last executing test programs:

6.819567761s ago: executing program 0 (id=201):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

6.666402333s ago: executing program 0 (id=203):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)

3.656987757s ago: executing program 4 (id=225):
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$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")
r2 = syz_open_procfs(0x0, 0x0)
umount2(0x0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000008060006eba690a98539ea65a5f2fb4570ac2a9000000000000000000500000a0900020073797a32000000000900020073797a30"], 0x38}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x48)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r7}, 0x20)
r8 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchownat(r9, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r10, 0x9, 0x0)
unshare(0x64000600)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@data_err_abort}, {@jqfmt_vfsv1}, {@nobarrier}, {@debug}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nodioread_nolock}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '${&\'{-,(\'$$['}}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_hash}]}, 0xff, 0x464, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)

3.490744699s ago: executing program 2 (id=226):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x41, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x10000, 0x1, 0x0, 0x5, 0x5, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x7fffffff, 0x4, 0x0, 0x1a, "ff00f7000000000000000000af88008300"})
r7 = syz_open_pts(r6, 0x141601)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r5, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
pipe2(&(0x7f0000001cc0), 0x80480)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000083ef"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0))

2.805305819s ago: executing program 1 (id=229):
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000300ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff01000000000000000000000000000105000300"], 0x174}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001080))
tee(r1, r0, 0x600000000, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x3}]}, 0x2c}}, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040))
socket$inet(0x2, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

2.709929461s ago: executing program 1 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r3, 0x0, 0x0, 0x1001f0)
copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0)

2.706115481s ago: executing program 4 (id=231):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)

2.690508761s ago: executing program 3 (id=232):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)

2.613243962s ago: executing program 4 (id=233):
socket$netlink(0x10, 0x3, 0x10)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50)
syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007000000000000190780a010102ac1414a603049078010000004500000000000000001100000000000000000000440c0001ac1414bb4e21000044340001e0000001000000000000000000000000ac141400000000000800000000000000ac1e000100000000acf5440000000000"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000000c0)={0x18, 0x81, 0x4, 0xc, 0xd})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xb, 0x47}}, './file0\x00'})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r7 = getpgid(0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
cachestat(r8, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(r7, 0x0)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

2.553098373s ago: executing program 3 (id=234):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x5421, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf673c66020af498b1b4aa96afec84191b9b0358f", 0x41)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,')
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x3, 0x700, &(0x7f0000000a40)="$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")
futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc)
futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000), 0x0)
write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x8)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x900, &(0x7f0000000140)={0x10000c, 0x81, 0x60000}, 0x20)

2.223523568s ago: executing program 2 (id=235):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

2.030706581s ago: executing program 2 (id=236):
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$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")
r2 = syz_open_procfs(0x0, 0x0)
umount2(0x0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000008060006eba690a98539ea65a5f2fb4570ac2a9000000000000000000500000a0900020073797a32000000000900020073797a30"], 0x38}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x48)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r7}, 0x20)
r8 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchownat(r9, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r10, 0x9, 0x0)
unshare(0x64000600)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@data_err_abort}, {@jqfmt_vfsv1}, {@nobarrier}, {@debug}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nodioread_nolock}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '${&\'{-,(\'$$['}}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_hash}]}, 0xff, 0x464, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)

1.225449512s ago: executing program 3 (id=237):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={0x0, 0x0, <r1=>0x0, &(0x7f00000004c0)=""/76, 0x4c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32, @ANYRES32=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000000640)=0x1da)
open(0x0, 0x14927e, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x14, 0x10000, 0x0, 0x2, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10)
process_mrelease(0xffffffffffffffff, 0x0)
r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
mq_getsetattr(r4, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0)

1.217003722s ago: executing program 4 (id=238):
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000300ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff01000000000000000000000000000105000300"], 0x174}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001080))
tee(r1, r0, 0x600000000, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a05000000000000000000010000000900010073797a30000000000c000440000000000000000340000000160a01000000000000000000010000000900010073797a300000000009"], 0x1d0}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x3}]}, 0x2c}}, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040))
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x80010000, 0x0, 0x3})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001a1401000c000000fbdbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x4000441}, 0x4008000)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmmsg$inet(r6, &(0x7f0000002300)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x4000001)

1.129859823s ago: executing program 1 (id=239):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)

1.076433344s ago: executing program 1 (id=240):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

1.013512735s ago: executing program 1 (id=241):
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$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")
r2 = syz_open_procfs(0x0, 0x0)
umount2(0x0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000008060006eba690a98539ea65a5f2fb4570ac2a9000000000000000000500000a0900020073797a32000000000900020073797a30"], 0x38}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x48)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r7}, 0x20)
r8 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchownat(r9, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r10, 0x9, 0x0)
unshare(0x64000600)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@data_err_abort}, {@jqfmt_vfsv1}, {@nobarrier}, {@debug}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nodioread_nolock}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '${&\'{-,(\'$$['}}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_hash}]}, 0xff, 0x464, &(0x7f00000005c0)="$eJzs3M1rHGUYAPBnNtmk37uW+tEPNdqKxY+kSWvtwYui4EFB0EM9xiQttdtGmgi2FK0i9SgF7+JFEPwLPOlF1JPgVe9SKNKL1YOszO5MdjPdTRu7ycbu7weTfd+d2X2fpzPv7DvzdjeAgTWW/kkitkXErxFR2dxhg7Hmw43rF2f+un5xJol6/fU/kvRl8ef1izP5pkn2uDWvDEeUPk5ib4d2F85fOD1dq82dy+oTi2femVg4f+HpU2emT86dnDs7dezYkcOTzx6deqYneVbSWPe8P79v98tvXnl15viVt378OsnzL+TRI2MrrXysXu9xc/21va2cDPcxEFblwHCjm0a50f8rMRStnVeJlz7qa3DAmqrX6/X7uq++VAfuYkn0OwKgP/IP+vT6N1/WaeixIVx7vnmfIs37RrY01wxHKdumXLi+7aWxiDh+6e/P0yXW5j4EAMAy36bjn6c6jf9Kkd8XGs0eKxFRjYh7ImJnRByNiF0RcW9EY9v7I+KBVbZfnCS5efxTutoIZo2k47/nsrmt5eO/pSarQ1lteyP/cnLiVG3uUETsiIiDUR5N65MrtPHdi7982m1d+/gvXdL287FgFsfV4dHlr5mdXpy+k5zbXfswYs9wp/yTpZmAJCJ2R8Se/9jGqSe+2tdt3a3zX0EP5pnqX0Q83tz/l6KQfy5pn5/cFMX5yYlNUZs7NJEfFTf76efLr3Vrv2P+I7eZfw+k+39Lx+N/Kf9q0j5fu7D6Ni7/9knXa5ru+/9Q1gE7H/8jyRvLnntvenHx3GTESPJKM+j256cK2021tk/zP7i/c//fGa1/ib0RkR7ED0bEQxHxcBb7IxHxaETsXyH/H1448Pbq818faf6zq9r/rcJIFJ8pFK7taL7D6e+/WdZotVW8vfPfkUbpYPpn0+2d/1aM69ydHM0AAADw/1OKiG2RlMaXyqXS+Hjz//Dvii2l2vzC4pMn5t89O9v8jkA1yqX8Tlel7X7oZHZZn9enCvXD2X3jz4Y2N+rjM/O12X4nDwNua5f+n/p9qN/RAWvO97VgcOn/MLj0fxhc+j8Mrg79v/gzQMBdqtPn/wd9iANYf4X+b9oPBojrfxhc+j8MLv0fBtLC5rj1l+TvmkL+mwYbJZ6bC6MbK8JyFk6HVVHaEBEqtAoT//TwDbM9/2XhhFFdpxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj/wbAAD//wtj2oA=")
socket$nl_netfilter(0x10, 0x3, 0xc)

957.173006ms ago: executing program 3 (id=242):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc572"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007910a80000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0xa}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20080e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x504, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
r6 = io_uring_setup(0x53fc, &(0x7f0000000200)={0x0, 0x23d4, 0x0, 0xfffffffc, 0x83, 0x0, r4})
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1}, 0x38)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0)
creat(0x0, 0x89)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
creat(0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)

811.066628ms ago: executing program 0 (id=243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x40080c0)

776.193359ms ago: executing program 0 (id=244):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007910a80000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0xa}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20080e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x504, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
r6 = io_uring_setup(0x53fc, &(0x7f0000000200)={0x0, 0x23d4, 0x0, 0xfffffffc, 0x83, 0x0, r4})
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1}, 0x38)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0)
creat(0x0, 0x89)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
creat(0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)

685.1772ms ago: executing program 2 (id=245):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd700007000000020000000800", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

629.471001ms ago: executing program 4 (id=246):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x1c090)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r6, {}, {0x10, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x27d05d94437b35a5}, 0x24008080)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

591.540152ms ago: executing program 2 (id=247):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
r2 = fsmount(0xffffffffffffffff, 0x0, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
ioctl$BLKGETZONESZ(r2, 0x80041284, &(0x7f0000000640)=0x1da)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x14, 0x10000, 0x0, 0x2, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r6}, 0x10)
r7 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
mq_getsetattr(r7, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0)

505.373993ms ago: executing program 3 (id=248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$nci(r2, 0x0, 0xfffffeea)

248.058027ms ago: executing program 4 (id=249):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioprio_set$pid(0x2, 0x0, 0x4007)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000005880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$igmp(0x2, 0x3, 0x2)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='thermal_power_cpu_get_power\x00', r0}, 0x18)
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

227.508697ms ago: executing program 3 (id=250):
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50)
syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007000000000000190780a010102ac1414a603049078010000004500000000000000001100000000000000000000440c0001ac1414bb4e21000044340001e0000001000000000000000000000000ac141400000000000800000000000000ac1e000100000000acf5440000000000"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESDEC], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000000c0)={0x18, 0x81, 0x4, 0xc, 0xd})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xb, 0x47}}, './file0\x00'})
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r6 = getpgid(0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
cachestat(r7, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(r6, 0x0)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

165.582358ms ago: executing program 0 (id=251):
creat(0x0, 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

101.717038ms ago: executing program 0 (id=252):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={0x0, 0x0, <r1=>0x0, &(0x7f00000004c0)=""/76, 0x4c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32, @ANYRES32=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000000640)=0x1da)
open(0x0, 0x14927e, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x14, 0x10000, 0x0, 0x2, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10)
process_mrelease(0xffffffffffffffff, 0x0)
r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
mq_getsetattr(r4, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0)

13.71422ms ago: executing program 2 (id=253):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x80)

0s ago: executing program 1 (id=254):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts.
[   24.517595][   T29] audit: type=1400 audit(1753259192.161:62): avc:  denied  { mounton } for  pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.518465][ T3295] cgroup: Unknown subsys name 'net'
[   24.540319][   T29] audit: type=1400 audit(1753259192.161:63): avc:  denied  { mount } for  pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.567701][   T29] audit: type=1400 audit(1753259192.191:64): avc:  denied  { unmount } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.681968][ T3295] cgroup: Unknown subsys name 'cpuset'
[   24.688088][ T3295] cgroup: Unknown subsys name 'rlimit'
[   24.777469][   T29] audit: type=1400 audit(1753259192.421:65): avc:  denied  { setattr } for  pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.802639][   T29] audit: type=1400 audit(1753259192.421:66): avc:  denied  { create } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.819884][ T3298] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.823079][   T29] audit: type=1400 audit(1753259192.421:67): avc:  denied  { write } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.852118][   T29] audit: type=1400 audit(1753259192.421:68): avc:  denied  { read } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.872446][   T29] audit: type=1400 audit(1753259192.431:69): avc:  denied  { mounton } for  pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.879843][ T3295] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.897454][   T29] audit: type=1400 audit(1753259192.431:70): avc:  denied  { mount } for  pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   24.897480][   T29] audit: type=1400 audit(1753259192.481:71): avc:  denied  { relabelto } for  pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.701722][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   26.787137][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   26.803548][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.810627][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.817783][ T3306] bridge_slave_0: entered allmulticast mode
[   26.824425][ T3306] bridge_slave_0: entered promiscuous mode
[   26.832804][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.839864][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.847040][ T3306] bridge_slave_1: entered allmulticast mode
[   26.853512][ T3306] bridge_slave_1: entered promiscuous mode
[   26.873717][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   26.900437][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   26.914177][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.934255][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   26.947480][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.984901][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.992047][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.999243][ T3305] bridge_slave_0: entered allmulticast mode
[   27.005636][ T3305] bridge_slave_0: entered promiscuous mode
[   27.014585][ T3306] team0: Port device team_slave_0 added
[   27.028904][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.036021][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.043221][ T3305] bridge_slave_1: entered allmulticast mode
[   27.049534][ T3305] bridge_slave_1: entered promiscuous mode
[   27.057953][ T3306] team0: Port device team_slave_1 added
[   27.105101][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.112228][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.119348][ T3307] bridge_slave_0: entered allmulticast mode
[   27.126069][ T3307] bridge_slave_0: entered promiscuous mode
[   27.132780][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.139733][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.165695][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.176506][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.183638][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.190789][ T3313] bridge_slave_0: entered allmulticast mode
[   27.197287][ T3313] bridge_slave_0: entered promiscuous mode
[   27.209451][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.218791][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.225867][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.233050][ T3307] bridge_slave_1: entered allmulticast mode
[   27.239392][ T3307] bridge_slave_1: entered promiscuous mode
[   27.245797][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.252802][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.278765][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.289579][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.296835][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.304125][ T3313] bridge_slave_1: entered allmulticast mode
[   27.310537][ T3313] bridge_slave_1: entered promiscuous mode
[   27.320969][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.328703][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.335998][ T3311] bridge_slave_0: entered allmulticast mode
[   27.342568][ T3311] bridge_slave_0: entered promiscuous mode
[   27.349948][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.370003][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.377258][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.384586][ T3311] bridge_slave_1: entered allmulticast mode
[   27.390978][ T3311] bridge_slave_1: entered promiscuous mode
[   27.408080][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.427882][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.438351][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.448574][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.467612][ T3305] team0: Port device team_slave_0 added
[   27.474233][ T3305] team0: Port device team_slave_1 added
[   27.493311][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.512513][ T3306] hsr_slave_0: entered promiscuous mode
[   27.518467][ T3306] hsr_slave_1: entered promiscuous mode
[   27.529731][ T3313] team0: Port device team_slave_0 added
[   27.536387][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.549987][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.557031][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.583049][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.594560][ T3313] team0: Port device team_slave_1 added
[   27.600950][ T3307] team0: Port device team_slave_0 added
[   27.615455][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.622479][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.648481][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.659834][ T3307] team0: Port device team_slave_1 added
[   27.684580][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.691610][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.717524][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.730708][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.737727][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.763725][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.778939][ T3311] team0: Port device team_slave_0 added
[   27.801382][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.808395][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.834422][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.845675][ T3311] team0: Port device team_slave_1 added
[   27.863331][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.870292][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.896275][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.931066][ T3305] hsr_slave_0: entered promiscuous mode
[   27.937235][ T3305] hsr_slave_1: entered promiscuous mode
[   27.943135][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.950682][ T3305] Cannot create hsr debugfs directory
[   27.956341][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.963388][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.989320][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.003855][ T3313] hsr_slave_0: entered promiscuous mode
[   28.009861][ T3313] hsr_slave_1: entered promiscuous mode
[   28.015736][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.023406][ T3313] Cannot create hsr debugfs directory
[   28.034756][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.041724][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.067634][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.122323][ T3307] hsr_slave_0: entered promiscuous mode
[   28.128365][ T3307] hsr_slave_1: entered promiscuous mode
[   28.134564][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.142276][ T3307] Cannot create hsr debugfs directory
[   28.156069][ T3311] hsr_slave_0: entered promiscuous mode
[   28.162093][ T3311] hsr_slave_1: entered promiscuous mode
[   28.168523][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.176100][ T3311] Cannot create hsr debugfs directory
[   28.274147][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.284987][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.303360][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.312008][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   28.361715][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   28.374371][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   28.384642][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   28.401679][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   28.415258][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   28.425179][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   28.435875][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   28.449459][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   28.476052][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   28.484879][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   28.494196][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   28.508922][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   28.530440][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.563021][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   28.571761][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   28.582742][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   28.592518][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   28.604144][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   28.629469][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.636618][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.645330][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.652397][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.668951][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.679598][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.692142][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   28.706243][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.719768][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   28.733811][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.740900][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.754006][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.761273][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.774378][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   28.782853][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.789931][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.803244][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.810477][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.852447][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.859501][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.869176][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.876332][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.931068][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.942664][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.960318][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   28.978227][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.985342][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.009677][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.020115][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.042772][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.049855][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.072638][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.090268][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.102481][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.145071][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.155420][ T3306] veth0_vlan: entered promiscuous mode
[   29.183071][ T3306] veth1_vlan: entered promiscuous mode
[   29.210695][ T3306] veth0_macvtap: entered promiscuous mode
[   29.222589][ T3306] veth1_macvtap: entered promiscuous mode
[   29.249778][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.263121][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.283609][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.292424][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.301247][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.309935][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.329762][ T3307] veth0_vlan: entered promiscuous mode
[   29.357859][ T3307] veth1_vlan: entered promiscuous mode
[   29.364794][ T3311] veth0_vlan: entered promiscuous mode
[   29.375445][ T3305] veth0_vlan: entered promiscuous mode
[   29.385471][ T3313] veth0_vlan: entered promiscuous mode
[   29.396286][ T3311] veth1_vlan: entered promiscuous mode
[   29.404209][ T3313] veth1_vlan: entered promiscuous mode
[   29.414842][ T3305] veth1_vlan: entered promiscuous mode
[   29.425887][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   29.426945][ T3311] veth0_macvtap: entered promiscuous mode
[   29.455917][ T3311] veth1_macvtap: entered promiscuous mode
[   29.483524][ T3307] veth0_macvtap: entered promiscuous mode
[   29.493182][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.502315][ T3305] veth0_macvtap: entered promiscuous mode
[   29.509682][ T3305] veth1_macvtap: entered promiscuous mode
[   29.516742][ T3307] veth1_macvtap: entered promiscuous mode
[   29.530396][ T3313] veth0_macvtap: entered promiscuous mode
[   29.542652][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.552739][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.570236][   T29] kauditd_printk_skb: 27 callbacks suppressed
[   29.570249][   T29] audit: type=1400 audit(1753259197.211:99): avc:  denied  { bind } for  pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.572017][ T3313] veth1_macvtap: entered promiscuous mode
[   29.603905][   T29] audit: type=1400 audit(1753259197.251:100): avc:  denied  { watch watch_reads } for  pid=3479 comm="syz.0.6" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   29.604748][ T3480] process 'syz.0.6' launched './file0' with NULL argv: empty string added
[   29.634420][   T29] audit: type=1400 audit(1753259197.251:101): avc:  denied  { execute } for  pid=3479 comm="syz.0.6" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   29.637081][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.665563][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.674336][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.683067][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.695408][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.703769][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.713181][   T29] audit: type=1400 audit(1753259197.331:102): avc:  denied  { execute_no_trans } for  pid=3479 comm="syz.0.6" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   29.713952][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.744726][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.753532][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.762351][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.774039][   T29] audit: type=1400 audit(1753259197.421:103): avc:  denied  { setopt } for  pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.795694][   T29] audit: type=1400 audit(1753259197.421:104): avc:  denied  { prog_load } for  pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   29.814443][   T29] audit: type=1400 audit(1753259197.421:105): avc:  denied  { bpf } for  pid=3479 comm="syz.0.6" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   29.835246][   T29] audit: type=1400 audit(1753259197.421:106): avc:  denied  { prog_run } for  pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   29.859697][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.873581][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.897335][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.907785][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.916653][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.925439][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.934258][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.962824][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.971737][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.980503][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.989297][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.998869][   T29] audit: type=1326 audit(1753259197.641:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabfe2ee9a9 code=0x0
[   30.039756][   T29] audit: type=1400 audit(1753259197.681:108): avc:  denied  { mounton } for  pid=3493 comm="syz.2.3" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   30.558909][ T3520] tipc: Started in network mode
[   30.563961][ T3520] tipc: Node identity ac14140f, cluster identity 4711
[   30.572014][ T3520] tipc: New replicast peer: 255.255.255.255
[   30.578126][ T3520] tipc: Enabled bearer <udp:syz2>, priority 10
[   30.809355][ T3523] loop0: detected capacity change from 0 to 164
[   30.822202][ T3523] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   31.559498][ T3544] loop1: detected capacity change from 0 to 164
[   31.691288][ T3413] tipc: Node number set to 2886997007
[   31.757155][ T3544] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   31.849643][ T3549] loop0: detected capacity change from 0 to 512
[   31.885858][ T3551] loop2: detected capacity change from 0 to 512
[   31.945210][ T3549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.964257][ T3551] EXT4-fs: Ignoring removed mblk_io_submit option
[   32.065878][ T3551] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   32.079051][ T3551] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   32.110159][ T3549] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.198150][ T3549] Cannot find add_set index 0 as target
[   32.236888][ T3549] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   32.272627][ T3559] netlink: 'syz.4.20': attribute type 1 has an invalid length.
[   32.280231][ T3559] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.20'.
[   32.311038][ T3551] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   32.355371][ T3549] EXT4-fs (loop0): Remounting filesystem read-only
[   32.374286][ T3560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20'.
[   32.391732][ T3551] EXT4-fs (loop2): 1 truncate cleaned up
[   32.606000][ T3551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.624974][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'.
[   32.634972][ T3549] syz.0.18 (3549) used greatest stack depth: 10760 bytes left
[   32.655176][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.730390][ T3568] loop1: detected capacity change from 0 to 512
[   32.923933][ T3568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.382115][ T3568] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.408246][ T3572] loop0: detected capacity change from 0 to 512
[   33.415919][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.435844][ T3568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   33.454771][ T3577] loop4: detected capacity change from 0 to 512
[   33.462041][ T3572] EXT4-fs (loop0): #blocks per group too big: 466944
[   33.476011][ T3568] EXT4-fs (loop1): Remounting filesystem read-only
[   33.593495][ T3577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   33.624384][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.773007][ T3589] loop0: detected capacity change from 0 to 512
[   33.780494][ T3589] ext3: Unknown parameter 'permit_directio'
[   34.376836][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.413745][ T3595] loop0: detected capacity change from 0 to 512
[   34.441651][ T3577] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.455132][ T3595] EXT4-fs: Ignoring removed mblk_io_submit option
[   34.493530][ T3595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   34.542649][ T3598] loop2: detected capacity change from 0 to 164
[   34.550015][ T3577] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.26: iget: bad i_size value: 2533274857506816
[   34.574553][ T3595] EXT4-fs (loop0): 1 truncate cleaned up
[   34.580889][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.604902][ T3603] hub 9-0:1.0: USB hub found
[   34.613651][   T29] kauditd_printk_skb: 221 callbacks suppressed
[   34.613663][   T29] audit: type=1326 audit(1753259202.261:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f191171d60a code=0x7ffc0000
[   34.642907][   T29] audit: type=1326 audit(1753259202.261:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f191171d60a code=0x7ffc0000
[   34.665999][   T29] audit: type=1326 audit(1753259202.261:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f191171d217 code=0x7ffc0000
[   34.689342][   T29] audit: type=1326 audit(1753259202.261:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f191172014a code=0x7ffc0000
[   34.750702][ T3598] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   34.759820][ T3603] hub 9-0:1.0: 8 ports detected
[   34.830642][   T29] audit: type=1400 audit(1753259202.371:330): avc:  denied  { kexec_image_load } for  pid=3576 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   34.850513][   T29] audit: type=1326 audit(1753259202.451:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   34.873881][   T29] audit: type=1326 audit(1753259202.451:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   34.897907][   T29] audit: type=1326 audit(1753259202.451:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   34.921617][   T29] audit: type=1326 audit(1753259202.451:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   34.944782][   T29] audit: type=1326 audit(1753259202.451:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   35.133834][ T3600] mmap: syz.1.31 (3600) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   35.687825][ T3577] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   35.741373][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.753707][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.869387][ T3613] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   35.877008][ T3613] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.34'.
[   35.900052][ T3613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'.
[   36.099476][ T3619] loop3: detected capacity change from 0 to 512
[   36.107965][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'.
[   36.116751][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'.
[   36.117208][ T3619] EXT4-fs: Ignoring removed mblk_io_submit option
[   36.132304][ T3617] loop0: detected capacity change from 0 to 1024
[   36.148475][ T3621] loop4: detected capacity change from 0 to 512
[   36.155583][ T3619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.160393][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'.
[   36.182810][ T3621] EXT4-fs: Ignoring removed mblk_io_submit option
[   36.185007][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.189473][ T3619] EXT4-fs (loop3): 1 truncate cleaned up
[   36.220166][ T3621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.256224][ T3621] EXT4-fs (loop4): 1 truncate cleaned up
[   36.265722][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.279021][ T3621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.313348][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.313028][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.549963][ T3638] loop0: detected capacity change from 0 to 512
[   37.567042][ T3638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   37.580049][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   37.588928][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   37.598158][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   37.660540][ T3643] tipc: Started in network mode
[   37.660609][ T3643] tipc: Node identity ac14140f, cluster identity 4711
[   37.660691][ T3643] tipc: New replicast peer: 255.255.255.255
[   37.660853][ T3643] tipc: Enabled bearer <udp:syz2>, priority 10
[   37.669452][ T3638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.669522][ T3638] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.753090][ T3638] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.38: iget: bad i_size value: 2533274857506816
[   37.754769][ T3638] hub 9-0:1.0: USB hub found
[   37.754955][ T3638] hub 9-0:1.0: 8 ports detected
[   37.901481][ T3631] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   37.901752][ T3631] SELinux: failed to load policy
[   37.952603][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.987271][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.055310][ T3656] loop1: detected capacity change from 0 to 512
[   38.063269][ T3656] EXT4-fs (loop1): #blocks per group too big: 466944
[   38.103865][ T3660] loop4: detected capacity change from 0 to 512
[   38.110639][ T3660] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.131836][ T3658] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   38.186257][ T3658] syzkaller0: entered promiscuous mode
[   38.191842][ T3658] syzkaller0: entered allmulticast mode
[   38.200867][ T3660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   38.249733][ T3645] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   38.259877][ T3645] SELinux: failed to load policy
[   38.276443][ T3663] loop1: detected capacity change from 0 to 512
[   38.283449][ T3663] ext3: Unknown parameter 'permit_directio'
[   38.370731][ T3660] EXT4-fs (loop4): 1 truncate cleaned up
[   38.379064][ T3660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.784824][ T3380] tipc: Node number set to 2886997007
[   39.168870][ T3672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'.
[   39.195708][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.226283][ T3676] loop1: detected capacity change from 0 to 512
[   39.235744][ T3671] netlink: 'syz.3.44': attribute type 1 has an invalid length.
[   39.243475][ T3671] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.44'.
[   39.254369][ T3671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'.
[   39.282881][ T3676] EXT4-fs (loop1): #blocks per group too big: 466944
[   39.304350][ T3679] loop4: detected capacity change from 0 to 512
[   39.310713][ T3677] loop0: detected capacity change from 0 to 512
[   39.339927][ T3677] EXT4-fs: Ignoring removed mblk_io_submit option
[   39.354152][ T3683] loop3: detected capacity change from 0 to 512
[   39.378339][ T3677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   39.391781][ T3683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   39.407503][ T3677] EXT4-fs (loop0): 1 truncate cleaned up
[   39.414081][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.424268][ T3679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.445991][ T3679] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.459771][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.472402][ T3683] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.480963][ T3679] Cannot find add_set index 0 as target
[   39.756216][ T3694] loop1: detected capacity change from 0 to 512
[   39.763155][ T3694] ext3: Unknown parameter 'permit_directio'
[   39.995051][   T29] kauditd_printk_skb: 76 callbacks suppressed
[   39.995106][   T29] audit: type=1326 audit(1753259207.141:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.024422][   T29] audit: type=1326 audit(1753259207.141:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.047550][   T29] audit: type=1326 audit(1753259207.141:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcdc44d310 code=0x7ffc0000
[   40.070666][   T29] audit: type=1326 audit(1753259207.141:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.340433][ T3683] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.51: iget: bad i_size value: 2533274857506816
[   40.370524][   T29] audit: type=1326 audit(1753259207.971:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.393717][   T29] audit: type=1326 audit(1753259207.971:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.405229][ T3679] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   40.416892][   T29] audit: type=1326 audit(1753259207.981:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.416953][   T29] audit: type=1326 audit(1753259207.981:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.433307][ T3679] EXT4-fs (loop4): Remounting filesystem read-only
[   40.454255][   T29] audit: type=1326 audit(1753259207.981:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.479674][ T3683] hub 9-0:1.0: USB hub found
[   40.483952][   T29] audit: type=1326 audit(1753259207.981:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   40.507810][ T3683] hub 9-0:1.0: 8 ports detected
[   40.567293][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.577657][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.664572][ T3710] loop2: detected capacity change from 0 to 512
[   40.685603][ T3713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.60'.
[   40.694990][ T3710] EXT4-fs (loop2): #blocks per group too big: 466944
[   40.814305][ T3718] loop4: detected capacity change from 0 to 512
[   40.835707][ T3718] EXT4-fs (loop4): #blocks per group too big: 466944
[   40.950223][ T3727] loop2: detected capacity change from 0 to 512
[   40.957088][ T3727] ext3: Unknown parameter 'permit_directio'
[   41.059444][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.085644][ T3711] loop0: detected capacity change from 0 to 164
[   41.207969][ T3711] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.545589][ T3739] loop4: detected capacity change from 0 to 512
[   41.552785][ T3739] ext3: Unknown parameter 'permit_directio'
[   41.780329][ T3742] loop2: detected capacity change from 0 to 512
[   41.843440][ T3744] loop4: detected capacity change from 0 to 512
[   41.869524][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.903989][ T3744] EXT4-fs (loop4): #blocks per group too big: 466944
[   41.927922][ T3742] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.004236][ T3742] Cannot find add_set index 0 as target
[   42.016054][ T3742] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   42.033368][ T3742] EXT4-fs (loop2): Remounting filesystem read-only
[   42.077821][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.195255][ T3753] loop4: detected capacity change from 0 to 512
[   42.202493][ T3753] ext3: Unknown parameter 'permit_directio'
[   42.233619][ T3755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'.
[   42.492153][ T3763] loop1: detected capacity change from 0 to 512
[   42.499437][ T3763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   42.518762][ T3763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.533200][ T3763] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.557477][ T3774] tipc: Started in network mode
[   42.562483][ T3774] tipc: Node identity ac14140f, cluster identity 4711
[   42.569683][ T3774] tipc: New replicast peer: 255.255.255.255
[   42.578169][ T3774] tipc: Enabled bearer <udp:syz2>, priority 10
[   42.589460][ T3763] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.74: iget: bad i_size value: 2533274857506816
[   42.603165][ T3763] hub 9-0:1.0: USB hub found
[   42.607803][ T3763] hub 9-0:1.0: 8 ports detected
[   42.702409][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.741673][ T3785] syzkaller0: entered promiscuous mode
[   42.747244][ T3785] syzkaller0: entered allmulticast mode
[   42.756409][ T3783] loop3: detected capacity change from 0 to 164
[   42.789155][ T3783] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.860163][ T3790] loop1: detected capacity change from 0 to 164
[   42.873683][ T3790] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.948625][ T3792] tipc: Started in network mode
[   42.953631][ T3792] tipc: Node identity ac14140f, cluster identity 4711
[   42.963517][ T3792] tipc: New replicast peer: 255.255.255.255
[   42.969631][ T3792] tipc: Enabled bearer <udp:syz2>, priority 10
[   42.979456][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   42.988437][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   43.040797][ T3798] loop1: detected capacity change from 0 to 512
[   43.064630][ T3798] EXT4-fs (loop1): #blocks per group too big: 466944
[   43.415971][ T3803] loop1: detected capacity change from 0 to 512
[   43.422898][ T3803] ext3: Unknown parameter 'permit_directio'
[   43.701296][ T1093] tipc: Node number set to 2886997007
[   43.762899][ T3812] loop2: detected capacity change from 0 to 512
[   43.781178][ T3812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   43.802614][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.818189][ T3812] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.857428][ T3826] loop0: detected capacity change from 0 to 164
[   43.869405][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'.
[   43.878292][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'.
[   43.906422][ T3812] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.88: iget: bad i_size value: 2533274857506816
[   43.923032][ T3829] loop3: detected capacity change from 0 to 512
[   43.942962][ T3812] hub 9-0:1.0: USB hub found
[   43.946100][ T3829] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.955948][ T3812] hub 9-0:1.0: 8 ports detected
[   43.965741][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   43.974743][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   43.975173][ T3826] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.987579][ T3829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.991973][ T3414] tipc: Node number set to 2886997007
[   44.004209][ T3829] EXT4-fs (loop3): 1 truncate cleaned up
[   44.013085][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   44.032112][ T3829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.086030][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.366220][ T3854] loop2: detected capacity change from 0 to 512
[   44.457751][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.520371][ T3856] loop0: detected capacity change from 0 to 1024
[   44.534916][ T3854] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.584362][ T3856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.610825][ T3854] Cannot find add_set index 0 as target
[   44.641027][ T3854] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   44.729756][ T3854] EXT4-fs (loop2): Remounting filesystem read-only
[   44.745895][ T3831] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   44.757142][ T3831] SELinux: failed to load policy
[   44.782888][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.794516][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.913279][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.986786][ T3876] loop0: detected capacity change from 0 to 164
[   45.008842][   T29] kauditd_printk_skb: 233 callbacks suppressed
[   45.008853][   T29] audit: type=1326 audit(1753259212.651:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.045885][   T29] audit: type=1326 audit(1753259212.691:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.069210][   T29] audit: type=1326 audit(1753259212.691:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.092382][   T29] audit: type=1326 audit(1753259212.691:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.095174][ T3882] loop1: detected capacity change from 0 to 512
[   45.115608][   T29] audit: type=1326 audit(1753259212.691:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.145938][   T29] audit: type=1326 audit(1753259212.691:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.146801][ T3876] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   45.171148][   T29] audit: type=1326 audit(1753259212.691:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.204178][   T29] audit: type=1326 audit(1753259212.691:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.205674][ T3882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   45.227570][   T29] audit: type=1326 audit(1753259212.691:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.260238][   T29] audit: type=1326 audit(1753259212.691:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22311e9a9 code=0x7ffc0000
[   45.289791][ T3883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'.
[   45.298749][ T3883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'.
[   45.309732][ T3877] loop4: detected capacity change from 0 to 164
[   45.331991][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.367958][ T3877] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   45.379704][ T3882] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.388196][ T3896] loop3: detected capacity change from 0 to 1024
[   45.439272][ T3897] loop2: detected capacity change from 0 to 164
[   45.454378][ T3896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.466813][ T3882] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.109: iget: bad i_size value: 2533274857506816
[   45.500743][ T3897] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   45.504658][ T3904] hub 9-0:1.0: USB hub found
[   45.515883][ T3904] hub 9-0:1.0: 8 ports detected
[   45.607128][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.651620][ T3913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   45.658950][ T3913] syzkaller0: entered promiscuous mode
[   45.664800][ T3913] syzkaller0: entered allmulticast mode
[   45.675480][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.705497][ T3912] tipc: Resetting bearer <eth:syzkaller0>
[   45.714319][ T3912] tipc: Disabling bearer <eth:syzkaller0>
[   46.405089][ T3926] loop0: detected capacity change from 0 to 164
[   46.703235][ T3926] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   46.904011][ T3945] loop1: detected capacity change from 0 to 1024
[   46.932861][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.259546][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.293548][ T3963] loop0: detected capacity change from 0 to 164
[   47.320267][ T3972] loop1: detected capacity change from 0 to 512
[   47.347320][ T3972] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.381327][ T3974] loop4: detected capacity change from 0 to 512
[   47.387665][ T3963] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   47.409970][ T3972] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   47.444632][ T3979] loop3: detected capacity change from 0 to 512
[   47.453965][ T3979] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.472414][ T3972] EXT4-fs (loop1): 1 truncate cleaned up
[   47.478444][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.492789][ T3979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.503803][ T3974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.525676][ T3974] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.538408][ T3974] Cannot find add_set index 0 as target
[   47.539987][ T3979] EXT4-fs (loop3): 1 truncate cleaned up
[   47.554082][ T3974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   47.579801][ T3979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.604331][ T3974] EXT4-fs (loop4): Remounting filesystem read-only
[   47.618948][ T3984] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   47.709257][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.688735][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.698253][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.723560][ T3993] loop0: detected capacity change from 0 to 512
[   48.759677][ T3993] EXT4-fs (loop0): #blocks per group too big: 466944
[   48.953572][ T4004] loop1: detected capacity change from 0 to 164
[   49.082903][ T4005] loop0: detected capacity change from 0 to 512
[   49.090098][ T4005] ext3: Unknown parameter 'permit_directio'
[   49.263616][ T4004] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   49.411445][ T4020] loop3: detected capacity change from 0 to 512
[   49.428289][ T4020] EXT4-fs (loop3): #blocks per group too big: 466944
[   49.693989][ T4022] loop3: detected capacity change from 0 to 512
[   49.700879][ T4022] ext3: Unknown parameter 'permit_directio'
[   49.791929][ T4025] loop0: detected capacity change from 0 to 512
[   49.815818][ T4026] loop4: detected capacity change from 0 to 512
[   49.964189][ T4025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.975767][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.989407][ T4025] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.990730][ T4026] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.010335][ T4025] Cannot find add_set index 0 as target
[   50.023456][ T4025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   50.061837][ T4025] EXT4-fs (loop0): Remounting filesystem read-only
[   50.067863][ T4040] loop1: detected capacity change from 0 to 512
[   50.074730][ T4026] Cannot find add_set index 0 as target
[   50.092639][ T4026] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   50.108453][ T4026] EXT4-fs (loop4): Remounting filesystem read-only
[   50.115947][ T4040] EXT4-fs (loop1): #blocks per group too big: 466944
[   50.123930][   T29] kauditd_printk_skb: 242 callbacks suppressed
[   50.123942][   T29] audit: type=1326 audit(1753259217.771:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.153721][   T29] audit: type=1326 audit(1753259217.771:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.178664][   T29] audit: type=1326 audit(1753259217.771:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.202097][   T29] audit: type=1326 audit(1753259217.771:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.225364][   T29] audit: type=1326 audit(1753259217.771:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.248762][   T29] audit: type=1326 audit(1753259217.771:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.280978][ T4041] loop2: detected capacity change from 0 to 164
[   50.290381][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.301624][ T1477] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   50.318364][ T1477] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   50.323891][   T29] audit: type=1326 audit(1753259217.901:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.353858][   T29] audit: type=1326 audit(1753259217.901:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191171e9a9 code=0x7ffc0000
[   50.391065][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.448927][ T4041] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.494975][ T4044] netlink: 'syz.3.156': attribute type 1 has an invalid length.
[   50.502689][ T4044] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.156'.
[   50.551752][ T4051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'.
[   50.575085][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'.
[   50.584086][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'.
[   50.628156][ T4053] loop1: detected capacity change from 0 to 512
[   50.635182][ T4053] ext3: Unknown parameter 'permit_directio'
[   50.992164][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'.
[   51.029515][ T4061] loop3: detected capacity change from 0 to 512
[   51.085271][ T4061] EXT4-fs (loop3): #blocks per group too big: 466944
[   51.292243][ T4069] loop1: detected capacity change from 0 to 512
[   51.299678][ T4069] EXT4-fs (loop1): #blocks per group too big: 466944
[   51.529460][ T4047] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   51.564839][ T4047] SELinux: failed to load policy
[   51.959769][ T4083] loop3: detected capacity change from 0 to 512
[   51.988862][ T4089] loop1: detected capacity change from 0 to 512
[   52.006603][ T4089] ext3: Unknown parameter 'permit_directio'
[   52.009922][ T4083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.033734][ T4085] loop4: detected capacity change from 0 to 164
[   52.048072][ T4094] loop2: detected capacity change from 0 to 512
[   52.086170][ T4094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   52.101512][ T4083] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.128093][ T4085] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.138300][ T4083] Cannot find add_set index 0 as target
[   52.149560][ T4094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.164201][ T4083] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   52.190116][ T4083] EXT4-fs (loop3): Remounting filesystem read-only
[   52.196914][ T4094] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.222410][ T4083] syz.3.165 (4083) used greatest stack depth: 10696 bytes left
[   52.241394][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.261037][ T4094] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.166: iget: bad i_size value: 2533274857506816
[   52.276321][ T4094] hub 9-0:1.0: USB hub found
[   52.281041][ T4094] hub 9-0:1.0: 8 ports detected
[   52.310816][ T4099] pim6reg1: entered promiscuous mode
[   52.316301][ T4099] pim6reg1: entered allmulticast mode
[   52.345046][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.370770][ T4099] loop3: detected capacity change from 0 to 1024
[   52.392947][ T4099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.543887][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.734624][ T4116] loop3: detected capacity change from 0 to 512
[   52.745638][ T4118] loop0: detected capacity change from 0 to 512
[   52.752255][ T4116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   52.752461][ T4118] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.785563][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'.
[   52.841287][ T4123] loop2: detected capacity change from 0 to 512
[   52.849962][ T4123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.906454][ T4118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   52.943145][ T4116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.970507][ T4123] EXT4-fs (loop2): 1 truncate cleaned up
[   52.977067][ T4123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.047923][ T4116] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.073179][ T4118] EXT4-fs (loop0): 1 truncate cleaned up
[   53.133805][ T4118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.242145][ T4127] pim6reg1: entered promiscuous mode
[   53.247496][ T4127] pim6reg1: entered allmulticast mode
[   53.288186][ T4116] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.172: iget: bad i_size value: 2533274857506816
[   53.369220][ T4128] loop1: detected capacity change from 0 to 1024
[   53.404766][ T4116] hub 9-0:1.0: USB hub found
[   53.709684][ T4116] hub 9-0:1.0: 8 ports detected
[   54.194156][ T4136] loop4: detected capacity change from 0 to 512
[   54.212387][ T4136] EXT4-fs (loop4): #blocks per group too big: 466944
[   54.232540][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.246702][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.258431][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.336849][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.534186][ T4150] loop4: detected capacity change from 0 to 512
[   54.540832][ T4150] ext3: Unknown parameter 'permit_directio'
[   54.620115][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.738228][ T4155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.748742][ T4155] tipc: Resetting bearer <eth:syzkaller0>
[   54.758487][ T4154] tipc: Disabling bearer <eth:syzkaller0>
[   54.833848][ T4157] loop1: detected capacity change from 0 to 1024
[   54.866083][ T4157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.938634][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.979278][ T4167] loop0: detected capacity change from 0 to 1024
[   54.993177][ T4167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.048496][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.178435][   T29] kauditd_printk_skb: 190 callbacks suppressed
[   55.178480][   T29] audit: type=1326 audit(1753259222.821:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.229980][   T29] audit: type=1326 audit(1753259222.861:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.253398][   T29] audit: type=1326 audit(1753259222.861:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.276780][   T29] audit: type=1326 audit(1753259222.861:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.300072][   T29] audit: type=1326 audit(1753259222.861:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.323729][   T29] audit: type=1326 audit(1753259222.861:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.347097][   T29] audit: type=1326 audit(1753259222.861:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.370332][   T29] audit: type=1326 audit(1753259222.861:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.393908][   T29] audit: type=1326 audit(1753259222.861:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.417461][   T29] audit: type=1326 audit(1753259222.861:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fabfe2ee9a9 code=0x7ffc0000
[   55.538340][ T4182] netlink: 'syz.2.192': attribute type 1 has an invalid length.
[   55.546678][ T4182] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.192'.
[   55.558738][ T4182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'.
[   55.710443][ T4186] loop2: detected capacity change from 0 to 512
[   55.735108][ T4186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   55.759189][ T4189] loop3: detected capacity change from 0 to 164
[   55.777546][ T4191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'.
[   55.789499][ T4186] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.838292][ T4186] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.194: iget: bad i_size value: 2533274857506816
[   55.888076][ T4189] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   55.897942][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'.
[   55.906890][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'.
[   55.925991][ T4186] hub 9-0:1.0: USB hub found
[   55.934173][ T4186] hub 9-0:1.0: 8 ports detected
[   55.947684][ T4201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.970134][ T4201] tipc: Resetting bearer <eth:syzkaller0>
[   55.990428][ T4200] tipc: Disabling bearer <eth:syzkaller0>
[   56.008183][ T4204] loop4: detected capacity change from 0 to 512
[   56.039476][ T4204] EXT4-fs (loop4): #blocks per group too big: 466944
[   56.128563][ T4214] loop1: detected capacity change from 0 to 512
[   56.146562][ T4214] EXT4-fs (loop1): #blocks per group too big: 466944
[   56.414684][ T4216] loop4: detected capacity change from 0 to 512
[   56.421499][ T4216] ext3: Unknown parameter 'permit_directio'
[   56.555786][ T4217] loop1: detected capacity change from 0 to 512
[   56.562661][ T4217] ext3: Unknown parameter 'permit_directio'
[   56.683315][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   57.034295][ T4240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[   57.043337][ T4240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[   57.112767][ T4244] loop4: detected capacity change from 0 to 512
[   57.139241][ T4244] EXT4-fs (loop4): #blocks per group too big: 466944
[   57.545533][ T4249] loop4: detected capacity change from 0 to 512
[   57.552843][ T4249] ext3: Unknown parameter 'permit_directio'
[   57.709117][ T4251] loop1: detected capacity change from 0 to 512
[   57.716659][ T4251] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   57.733272][ T4251] EXT4-fs (loop1): 1 truncate cleaned up
[   58.236358][ T4259] hub 9-0:1.0: USB hub found
[   58.262056][ T4259] hub 9-0:1.0: 8 ports detected
[   58.346415][ T4265] loop4: detected capacity change from 0 to 512
[   58.371825][ T4268] loop2: detected capacity change from 0 to 512
[   58.395151][ T4265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.412682][ T4268] EXT4-fs (loop2): #blocks per group too big: 466944
[   58.493614][ T4265] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.565324][ T4265] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.219: iget: bad i_size value: 2533274857506816
[   58.601188][ T4265] hub 9-0:1.0: USB hub found
[   58.608803][ T4265] hub 9-0:1.0: 8 ports detected
[   59.042635][ T4291] loop2: detected capacity change from 0 to 512
[   59.049449][ T4291] ext3: Unknown parameter 'permit_directio'
[   59.243448][ T4293] loop4: detected capacity change from 0 to 512
[   59.264388][ T4293] EXT4-fs (loop4): #blocks per group too big: 466944
[   59.456915][ T4298] loop1: detected capacity change from 0 to 512
[   59.473560][ T4298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   59.591287][ T4299] loop4: detected capacity change from 0 to 512
[   59.598284][ T4299] ext3: Unknown parameter 'permit_directio'
[   59.792559][ T4298] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.860599][ T4298] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.224: iget: bad i_size value: 2533274857506816
[   59.883143][ T4298] hub 9-0:1.0: USB hub found
[   59.887866][ T4298] hub 9-0:1.0: 8 ports detected
[   60.066813][ T4317] netlink: 'syz.1.229': attribute type 1 has an invalid length.
[   60.074580][ T4317] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.229'.
[   60.247436][ T4327] loop4: detected capacity change from 0 to 512
[   60.254620][ T4327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   60.475437][ T4327] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   60.490420][   T29] kauditd_printk_skb: 212 callbacks suppressed
[   60.490434][   T29] audit: type=1326 audit(1753259228.131:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.556642][ T4333] loop3: detected capacity change from 0 to 164
[   60.663789][ T4327] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.233: iget: bad i_size value: 2533274857506816
[   60.725336][ T4333] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   60.833643][ T4327] hub 9-0:1.0: USB hub found
[   60.853754][   T29] audit: type=1326 audit(1753259228.171:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.877180][   T29] audit: type=1326 audit(1753259228.171:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.900473][   T29] audit: type=1326 audit(1753259228.171:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.923865][   T29] audit: type=1326 audit(1753259228.171:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.947317][   T29] audit: type=1326 audit(1753259228.171:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.970667][   T29] audit: type=1326 audit(1753259228.171:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   60.994041][   T29] audit: type=1326 audit(1753259228.171:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   61.017422][   T29] audit: type=1326 audit(1753259228.171:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   61.040730][   T29] audit: type=1326 audit(1753259228.171:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcdc44e9a9 code=0x7ffc0000
[   61.235202][ T4338] loop2: detected capacity change from 0 to 512
[   61.254747][ T4327] hub 9-0:1.0: 8 ports detected
[   61.306142][ T4338] EXT4-fs (loop2): #blocks per group too big: 466944
[   61.681492][ T4346] loop2: detected capacity change from 0 to 512
[   61.688264][ T4346] ext3: Unknown parameter 'permit_directio'
[   61.704561][ T4347] loop3: detected capacity change from 0 to 1024
[   61.915790][ T4356] loop1: detected capacity change from 0 to 512
[   61.950817][ T4357] loop3: detected capacity change from 0 to 512
[   61.969869][ T4356] EXT4-fs (loop1): #blocks per group too big: 466944
[   61.997676][ T4357] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.015284][ T4359] netlink: 'syz.4.238': attribute type 1 has an invalid length.
[   62.023017][ T4359] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.238'.
[   62.037735][ T4364] Zero length message leads to an empty skb
[   62.085300][ T4360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'.
[   62.122522][ T4367] Cannot find add_set index 0 as target
[   62.130844][ T4367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   62.171450][ T4368] loop0: detected capacity change from 0 to 512
[   62.172719][ T4367] EXT4-fs (loop3): Remounting filesystem read-only
[   62.185575][ T4375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.310355][ T4376] loop1: detected capacity change from 0 to 512
[   62.317296][ T4376] ext3: Unknown parameter 'permit_directio'
[   62.409775][ T4368] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.534126][ T4388] pim6reg1: entered promiscuous mode
[   62.539471][ T4388] pim6reg1: entered allmulticast mode
[   62.552098][ T4368] Cannot find add_set index 0 as target
[   62.563795][ T4368] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   62.578518][ T4368] EXT4-fs (loop0): Remounting filesystem read-only
[   62.585250][ T4388] loop2: detected capacity change from 0 to 1024
[   62.608920][ T4394] loop4: detected capacity change from 0 to 512
[   62.621585][ T4394] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.629504][ T4398] loop3: detected capacity change from 0 to 512
[   62.644670][ T4398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   62.654148][ T4394] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   62.685010][ T4398] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.685976][ T4394] EXT4-fs (loop4): 1 truncate cleaned up
[   62.725673][ T4398] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.250: iget: bad i_size value: 2533274857506816
[   62.800524][ T3311] ==================================================================
[   62.808649][ T3311] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs
[   62.816387][ T3311] 
[   62.818706][ T3311] write to 0xffff888237d25e68 of 1 bytes by task 4394 on cpu 1:
[   62.826339][ T3311]  folios_put_refs+0x285/0x2d0
[   62.831118][ T3311]  folio_batch_move_lru+0x1fd/0x230
[   62.836441][ T3311]  folio_add_lru+0x14a/0x1f0
[   62.841418][ T3311]  shmem_get_folio_gfp+0x7ab/0xd60
[   62.846534][ T3311]  shmem_fault+0xf6/0x250
[   62.851077][ T3311]  __do_fault+0xb9/0x200
[   62.855584][ T3311]  handle_mm_fault+0xf78/0x2be0
[   62.860437][ T3311]  __get_user_pages+0x1036/0x1fb0
[   62.865464][ T3311]  __mm_populate+0x243/0x3a0
[   62.870052][ T3311]  vm_mmap_pgoff+0x232/0x2e0
[   62.874637][ T3311]  ksys_mmap_pgoff+0xc2/0x310
[   62.879486][ T3311]  x64_sys_call+0x1602/0x2fb0
[   62.884158][ T3311]  do_syscall_64+0xd2/0x200
[   62.888652][ T3311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.894539][ T3311] 
[   62.896851][ T3311] read to 0xffff888237d25e68 of 1 bytes by task 3311 on cpu 0:
[   62.904382][ T3311]  __lru_add_drain_all+0x12b/0x3f0
[   62.909519][ T3311]  lru_add_drain_all+0x10/0x20
[   62.914306][ T3311]  invalidate_bdev+0x47/0x70
[   62.918893][ T3311]  ext4_put_super+0x624/0x7d0
[   62.923576][ T3311]  generic_shutdown_super+0xe6/0x210
[   62.928885][ T3311]  kill_block_super+0x2a/0x70
[   62.933565][ T3311]  ext4_kill_sb+0x42/0x80
[   62.937981][ T3311]  deactivate_locked_super+0x75/0x1c0
[   62.943353][ T3311]  deactivate_super+0x97/0xa0
[   62.948024][ T3311]  cleanup_mnt+0x269/0x2e0
[   62.952431][ T3311]  __cleanup_mnt+0x19/0x20
[   62.956843][ T3311]  task_work_run+0x131/0x1a0
[   62.961516][ T3311]  exit_to_user_mode_loop+0xe4/0x100
[   62.966796][ T3311]  do_syscall_64+0x1d6/0x200
[   62.971636][ T3311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.977525][ T3311] 
[   62.979840][ T3311] value changed: 0x1f -> 0x01
[   62.984500][ T3311] 
[   62.986812][ T3311] Reported by Kernel Concurrency Sanitizer on:
[   62.992965][ T3311] CPU: 0 UID: 0 PID: 3311 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   63.003802][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.013850][ T3311] ==================================================================
[   63.025312][ T4398] hub 9-0:1.0: USB hub found
[   63.030015][ T4398] hub 9-0:1.0: 8 ports detected
[   63.040217][ T4407] loop0: detected capacity change from 0 to 1024