55.858330][ T4187] SELinux: syz.0.191 (4187) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   55.880594][ T4182] hub 4-0:1.0: USB hub found
[   55.885342][ T4182] hub 4-0:1.0: 8 ports detected
[   55.920841][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[   55.935379][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.948486][ T3730] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1
[   56.040503][ T4192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.192'.
[   56.049685][ T4192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.192'.
[   56.074337][ T4192] xt_hashlimit: max too large, truncated to 1048576
[   56.093885][ T4192] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.108993][ T4192] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98
[   56.161105][ T4198] tipc: Started in network mode
[   56.166343][ T4198] tipc: Node identity ac14140f, cluster identity 4711
[   56.173493][ T4198] tipc: New replicast peer: 255.255.255.255
[   56.179900][ T4198] tipc: Enabled bearer <udp:syz2>, priority 10
[   56.348918][ T4210] bridge_slave_0: left allmulticast mode
[   56.354663][ T4210] bridge_slave_0: left promiscuous mode
[   56.360546][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.370907][ T4210] bridge_slave_1: left allmulticast mode
[   56.376787][ T4210] bridge_slave_1: left promiscuous mode
[   56.382567][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.501367][ T4210] bond0: (slave bond_slave_0): Releasing backup interface
[   56.523401][ T4210] bond0: (slave bond_slave_1): Releasing backup interface
[   56.586239][ T3378] tipc: Node number set to 3088064892
[   56.593087][ T4210] team0: Port device team_slave_0 removed
[   56.642126][ T4210] team0: Port device team_slave_1 removed
[   56.700453][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.707984][ T4210] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.792016][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.799602][ T4210] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.947410][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   56.999383][ T4230] 8021q: VLANs not supported on ip_vti0
[   57.023823][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'.
[   57.050900][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'.
[   57.685459][ T3378] tipc: Node number set to 2886997007
[   57.738332][   T29] kauditd_printk_skb: 700 callbacks suppressed
[   57.738348][   T29] audit: type=1326 audit(1743570246.072:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   57.886192][ T3380] vhci_hcd: vhci_device speed not set
[   57.900649][   T29] audit: type=1326 audit(1743570246.102:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   57.924113][   T29] audit: type=1326 audit(1743570246.102:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   57.947580][   T29] audit: type=1326 audit(1743570246.102:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   57.971389][   T29] audit: type=1326 audit(1743570246.102:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   57.994883][   T29] audit: type=1326 audit(1743570246.102:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   58.018335][   T29] audit: type=1326 audit(1743570246.102:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   58.041698][   T29] audit: type=1326 audit(1743570246.102:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   58.065216][   T29] audit: type=1326 audit(1743570246.102:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   58.088815][   T29] audit: type=1326 audit(1743570246.112:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   58.190146][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   58.277394][ T4264] loop0: detected capacity change from 0 to 1024
[   58.287765][ T4264] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   58.297678][ T4264] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   58.317233][ T4264] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   58.328875][ T4264] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.220: unexpected bad inode w/o EXT4_IGET_BAD
[   58.342462][ T4264] EXT4-fs (loop0): no journal found
[   58.347775][ T4264] EXT4-fs (loop0): can't get journal size
[   58.355884][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   58.387302][ T4269] tipc: Started in network mode
[   58.388009][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.392252][ T4269] tipc: Node identity 3ac4aeab1af1, cluster identity 4711
[   58.392368][ T4269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.455475][ T4266] tipc: Resetting bearer <eth:syzkaller0>
[   58.485723][ T4266] tipc: Disabling bearer <eth:syzkaller0>
[   58.516663][ T4274] team0 (unregistering): Port device team_slave_0 removed
[   58.531387][ T4274] team0 (unregistering): Port device team_slave_1 removed
[   58.892257][ T4294] loop4: detected capacity change from 0 to 1024
[   58.904001][ T4294] EXT4-fs: Ignoring removed i_version option
[   58.950309][ T4294] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   59.115787][ T4298] loop0: detected capacity change from 0 to 2048
[   59.142949][ T4298] EXT4-fs: Ignoring removed mblk_io_submit option
[   59.244771][ T4302] bridge0: entered promiscuous mode
[   59.254759][ T4302] bridge0: port 3(macsec1) entered blocking state
[   59.261257][ T4302] bridge0: port 3(macsec1) entered disabled state
[   59.453806][ T4302] macsec1: entered allmulticast mode
[   59.459232][ T4302] bridge0: entered allmulticast mode
[   59.469378][ T4302] macsec1: left allmulticast mode
[   59.474477][ T4302] bridge0: left allmulticast mode
[   59.481235][ T4294] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.226: Invalid block bitmap block 0 in block_group 0
[   59.505840][ T4294] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.226: Failed to acquire dquot type 0
[   59.517363][ T4294] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.226: Freeing blocks not in datazone - block = 0, count = 4096
[   59.519834][ T4298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.531041][ T4302] bridge0: left promiscuous mode
[   59.553434][ T4294] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.226: Invalid inode bitmap blk 0 in block_group 0
[   59.570796][ T3722] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0
[   59.583747][ T4294] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   59.592980][ T4294] EXT4-fs (loop4): 1 orphan inode deleted
[   59.600368][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.651811][ T4298] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   59.701297][ T4311] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.231'.
[   59.711158][ T4310] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.231'.
[   59.733345][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.735153][ T4317] loop3: detected capacity change from 0 to 512
[   59.758996][ T4317] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   59.769785][ T4317] netlink: 'syz.3.232': attribute type 27 has an invalid length.
[   59.908909][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.007529][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.014775][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.219645][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'.
[   60.221854][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.239291][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.299916][ T4317] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.308657][ T4341] deleting an unspecified loop device is not supported.
[   60.309086][ T4317] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.324822][ T4317] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.333754][ T4317] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.350094][ T4317] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.359256][ T4317] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.368338][ T4317] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.377622][ T4317] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   60.395927][ T4317] geneve2: left promiscuous mode
[   60.401134][ T4317] geneve2: left allmulticast mode
[   60.408725][ T4317] gre1: left allmulticast mode
[   60.415555][ T4343] netlink: 'syz.0.243': attribute type 3 has an invalid length.
[   60.458527][ T4343] netlink: 'syz.0.243': attribute type 3 has an invalid length.
[   60.477011][ T4343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'.
[   60.494363][ T4348] SELinux: failed to load policy
[   60.522384][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'.
[   60.575756][ T4352] Set syz1 is full, maxelem 65536 reached
[   60.610880][ T4359] bridge_slave_1: left allmulticast mode
[   60.620020][ T4359] bridge_slave_1: left promiscuous mode
[   60.627272][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.642448][ T4359] bridge_slave_0: left allmulticast mode
[   60.649235][ T4359] bridge_slave_0: left promiscuous mode
[   60.655854][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.674013][ T4364] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   60.894176][ T4371] netlink: 140 bytes leftover after parsing attributes in process `syz.2.255'.
[   60.982812][ T4375] netlink: 'syz.1.256': attribute type 4 has an invalid length.
[   61.389317][ T4392] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[   61.566680][ T4402] lo speed is unknown, defaulting to 1000
[   61.586521][ T4402] lo speed is unknown, defaulting to 1000
[   61.603552][ T4402] lo speed is unknown, defaulting to 1000
[   61.668074][ T4390] Cannot find set identified by id 0 to match
[   61.719286][ T4402] infiniband s
z1: set down
[   61.723831][ T4402] infiniband s
z1: added lo
[   61.728515][ T3378] lo speed is unknown, defaulting to 1000
[   61.765949][ T4402] RDS/IB: s
z1: added
[   61.782850][ T4402] smc: adding ib device s
z1 with port count 1
[   61.797283][ T4422] ªªªªªª: renamed from vlan0 (while UP)
[   61.797910][ T4402] smc:    ib device s
z1 port 1 has pnetid 
[   61.811694][ T3378] lo speed is unknown, defaulting to 1000
[   61.829976][ T4402] lo speed is unknown, defaulting to 1000
[   61.913822][ T4402] lo speed is unknown, defaulting to 1000
[   61.985328][ T4402] lo speed is unknown, defaulting to 1000
[   62.037216][ T4402] lo speed is unknown, defaulting to 1000
[   62.093814][ T4402] lo speed is unknown, defaulting to 1000
[   62.118568][ T4438] x_tables: duplicate underflow at hook 3
[   62.142841][ T4440] sd 0:0:1:0: device reset
[   62.567723][ T4453] team0 (unregistering): Port device team_slave_0 removed
[   62.606010][ T4453] team0 (unregistering): Port device team_slave_1 removed
[   62.831401][   T29] kauditd_printk_skb: 267 callbacks suppressed
[   62.831420][   T29] audit: type=1326 audit(1743570251.162:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   62.914685][   T29] audit: type=1326 audit(1743570251.162:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   62.938251][   T29] audit: type=1326 audit(1743570251.192:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   62.961749][   T29] audit: type=1326 audit(1743570251.192:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   62.985166][   T29] audit: type=1326 audit(1743570251.192:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   63.008662][   T29] audit: type=1326 audit(1743570251.192:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   63.032138][   T29] audit: type=1326 audit(1743570251.192:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   63.055547][   T29] audit: type=1326 audit(1743570251.192:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   63.079192][   T29] audit: type=1326 audit(1743570251.192:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   63.102596][   T29] audit: type=1326 audit(1743570251.192:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   63.110755][ T4475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'.
[   63.202802][ T4469] loop3: detected capacity change from 0 to 1024
[   63.266622][ T4469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.341097][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.378410][ T4493] lo speed is unknown, defaulting to 1000
[   63.547184][ T4504] SELinux:  Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped).
[   63.702500][ T4510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.748121][ T4512] loop4: detected capacity change from 0 to 256
[   63.767522][ T4515] loop3: detected capacity change from 0 to 2048
[   63.774816][ T4512] FAT-fs (loop4): Directory bread(block 64) failed
[   63.783016][ T4512] FAT-fs (loop4): Directory bread(block 65) failed
[   63.790669][ T4512] FAT-fs (loop4): Directory bread(block 66) failed
[   63.798886][ T4512] FAT-fs (loop4): Directory bread(block 67) failed
[   63.805518][ T4512] FAT-fs (loop4): Directory bread(block 68) failed
[   63.812522][ T4512] FAT-fs (loop4): Directory bread(block 69) failed
[   63.820185][ T4512] FAT-fs (loop4): Directory bread(block 70) failed
[   63.827196][ T4512] FAT-fs (loop4): Directory bread(block 71) failed
[   63.833830][ T4512] FAT-fs (loop4): Directory bread(block 72) failed
[   63.841918][ T4512] FAT-fs (loop4): Directory bread(block 73) failed
[   63.915311][ T4510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.016572][ T4510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.040513][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.306'.
[   64.070872][ T4519] lo speed is unknown, defaulting to 1000
[   64.121282][ T4515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.159754][ T4510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.248001][ T4515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.305: bg 0: block 234: padding at end of block bitmap is not set
[   64.302732][ T4515] EXT4-fs (loop3): Remounting filesystem read-only
[   64.317960][ T4510] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.352273][ T4510] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.373153][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.381189][ T4527] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[   64.391227][ T4510] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.419150][ T4527] rdma_rxe: rxe_newlink: failed to add lo
[   64.514802][ T4510] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.573015][ T4532] bond1: entered promiscuous mode
[   64.578247][ T4532] bond1: entered allmulticast mode
[   64.609303][ T4532] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.628922][ T4532] bond1 (unregistering): Released all slaves
[   64.651618][ T4541] loop4: detected capacity change from 0 to 512
[   64.667176][ T4541] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.676281][ T4539] x_tables: duplicate underflow at hook 1
[   64.686457][ T4541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   64.728627][ T4541] EXT4-fs (loop4): 1 truncate cleaned up
[   64.734801][ T4541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.840719][ T4551] netlink: 'syz.1.320': attribute type 10 has an invalid length.
[   64.852356][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.050059][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'.
[   65.439206][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'.
[   65.448188][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'.
[   65.462520][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[   65.472422][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.483899][ T4571] dummy0: entered promiscuous mode
[   65.490786][ T4571] dummy0: left promiscuous mode
[   65.763898][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'.
[   66.508307][ T4608] loop3: detected capacity change from 0 to 1024
[   66.523716][ T4608] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   66.534865][ T4608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   66.610015][ T4608] JBD2: no valid journal superblock found
[   66.615825][ T4608] EXT4-fs (loop3): Could not load journal inode
[   66.893064][ T4613] loop3: detected capacity change from 0 to 2048
[   67.118717][ T4617] lo speed is unknown, defaulting to 1000
[   67.418152][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.563467][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.637865][ T4625] smc: net device bond0 applied user defined pnetid SYZ0
[   67.738387][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'.
[   67.802295][ T4627] loop3: detected capacity change from 0 to 512
[   67.825402][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'.
[   67.857793][ T4630] loop4: detected capacity change from 0 to 512
[   67.864131][ T4627] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[   67.893497][ T4630] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   67.915358][   T29] kauditd_printk_skb: 342 callbacks suppressed
[   67.915374][   T29] audit: type=1400 audit(1743570256.242:2744): avc:  denied  { setopt } for  pid=4636 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.964061][   T29] audit: type=1400 audit(1743570256.282:2745): avc:  denied  { connect } for  pid=4636 comm="syz.1.356" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.984558][   T29] audit: type=1326 audit(1743570256.282:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.1.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x0
[   68.131972][   T29] audit: type=1326 audit(1743570256.462:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.154904][   T29] audit: type=1326 audit(1743570256.462:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.177891][   T29] audit: type=1326 audit(1743570256.462:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.200667][   T29] audit: type=1326 audit(1743570256.462:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.223510][   T29] audit: type=1326 audit(1743570256.462:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.246329][   T29] audit: type=1326 audit(1743570256.462:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.269335][   T29] audit: type=1326 audit(1743570256.462:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f46f2a0d169 code=0x7ffc0000
[   68.294273][ T4639] loop3: detected capacity change from 0 to 1024
[   69.149690][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'.
[   69.283807][ T4673] lo speed is unknown, defaulting to 1000
[   69.435052][ T4678] loop3: detected capacity change from 0 to 512
[   69.458260][ T4678] EXT4-fs (loop3): too many log groups per flexible block group
[   69.466028][ T4678] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   69.473011][ T4678] EXT4-fs (loop3): mount failed
[   69.516788][ T4682] netlink: 'syz.2.362': attribute type 13 has an invalid length.
[   69.619038][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.626459][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.810996][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.860479][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.924775][ T4682] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.933773][ T4682] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.942749][ T4682] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.951759][ T4682] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.021134][ T4697] lo speed is unknown, defaulting to 1000
[   70.379209][ T4699] lo speed is unknown, defaulting to 1000
[   70.895973][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'.
[   71.191255][ T4714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.382'.
[   71.266759][ T4718] vlan0: entered allmulticast mode
[   71.362781][ T4724] lo speed is unknown, defaulting to 1000
[   71.402454][ T4725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.376'.
[   72.200333][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'.
[   72.240649][ T4730] lo speed is unknown, defaulting to 1000
[   72.538893][ T4759] lo speed is unknown, defaulting to 1000
[   72.840177][ T4765] lo speed is unknown, defaulting to 1000
[   72.943540][ T4767] SET target dimension over the limit!
[   73.467215][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[   73.703876][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'.
[   73.751197][ T4781] loop4: detected capacity change from 0 to 512
[   73.852057][ T4781] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   74.318693][   T29] kauditd_printk_skb: 562 callbacks suppressed
[   74.318712][   T29] audit: type=1400 audit(1743570262.652:3316): avc:  denied  { mount } for  pid=4806 comm="syz.1.401" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   74.410472][ T4811] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.402'.
[   74.421483][ T4809] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.402'.
[   74.434477][   T29] audit: type=1326 audit(1743570262.762:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   74.484394][   T29] audit: type=1326 audit(1743570262.762:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   74.507899][   T29] audit: type=1326 audit(1743570262.792:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   74.531311][   T29] audit: type=1326 audit(1743570262.792:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   74.554677][   T29] audit: type=1326 audit(1743570262.792:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   74.637709][   T29] audit: type=1326 audit(1743570262.912:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.2.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f2a0d169 code=0x0
[   74.660616][   T29] audit: type=1326 audit(1743570262.912:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   74.684183][   T29] audit: type=1326 audit(1743570262.912:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   74.707532][   T29] audit: type=1326 audit(1743570262.912:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   74.754540][ T4818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[   74.817608][ T4823] lo speed is unknown, defaulting to 1000
[   74.858756][ T4826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.408'.
[   74.867798][ T4826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.408'.
[   74.879781][ T4826] xt_hashlimit: max too large, truncated to 1048576
[   74.887184][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'.
[   74.935171][ T4826] siw: device registration error -23
[   74.993141][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'.
[   75.366204][ T4841] lo speed is unknown, defaulting to 1000
[   76.904632][ T4853] loop4: detected capacity change from 0 to 1024
[   79.558418][ T4884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'.
[   79.591180][ T4880] loop3: detected capacity change from 0 to 512
[   79.597603][   T29] kauditd_printk_skb: 330 callbacks suppressed
[   79.597618][   T29] audit: type=1326 audit(1743570267.922:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.619219][ T4880] ext4: Unknown parameter 'dont_measure'
[   79.627202][   T29] audit: type=1326 audit(1743570267.922:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.656352][   T29] audit: type=1326 audit(1743570267.922:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.679739][   T29] audit: type=1326 audit(1743570267.922:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.703133][   T29] audit: type=1326 audit(1743570267.922:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.717055][ T4891] lo speed is unknown, defaulting to 1000
[   79.726472][   T29] audit: type=1326 audit(1743570267.922:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.755572][   T29] audit: type=1326 audit(1743570267.922:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.761526][ T4883] SET target dimension over the limit!
[   79.779008][   T29] audit: type=1326 audit(1743570267.922:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.807814][   T29] audit: type=1326 audit(1743570267.922:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.831279][   T29] audit: type=1326 audit(1743570267.922:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28b82d169 code=0x7ffc0000
[   79.910186][ T4899] rdma_rxe: rxe_newlink: failed to add lo
[   79.957307][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'.
[   79.969826][ T4897] loop3: detected capacity change from 0 to 512
[   79.999691][ T4897] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[   80.110751][ T4910] loop4: detected capacity change from 0 to 2048
[   80.152056][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.205434][ T4910] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.269949][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   80.295341][ T4918] loop3: detected capacity change from 0 to 1024
[   80.477253][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   81.143501][ T3730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set
[   81.204618][ T3730] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 474 with error 117
[   81.217250][ T3730] EXT4-fs (loop4): This should not happen!! Data will be lost
[   81.217250][ T3730] 
[   81.757297][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'.
[   81.988459][ T4910] syz.4.433 (4910) used greatest stack depth: 6312 bytes left
[   82.008919][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.219786][ T4948] rdma_rxe: rxe_newlink: failed to add lo
[   82.292410][ T4951] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   82.300881][ T4951] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   82.309302][ T4951] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   82.317637][ T4951] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   82.328882][ T4946] loop4: detected capacity change from 0 to 512
[   82.343905][ T4946] ext4: Unknown parameter 'dont_measure'
[   82.353003][ T4951] geneve2: entered promiscuous mode
[   82.358335][ T4951] geneve2: entered allmulticast mode
[   82.738834][ T4966] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.448'.
[   82.767784][ T4966] netlink: 14 bytes leftover after parsing attributes in process `syz.0.448'.
[   82.821919][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.840819][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.865960][ T4966] bond0 (unregistering): Released all slaves
[   82.951855][ T4973] loop4: detected capacity change from 0 to 512
[   82.984342][ T4976] lo speed is unknown, defaulting to 1000
[   83.230873][ T4973] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   83.548876][ T4990] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   83.558009][ T4990] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   83.566892][ T4990] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   83.575703][ T4990] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   83.586448][ T4990] geneve2: entered promiscuous mode
[   83.591859][ T4990] geneve2: entered allmulticast mode
[   83.631188][ T4976] loop3: detected capacity change from 0 to 128
[   83.636659][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'.
[   83.693716][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'.
[   83.726877][ T5002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.737365][ T5002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   83.752419][ T5007] 8021q: VLANs not supported on ip_vti0
[   83.808164][ T5002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.818636][ T5002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   83.840039][ T4976] syz.3.453: attempt to access beyond end of device
[   83.840039][ T4976] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128
[   83.895935][ T4976] syz.3.453: attempt to access beyond end of device
[   83.895935][ T4976] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[   83.913912][ T4976] syz.3.453: attempt to access beyond end of device
[   83.913912][ T4976] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   83.943148][ T4976] syz.3.453: attempt to access beyond end of device
[   83.943148][ T4976] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   83.947591][ T5002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.966685][ T5002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   84.033769][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'.
[   84.067688][ T5002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.078189][ T5002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   84.094179][ T5018] loop3: detected capacity change from 0 to 512
[   84.117954][ T5018] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[   84.137378][ T5002] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   84.145724][ T5002] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   84.158510][ T5002] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   84.166891][ T5002] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   84.181141][ T5002] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   84.189546][ T5002] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   84.215197][ T5002] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   84.223685][ T5002] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   84.267016][ T5026] lo speed is unknown, defaulting to 1000
[   84.472469][ T5035] loop4: detected capacity change from 0 to 1024
[   84.497119][ T5035] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   84.506995][ T5035] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   84.557328][ T5035] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   84.605067][ T5035] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.471: unexpected bad inode w/o EXT4_IGET_BAD
[   84.638512][ T5035] EXT4-fs (loop4): no journal found
[   84.643786][ T5035] EXT4-fs (loop4): can't get journal size
[   84.729639][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.796412][   T29] kauditd_printk_skb: 296 callbacks suppressed
[   84.796432][   T29] audit: type=1326 audit(1743570273.132:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafb0edbad0 code=0x7ffc0000
[   84.857311][   T29] audit: type=1326 audit(1743570273.132:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fafb0edbeb7 code=0x7ffc0000
[   84.880665][   T29] audit: type=1326 audit(1743570273.132:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafb0edbad0 code=0x7ffc0000
[   84.904295][   T29] audit: type=1326 audit(1743570273.132:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0edd169 code=0x7ffc0000
[   84.927734][   T29] audit: type=1326 audit(1743570273.142:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafb0edbad0 code=0x7ffc0000
[   84.951385][   T29] audit: type=1326 audit(1743570273.142:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafb0ede997 code=0x7ffc0000
[   84.974767][   T29] audit: type=1326 audit(1743570273.142:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb0edd169 code=0x7ffc0000
[   84.998152][   T29] audit: type=1326 audit(1743570273.142:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafb0ede997 code=0x7ffc0000
[   85.021577][   T29] audit: type=1326 audit(1743570273.142:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fafb0edbdca code=0x7ffc0000
[   85.044763][   T29] audit: type=1326 audit(1743570273.142:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb0edd169 code=0x7ffc0000
[   85.087720][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.184352][ T5044] __nla_validate_parse: 1 callbacks suppressed
[   85.184371][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'.
[   85.227405][ T5042] SELinux: security_context_str_to_sid () failed with errno=-22
[   85.253967][ T5044] loop3: detected capacity change from 0 to 512
[   85.379652][ T5044] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[   85.444674][ T5042] xt_CT: You must specify a L4 protocol and not use inversions on it
[   85.762972][ T5055] lo speed is unknown, defaulting to 1000
[   85.992471][ T5054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'.
[   86.255560][ T5059] macsec1: entered promiscuous mode
[   86.260924][ T5059] veth1_to_batadv: entered promiscuous mode
[   86.489751][ T5071] futex_wake_op: syz.0.492 tries to shift op by -1; fix this program
[   86.556824][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   86.610589][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'.
[   86.667223][ T3377] Process accounting resumed
[   87.027184][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'.
[   87.081908][ T5100] 8021q: VLANs not supported on ip_vti0
[   87.508804][ T5107] bond1: entered promiscuous mode
[   87.513937][ T5107] bond1: entered allmulticast mode
[   87.522081][ T5107] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.707975][ T5107] bond1 (unregistering): Released all slaves
[   87.725990][ T5109] lo speed is unknown, defaulting to 1000
[   88.280718][ T5119] futex_wake_op: syz.3.498 tries to shift op by -1; fix this program
[   88.592011][ T5140] loop4: detected capacity change from 0 to 128
[   88.598965][ T5140] EXT4-fs: test_dummy_encryption option not supported
[   88.809886][ T5148] bond1: entered promiscuous mode
[   88.814969][ T5148] bond1: entered allmulticast mode
[   88.820766][ T5148] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.839143][ T5148] bond1 (unregistering): Released all slaves
[   89.380716][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'.
[   89.395087][ T5156] futex_wake_op: syz.2.512 tries to shift op by -1; fix this program
[   89.404378][ T5151] loop3: detected capacity change from 0 to 512
[   89.440610][ T5151] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[   89.459604][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'.
[   89.540335][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'.
[   89.708494][ T5181] loop4: detected capacity change from 0 to 512
[   89.756059][ T5181] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   90.314326][ T5196] x_tables: duplicate underflow at hook 3
[   90.423978][   T29] kauditd_printk_skb: 325 callbacks suppressed
[   90.423992][   T29] audit: type=1326 audit(1743570278.752:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.488466][   T29] audit: type=1326 audit(1743570278.782:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.511993][   T29] audit: type=1326 audit(1743570278.782:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.535566][   T29] audit: type=1326 audit(1743570278.782:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.558991][   T29] audit: type=1326 audit(1743570278.782:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.582364][   T29] audit: type=1326 audit(1743570278.782:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.605972][   T29] audit: type=1326 audit(1743570278.782:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.629474][   T29] audit: type=1326 audit(1743570278.782:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.652933][   T29] audit: type=1326 audit(1743570278.782:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.676374][   T29] audit: type=1326 audit(1743570278.782:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13052cd169 code=0x7ffc0000
[   90.749123][ T5200] loop4: detected capacity change from 0 to 512
[   90.755786][ T5200] EXT4-fs: Ignoring removed mblk_io_submit option
[   90.779967][ T3733] ==================================================================
[   90.788125][ T3733] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[   90.795375][ T3733] 
[   90.797711][ T3733] read-write to 0xffff88810651cb48 of 8 bytes by task 3288 on cpu 1:
[   90.805794][ T3733]  __xa_set_mark+0xea/0x1c0
[   90.810332][ T3733]  __folio_mark_dirty+0x3b8/0x4e0
[   90.815391][ T3733]  mark_buffer_dirty+0x134/0x230
[   90.820353][ T3733]  block_page_mkwrite+0x295/0x3f0
[   90.825416][ T3733]  ext4_page_mkwrite+0x756/0xb90
[   90.830390][ T3733]  do_wp_page+0xe86/0x24e0
[   90.834842][ T3733]  handle_mm_fault+0xc6c/0x2e80
[   90.839726][ T3733]  exc_page_fault+0x3b9/0x6a0
[   90.844437][ T3733]  asm_exc_page_fault+0x26/0x30
[   90.849314][ T3733] 
[   90.851651][ T3733] read to 0xffff88810651cb48 of 8 bytes by task 3733 on cpu 0:
[   90.859209][ T3733]  xas_find_marked+0x21d/0x660
[   90.864012][ T3733]  find_get_entry+0x54/0x390
[   90.868650][ T3733]  filemap_get_folios_tag+0x13e/0x220
[   90.874065][ T3733]  mpage_prepare_extent_to_map+0x332/0xb80
[   90.879903][ T3733]  ext4_do_writepages+0x705/0x21d0
[   90.885046][ T3733]  ext4_writepages+0x183/0x320
[   90.889846][ T3733]  do_writepages+0x1d8/0x480
[   90.894461][ T3733]  __writeback_single_inode+0x89/0x850
[   90.899960][ T3733]  writeback_sb_inodes+0x458/0xa10
[   90.905111][ T3733]  __writeback_inodes_wb+0x9a/0x1a0
[   90.910347][ T3733]  wb_writeback+0x276/0x650
[   90.914879][ T3733]  wb_workfn+0x510/0x960
[   90.919142][ T3733]  process_scheduled_works+0x4de/0xa20
[   90.924638][ T3733]  worker_thread+0x52c/0x710
[   90.929251][ T3733]  kthread+0x4b7/0x540
[   90.933342][ T3733]  ret_from_fork+0x4b/0x60
[   90.937772][ T3733]  ret_from_fork_asm+0x1a/0x30
[   90.942552][ T3733] 
[   90.944886][ T3733] value changed: 0x8000080054038000 -> 0x8002180054138000
[   90.952006][ T3733] 
[   90.954346][ T3733] Reported by Kernel Concurrency Sanitizer on:
[   90.960513][ T3733] CPU: 0 UID: 0 PID: 3733 Comm: kworker/u8:16 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(voluntary) 
[   90.972872][ T3733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   90.982961][ T3733] Workqueue: writeback wb_workfn (flush-8:0)
[   90.988983][ T3733] ==================================================================
[   90.999806][ T5200] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   91.011382][ T5200] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it
[   91.021652][ T5200] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.523: Corrupt directory, running e2fsck is recommended
[   91.034567][ T5200] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   91.043530][ T5200] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.523: corrupted in-inode xattr: invalid ea_ino
[   91.058102][ T5200] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.523: couldn't read orphan inode 15 (err -117)
[   91.070999][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.206177][ T5205] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   91.217860][ T5205] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it
[   91.228030][ T5205] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.523: Corrupt directory, running e2fsck is recommended
[   91.243073][ T5205] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   91.254669][ T5205] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it
[   91.264964][ T5205] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.523: Corrupt directory, running e2fsck is recommended
[   91.290019][ T5205] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   91.301668][ T5205] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it
[   91.311878][ T5205] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.523: Corrupt directory, running e2fsck is recommended
[   91.623871][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.584419][ T5193] set match dimension is over the limit!