last executing test programs:

4m31.312205567s ago: executing program 2 (id=340):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000000400))
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r3}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
close_range(r1, r1, 0x0)

4m30.366198011s ago: executing program 2 (id=345):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000004e0001000000000000a8978a548c"], 0x14}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002030702500000000002020207b1af8ff00000000bf"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x19f, &(0x7f00000002c0), 0x0, 0x557, &(0x7f0000000a40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
unshare(0xe000480)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaa3aa0086dd60003a04007e3a00fe8000030000000000000000000000bbff0200"], 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x26, &(0x7f0000000080))
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
close(r7)

4m29.731251574s ago: executing program 2 (id=353):
set_mempolicy(0x4003, &(0x7f0000000080)=0x7e, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000076000000ffffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_io_uring_setup(0x5a95, &(0x7f0000000300)={0x0, 0x4a67, 0x0, 0x1, 0x1dd}, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQES(&(0x7f0000465000/0x3000)=nil, 0x3000, 0x3000009, 0x20010, r2, 0x10000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00')
pread64(r4, &(0x7f0000000440)=""/249, 0xf9, 0x359)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b})
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x160)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000400)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@nodelalloc}, {}, {@bsdgroups}]}, 0x6, 0x640, &(0x7f0000000d80)="$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")
set_mempolicy(0x0, &(0x7f0000000040)=0x7ff, 0x1)

4m29.448449206s ago: executing program 2 (id=357):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="f2ffff8000000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), 0x0}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000230000009500000000000000401ddd5893e33047abb7d9574dd0183154f2771216b4593e06d6bb2449c353cc767c75a822a5c873aa2e0bfb443549f512901ae9a369b0c34fda2658859c0f70b5cfca7e45"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], <r4=>0x0, 0x9, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000640), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r3, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r5}, 0x10)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r1)
socket$netlink(0x10, 0x3, 0x8)
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"})

4m29.244392916s ago: executing program 2 (id=360):
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="000000cf133e0000000000b78677307e44b065f01b9bf79ca3000000000000000008ff3975ed44ef096ccb57de8c48b3bedea71f20106b53f216dab23aade015c0842e2f681f7424a7c057669095017db40cde91a10666ea1b8b3029bbd7cbf113ec", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
writev(0xffffffffffffffff, &(0x7f00000030c0)=[{0x0}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r3, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_map={0x1000000000000006, 0x3, 0x4002, 0x2, 0x72, 0x81}})
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))

4m28.46944828s ago: executing program 2 (id=370):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7cb, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000041, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000004c0)={0xf, {{0x2, 0x20, @multicast2}}}, 0x88)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r5)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1)
close(r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, 0x0, 0x0)
add_key$user(&(0x7f00000001c0), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0xd]}, 0x8, 0x800)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@noextend}, {@cachetag={'cachetag', 0x3d, '-#\xf6'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x33, 0x36, 0x38, 0x39, 0x36, 0x39], 0x2d, [0x37, 0x36, 0x65, 0x63], 0x2d, [0x34, 0x36, 0x64, 0x32], 0x2d, [0x34, 0x61, 0x34, 0x61], 0x2d, [0x31, 0x34, 0x62, 0x35, 0x66, 0x39, 0x35, 0x31]}}}, {@appraise}, {@context={'context', 0x3d, 'root'}}, {@dont_measure}, {@flag='dirsync'}]}})

4m28.46894843s ago: executing program 32 (id=370):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7cb, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000041, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000004c0)={0xf, {{0x2, 0x20, @multicast2}}}, 0x88)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r5)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1)
close(r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, 0x0, 0x0)
add_key$user(&(0x7f00000001c0), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0xd]}, 0x8, 0x800)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@noextend}, {@cachetag={'cachetag', 0x3d, '-#\xf6'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x33, 0x36, 0x38, 0x39, 0x36, 0x39], 0x2d, [0x37, 0x36, 0x65, 0x63], 0x2d, [0x34, 0x36, 0x64, 0x32], 0x2d, [0x34, 0x61, 0x34, 0x61], 0x2d, [0x31, 0x34, 0x62, 0x35, 0x66, 0x39, 0x35, 0x31]}}}, {@appraise}, {@context={'context', 0x3d, 'root'}}, {@dont_measure}, {@flag='dirsync'}]}})

7.051577529s ago: executing program 0 (id=2600):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = gettid()
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
connect$vsock_stream(r4, 0x0, 0x0)

6.140853584s ago: executing program 0 (id=2605):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x4, 0x0, 0x4cd7, 0x3}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@jqfmt_vfsv0}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r2}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx  \x00'}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x81, 0x6, 0x8000, 0x40f8, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0xd, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103ffffffff0000000032"], 0x28}}, 0x20000000)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10, &(0x7f0000000c00), 0x5, 0xb8b, &(0x7f0000002140)="$eJzs3M1rXOUeB/DfOXlp0uQ26eVy720RDEitKE7Tpih01boWFXTRZWMyKSHTFzMRTCiY1r26EHFRkP4JgnvrwpXgoi60/gVFLFJ007oYOfOSDM1MGtuZPn35fOCZ8zzzTOb5feeQnHNgTgJ4ak0VD3nEvog4lUVMNJ/PI2K43huJWG+87s6tC3NFy6JWe/v3LLKIuH3rwlzrvbLmdqw5GImIa69l8e+Ptq5bXV1bmq1UysvN8aGVM+cPVVfXXl48M3u6fLp89ujMq0dnXpmZ6WHWG+ff/eKZH994/tKVj6ff/HzP91kcj/HmXHuOXpmKqY3PpN1gRMz2erFEBpp52nNmgwkLAgBgW3nbOdx/YyIGYvPkbSK++ylpcQAAAEBP1AYiagAAAMATLnP9DwAAAE+41vcAbt+6MNdqab+R8HDdPBERk438rfubGzODsV7fjsRQROz+I4v221qzxo89sKlipa9/KBct+nQf8nbWL0bE/zvt/6yef7J+F/fW/HlETPdg/am7xo9T/uM9WD91fgCeTldPNA5kW49/+cb5T3Q4/g12OHbdj9THv9b5350t53+b+Qe6nP+9tcM19v/14rVuc+3nfyc/+WW+WL/YPlCof+DmxYj9g53yZxv5sy75T+1wjbG5G5e7zRX5i7yt9rDz165EHIjO+Vuy7f4/0aGFxUp5uvHYZY0D35482G399v1ftGL91rXAw1Ds/91d8t9r/5/f4RqT//ttX7e5e+fPfx3O3qn3hpvPfDC7srJ8OGI4e33r80e2r6X1mtZ7FPlfeG4z/2iH3/9O+Qcihtebn0NxLXCxuS3Gl+5ac+zAka/uP39/Ffnn73P/f7rDNb785vJ73eZS5wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8ZBHxHhkeWmjn+elUsRYRPwndueVc9WVlxbOvX92vpiLmIyhfGGxUp6OiInGOCvGh+v9zfGRu8YzEbE3Ij6bGK2PS3PnKvOpwwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBhLCLGI8tLEZFHxJ8TeV4qpa4KAAAA6LnJ1AUAAAAAfef6HwAAAJ58rv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADos73PXr2eRcT6sdF6Kww354aSVgb0W566ACCZgdQFAMkMpi4ASMY1PlCr1T7cbn6k68yufpQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCPq4L6r17OIWD82Wm+F4ebcUNLKgH7LUxcAJDOQugAgmcHUBQDJuMYHsnvMj3Sd2dXzWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dI3XW5aXIiKv9/O8VIr4V0RMxlC2sFgpT0fEnoj4eWJoVzE+nLpoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeq66urY0W6mUl3V0dHQ2Oqn/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkEJ1dW1ptlIpL1dTVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACkVl1dW5qtVMrLfeykzggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDp/BwAA//+7Wwip")
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x453, &(0x7f0000000cc0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]})
clock_gettime(0x0, &(0x7f00000004c0)={<r7=>0x0, <r8=>0x0})
r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
fcntl$setlease(r9, 0x400, 0x2)
futex(&(0x7f00000002c0), 0x8, 0x1, &(0x7f0000000500)={r7, r8+10000000}, &(0x7f0000000600), 0x1)

5.874762975s ago: executing program 0 (id=2610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x141341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
r5 = fsopen(&(0x7f0000001100)='ramfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x1}}], 0x1, 0x20004021)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
creat(&(0x7f0000000240)='./bus\x00', 0x13e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x3ffff)
sendfile(r9, r8, 0x0, 0x7ffff000)

4.370634751s ago: executing program 5 (id=2623):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440), 0x6, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x30, 0x0, 0x0})
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x17)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000100000000000000e3120000000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080))
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

4.214201612s ago: executing program 5 (id=2625):
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x28020480)
unshare(0x2c020400)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
unshare(0x840)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r3, 0x101, 0x800}, 0x14}}, 0x0)
listen(r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setregid(0xffffffffffffffff, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)

3.899858303s ago: executing program 4 (id=2627):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x22)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r2, 0x202}], 0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b9, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
creat(&(0x7f0000000280)='./file0/file1\x00', 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001800c00028005004100f60000002c00018014000300ff020000000000000000000000000001140004"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10000080)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "ffcbeac96f3967a1", "b2e91c1493941e4f44fbc7c02b9952b4", "e04b3fba", "9e5b6b60f296e999"}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
acct(&(0x7f0000000200)='./file1\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)

3.396799786s ago: executing program 3 (id=2628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006eaff000000010000060400000000000000060000170000001e6100007e3071f2dbb271"], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
unlink(0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x3c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

3.298056496s ago: executing program 5 (id=2630):
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r3, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r4 = dup2(r3, r3)
write$P9_RSTATFS(r4, &(0x7f00000000c0)={0x63, 0x9, 0x0, {0x0, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x4a}}, 0x43)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6000)
io_setup(0x200, &(0x7f0000000140)=<r6=>0x0)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39)
write$binfmt_script(r7, &(0x7f0000000080), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000}])

3.032001147s ago: executing program 1 (id=2631):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10)
r1 = msgget$private(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100ff00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xffffff7f)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}})
write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)
msgsnd(r1, &(0x7f0000000200)=ANY=[], 0x0, 0x0)
msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="4e94da2993090c953cc49be596788b3df0ed32c000677202fee28a61fc66e83f22a1dbfe0e9f70097176746a7de05c35a2b8d17a08bf28dbaecf683a917decb4e25e2f569be1e99765318399b836b19c0254a2c4f034e25d4d73ded11d7788106e0537ca11edc4949aad45e70c"], 0xfd1, 0x800)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
copy_file_range(r10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r10], 0x0, 0x26, 0x0, 0x100004, 0x1ffd, 0x0, @void, @value}, 0x28)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x13, 0x200002b0, 0x200002e0, 0x1], 0x2, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r8, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@remote})

2.978257507s ago: executing program 5 (id=2632):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x100000, 0x2, 0x0, 0x6, 0x40, 0x0, 0x8}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r0}, 0x38)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100000000000000000300"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCGIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff})
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0)

2.917939587s ago: executing program 1 (id=2633):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setresuid(0x0, 0x0, 0xee00)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000927d0ac02e3244fbbb345800baf3011733630e935ec668b3e0bb2d4687a07dc4f3105e334d7b9ea8783c0f717c8c500346"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file1'}, 0xb)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.400128639s ago: executing program 3 (id=2634):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x320000, 0x1000, 0x10000000}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000f3fffffffffffffff40a6089e2b6c20fed35a678430ebb9d49aa5530345c9130c65869a3b8ea537ed012964c36", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9b51, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r2, @ANYRES32], 0x5, 0x31e, &(0x7f0000000a80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="c9fe1694acb17dba2569190fc7de808dd510d71300000000fbff000000000018110000cb5e92e87588d6c5f20bec2ce65bd1838a498d5a926d784c888ec4cf39bfd593262d211dfe6ff3989ea59da9cba407aaffe00b38602c62dd1ec5b7097c5ecb5751be6e41353030081c79934405471af80d443e5bc21672d73674018d9c3cc7082bded336ddf0ab7124e6a747812753dfebc2c5ad8da4f37cd3ecda7b0652ff", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x1000f4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000380), 0x101bf)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)

1.635137723s ago: executing program 0 (id=2635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x140)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}], [], 0x6b}})
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}}, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xfff7fffb)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x2)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={r10, 0xdf83}, &(0x7f0000000100)=0x8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

1.586251313s ago: executing program 5 (id=2636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="1d2e000000000000000000"], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
write$binfmt_script(r3, &(0x7f0000000380), 0x208e24b)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x5522, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040045}, 0x0)

1.554534183s ago: executing program 4 (id=2637):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r2}, 0x18)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='ext4_writepages_result\x00', r1, 0x0, 0xa}, 0xffffffffffffff17)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x3d}]})
rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x10, 0x0)
syz_clone3(&(0x7f00000002c0)={0x180, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x35}, 0x0, 0x0, &(0x7f0000000240)=""/31, &(0x7f0000000280)=[0x0, 0xffffffffffffffff], 0x2}, 0x58)
ptrace$poke(0x1, r0, &(0x7f0000000080), 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TIOCMBIS(r6, 0x5416, 0x0)
r7 = fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000040)='/]{[,/$\x01\\[#@\\-^(}@!!\']{*:,##\x00', &(0x7f0000000080)='./file0\x00', r8)
r9 = io_uring_setup(0xa080, &(0x7f0000000140)={0x0, 0xd750, 0x1000, 0x3, 0x20b, 0x0, r8})
io_uring_setup(0x1208, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x3, 0x1d6, 0x0, r9})

1.508293763s ago: executing program 3 (id=2638):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r0}, &(0x7f0000000180), &(0x7f0000000300)='%pB    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
setrlimit(0x9, 0x0)
io_setup(0x2004, &(0x7f0000000680))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0)
sendmsg$802154_dgram(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000"], 0x5c}}, 0x0)
close_range(r3, r4, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li")

1.421576044s ago: executing program 0 (id=2639):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003801c000380180001800c000200657468746f6f6c000800010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000040)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r6 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$kcm(0xa, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r8 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r9, 0x0)
setregid(r9, 0xffffffffffffffff)
setgroups(0x1, &(0x7f0000000100)=[r9])
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000018000000000000002900000032"], 0x30}, 0x0)

1.392290834s ago: executing program 0 (id=2640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x10ffff)
symlinkat(&(0x7f0000000400)='./file0\x00', r5, &(0x7f0000000440)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
pipe(&(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r9, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'syz_tun\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)

1.372261474s ago: executing program 3 (id=2641):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f0000050000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000041e929d11479b30937cee39ee26c75f49a819095da4c6fd4e44423b5433304685c0d044b9bbf848da1d833b6c756dcd7da59d5f424abcb6adb9f74f45063813cea7d7a52650e23877fe0d786211ab8927ff25e3d49cbbeac6a112fd0a9ac4e111c463ab5d6f8cefeb376983eedd2"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x22081, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000002c0)=""/137, 0x4})
open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)

1.311783254s ago: executing program 1 (id=2642):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
clock_gettime(0xffffffc3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
r7 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0)
sendfile(r8, r8, 0x0, 0x6)

1.306943804s ago: executing program 5 (id=2643):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0})
fspick(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
pselect6(0x40, &(0x7f0000001680)={0x9, 0x40000000400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r6, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newchain={0x34, 0x64, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff1}, {0x10, 0xa}, {0xfff2, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xffff02ec}, @TCA_RATE={0x6, 0x5, {0x2d, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0xee7fb56f97126cd0}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x40088c0)

390.255269ms ago: executing program 1 (id=2644):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000340)=@md0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x840)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r6, 0x62, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, [0xffcef3a2a9421bd, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'vlan0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x5c, 0xf1, 0x4, 0x5c}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
pipe2$9p(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f00000000c0)=ANY=[], 0x15)
r9 = dup(0xffffffffffffffff)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="000097d79d17bcaf2d5f29e254ffc79fdaa5e46aab6895f749e6848145f4a026336a46a0c000dc9d11cb7669b968512cf6ae1974412882203d2ff8ab02c7bb3e1ddefc65548caab415ff0e430264339bd21b332513f25f8d6b5f425dbc8fcb6759947c8e24fbae0397b0f7115ecf84a3c5f365c2fbc39fdb55985139601abb94a4d52173daacb29441ef9412cd6a7b090220d0ec7a4d3ccaed40", @ANYRESHEX=r9, @ANYBLOB=',k'])

389.873238ms ago: executing program 3 (id=2645):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000003000)=""/4137, 0x1a, 0x1029, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf3, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00C\b\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r8 = gettid()
rt_sigqueueinfo(r8, 0x21, &(0x7f0000001500))
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f"], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
sendfile(r9, 0xffffffffffffffff, 0x0, 0x100)

389.711769ms ago: executing program 4 (id=2646):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f0000050000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000041e929d11479b30937cee39ee26c75f49a819095da4c6fd4e44423b5433304685c0d044b9bbf848da1d833b6c756dcd7da59d5f424abcb6adb9f74f45063813cea7d7a52650e23877fe0d786211ab8927ff25e3d49cbbeac6a112fd0a9ac4e111c463ab5d6f8cefeb376983eedd2"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x22081, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000002c0)=""/137, 0x4})
open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)

351.073769ms ago: executing program 3 (id=2647):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x141341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
r5 = fsopen(&(0x7f0000001100)='ramfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x1}}], 0x1, 0x20004021)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x13e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x3ffff)
sendfile(r9, r8, 0x0, 0x7ffff000)

330.921638ms ago: executing program 1 (id=2648):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x5608, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3f24000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00')
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x81}, 0x0, 0xf5, 0x4, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)={@map, r2, 0x11, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")

222.651429ms ago: executing program 1 (id=2649):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x775, &(0x7f0000001cc0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000005480))
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xffff}, 0x0, 0xfa00}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xfffffffc, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc08c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, r4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000140)={0xc0006010})
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r6, r6, 0x0, 0x80000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
rename(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

153.777649ms ago: executing program 4 (id=2650):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00')
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')

64.28315ms ago: executing program 4 (id=2651):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x1, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.events\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, 0x0)
r4 = syz_io_uring_setup(0x34ff, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, 0xfffffffffffffffd, 0x200540, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1})
fcntl$setown(r2, 0x8, 0x0)
io_uring_enter(r4, 0x1d2d, 0x0, 0x0, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r8, 0x400454cd, 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x40400c1)
dup3(r8, 0xffffffffffffffff, 0x80000)

0s ago: executing program 4 (id=2652):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x320000, 0x1000, 0x10000000}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000f3fffffffffffffff40a6089e2b6c20fed35a678430ebb9d49aa5530345c9130c65869a3b8ea537ed012964c36001903d58023309009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9b51, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r2, @ANYRES32], 0x5, 0x31e, &(0x7f0000000a80)="$eJzs3M9LG1sUwPFjjDGJzySLx3u8Bw8v721eN4OmXZeGolAaqKgp1UJh1EkbMk0kEywppeqq29J9V4UuxKU7ofUfcNNdu+mmOzeFLuqidEomM+anmsZorH4/IHNz7z3m3sxNOBNyZ/fO84fZtKWl9aL4gkp+ExHZE4mJTzx97tHnlANSa1UuDX15/8/07NzNRDI5PqXURGLmclwpFRl58+hJyO22NSg7sXu7n+Ofdv7Y+Wv3+8yDjKUylsrli0pX8/mPRX3eNNRixspqSk2ahm4ZKpOzjEKlPV9pT5v5paWS0nOLw+GlgmFZSs+VVNYoqWJeFQslpd/XMzmlaZoaDguOklqfmtITHQYvdHkwOCGFQkLvF5FQU0tqvScDAgAAPdWY//vKKX1H+b9EnPy/3Lma/2/8u10cur0ZcfP/rUCr/P/Kh8r/qsv/gyLSSf7/Un4i/2/OiC6WY+X/OBtGAk1VfXWPyvl/2H3/Otbubow6BfJ/AAAAAAAAAAAAAAAAAAAAAAB+BXu2HbVtO+odvb/qFgL3Mc6lg87/oIgEy2ff5vyfZ9OzcxJ0Nu75IyLms+XUcqpydDtsi4gphoxKVL4568FVLns7j1RZTN6aK278ynKq32lJpCXjxI9JVGKN8bY9cSM5PqYq3Pj9bUrh2vi4ROX31vHx+nj3+QPy/3818ZpE5d2C5MWURWddV+Ofjil1/VayIT7k9AMAAAAA4DzQ1L6W1++adlB75S4j+9fXLb8fqFxfj7a8PvdH//b3evYAAAAAAFwMVulxVjdNo3BIISRH9+m84G+vc6ChZuCwzv01M2x3PAHn9y4ix53XqzZf1bqC90OKuqagW9nZeLz5d+18rdbW+KSNKH/j4EfKFeq44/G+Ngoc8DrLZHOU75CVMNC19fzni9dfu/cGubrprYCjO691+lzBxlXnFAZO47MHAAAAwOmqJv1ezbXa5r6eDAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvmRG7p11Do9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs+JHAAAA//+3evqP")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="c9fe1694acb17dba2569190fc7de808dd510d71300000000fbff000000000018110000cb5e92e87588d6c5f20bec2ce65bd1838a498d5a926d784c888ec4cf39bfd593262d211dfe6ff3989ea59da9cba407aaffe00b38602c62dd1ec5b7097c5ecb5751be6e41353030081c79934405471af80d443e5bc21672d73674018d9c3cc7082bded336ddf0ab7124e6a747812753dfebc2c5ad8da4f37cd3ecda7b0652ff", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x1000f4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000380), 0x101bf)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)

kernel console output (not intermixed with test programs):

3.034044][T10349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.043310][T10349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.053009][ T3605] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  244.331631][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.340742][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.352541][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.371457][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.380593][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.392538][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.441421][T10402] pim6reg1: entered promiscuous mode
[  244.446835][T10402] pim6reg1: entered allmulticast mode
[  244.540252][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.549337][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  244.632284][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'.
[  245.409941][T10430] lo speed is unknown, defaulting to 1000
[  245.417195][T10430] lo speed is unknown, defaulting to 1000
[  246.161818][T10462] hub 6-0:1.0: USB hub found
[  246.166806][T10462] hub 6-0:1.0: 8 ports detected
[  246.848154][T10481] xt_hashlimit: max too large, truncated to 1048576
[  246.910096][   T29] kauditd_printk_skb: 281 callbacks suppressed
[  246.910110][   T29] audit: type=1326 audit(2000000139.830:31472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.015712][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.099120][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.119047][   T29] audit: type=1326 audit(2000000139.860:31473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.142888][   T29] audit: type=1326 audit(2000000139.860:31474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.166489][   T29] audit: type=1326 audit(2000000139.860:31475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.190072][   T29] audit: type=1326 audit(2000000139.870:31476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.213650][   T29] audit: type=1326 audit(2000000139.880:31477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.237252][   T29] audit: type=1326 audit(2000000139.930:31478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.260948][   T29] audit: type=1326 audit(2000000139.930:31479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  247.384460][T10466] netlink: 'syz.5.1978': attribute type 6 has an invalid length.
[  247.394253][   T29] audit: type=1326 audit(2000000140.320:31480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  247.417976][   T29] audit: type=1326 audit(2000000140.320:31481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  248.711273][T10513] lo speed is unknown, defaulting to 1000
[  248.719653][T10513] lo speed is unknown, defaulting to 1000
[  249.612751][T10522] netlink: 'syz.3.1995': attribute type 33 has an invalid length.
[  249.684879][T10522] team0: entered allmulticast mode
[  249.690124][T10522] team_slave_0: entered allmulticast mode
[  249.696117][T10522] team_slave_1: entered allmulticast mode
[  249.704988][T10527] team_slave_0: left allmulticast mode
[  249.713729][T10527] team0: Port device team_slave_0 removed
[  249.725337][T10527] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  249.747114][T10519] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.797484][T10519] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.820685][T10531] __nla_validate_parse: 2 callbacks suppressed
[  249.820702][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'.
[  249.837551][T10519] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.897287][T10519] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.898224][T10522] netlink: 'syz.3.1995': attribute type 3 has an invalid length.
[  249.973601][T10519] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.989684][T10519] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.003427][T10519] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.016799][T10519] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.488260][ T3399] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  250.495904][ T3399] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  250.504723][ T3399] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  250.581211][   T11] tipc: Subscription rejected, illegal request
[  250.604084][T10548] lo speed is unknown, defaulting to 1000
[  250.611171][T10548] lo speed is unknown, defaulting to 1000
[  250.761909][T10554] block device autoloading is deprecated and will be removed.
[  250.799437][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'.
[  250.862853][T10563] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  251.389399][T10572] loop3: detected capacity change from 0 to 256
[  251.398038][T10572] vfat: Bad value for 'time_offset'
[  252.235868][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'.
[  252.305190][   T29] kauditd_printk_skb: 299 callbacks suppressed
[  252.305207][   T29] audit: type=1400 audit(2000000145.150:31781): avc:  denied  { write } for  pid=10571 comm="syz.3.2011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  252.637778][   T29] audit: type=1400 audit(2000000145.310:31782): avc:  denied  { write } for  pid=10580 comm="syz.0.2014" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  252.661052][T10582] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  252.675192][T10582] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  252.698096][   T29] audit: type=1400 audit(2000000145.620:31783): avc:  denied  { create } for  pid=10585 comm="syz.4.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  252.698642][T10581] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  252.717905][   T29] audit: type=1400 audit(2000000145.620:31784): avc:  denied  { connect } for  pid=10585 comm="syz.4.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  252.767000][   T29] audit: type=1400 audit(2000000145.670:31785): avc:  denied  { setopt } for  pid=10585 comm="syz.4.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  252.790539][T10587] netlink: 'syz.4.2013': attribute type 10 has an invalid length.
[  252.798553][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2013'.
[  252.810941][T10587] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  252.837480][   T29] audit: type=1400 audit(2000000145.730:31786): avc:  denied  { write } for  pid=10580 comm="syz.0.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  252.861798][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'.
[  252.871728][   T29] audit: type=1400 audit(2000000145.800:31787): avc:  denied  { create } for  pid=10590 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  252.891568][T10591] loop3: detected capacity change from 0 to 2048
[  252.919261][   T29] audit: type=1326 audit(2000000145.840:31788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  252.943971][   T29] audit: type=1326 audit(2000000145.860:31789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  252.967599][   T29] audit: type=1326 audit(2000000145.860:31790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  253.110934][T10591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2016'.
[  253.232828][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'.
[  253.249213][T10600] hsr_slave_1 (unregistering): left promiscuous mode
[  253.552374][T10606] syz.5.2022[10606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  253.552493][T10606] syz.5.2022[10606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  253.564234][T10606] syz.5.2022[10606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  254.313425][T10632] loop3: detected capacity change from 0 to 512
[  254.359468][T10632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.373882][T10632] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.507249][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'.
[  254.570676][T10632] hub 6-0:1.0: USB hub found
[  254.600242][T10632] hub 6-0:1.0: 8 ports detected
[  254.640135][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.263731][T10648] loop3: detected capacity change from 0 to 128
[  255.280188][T10648] FAT-fs (loop3): bogus logical sector size 12
[  255.286480][T10648] FAT-fs (loop3): Can't find a valid FAT filesystem
[  255.602750][T10660] netlink: 'syz.0.2032': attribute type 10 has an invalid length.
[  255.610781][T10660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2032'.
[  255.621104][T10660] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  255.639361][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'.
[  256.479323][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'.
[  256.509174][T10670] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2038'.
[  256.518306][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  258.402276][   T29] kauditd_printk_skb: 208 callbacks suppressed
[  258.402296][   T29] audit: type=1400 audit(2000000151.320:31999): avc:  denied  { tracepoint } for  pid=10690 comm="syz.5.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  258.591842][T10691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  258.665410][T10702] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  258.667250][T10697] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  258.680231][T10697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  258.687800][T10697] vhci_hcd vhci_hcd.0: Device attached
[  258.711206][   T29] audit: type=1400 audit(2000000151.460:32000): avc:  denied  { cpu } for  pid=10690 comm="syz.5.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  258.840631][T10691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  258.874993][T10691] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(14)
[  258.881646][T10691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  258.889160][T10691] vhci_hcd vhci_hcd.0: Device attached
[  258.898354][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'.
[  258.901266][T10691] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(16)
[  258.908436][   T29] audit: type=1400 audit(2000000151.820:32001): avc:  denied  { ioctl } for  pid=10704 comm="syz.3.2046" path="socket:[27450]" dev="sockfs" ino=27450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  258.913876][T10691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  258.914004][T10691] vhci_hcd vhci_hcd.0: Device attached
[  258.938781][   T29] audit: type=1400 audit(2000000151.820:32002): avc:  denied  { bind } for  pid=10704 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  258.971417][   T29] audit: type=1400 audit(2000000151.820:32003): avc:  denied  { write } for  pid=10704 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  259.003459][ T3396] vhci_hcd: vhci_device speed not set
[  259.065203][ T3396] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  259.367991][   T29] audit: type=1400 audit(2000000152.290:32004): avc:  denied  { write } for  pid=10690 comm="syz.5.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  259.411838][T10691] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2044'.
[  259.587025][T10691] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2044'.
[  259.634264][T10711] vhci_hcd: connection closed
[  259.634700][T10698] vhci_hcd: connection reset by peer
[  259.644874][T10709] vhci_hcd: connection closed
[  259.646456][  T167] vhci_hcd: stop threads
[  259.655524][  T167] vhci_hcd: release socket
[  259.659951][  T167] vhci_hcd: disconnect device
[  259.676057][T10721] loop3: detected capacity change from 0 to 128
[  259.685489][T10721] ext4: Unknown parameter 'mask'
[  259.705813][  T167] vhci_hcd: stop threads
[  259.710306][  T167] vhci_hcd: release socket
[  259.714867][  T167] vhci_hcd: disconnect device
[  259.748989][T10716] tipc: Invalid UDP bearer configuration
[  259.749066][T10716] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  259.763086][   T29] audit: type=1326 audit(2000000152.650:32005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  259.786840][   T29] audit: type=1326 audit(2000000152.650:32006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  259.794069][  T167] vhci_hcd: stop threads
[  259.810708][   T29] audit: type=1326 audit(2000000152.650:32007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  259.814962][  T167] vhci_hcd: release socket
[  259.814977][  T167] vhci_hcd: disconnect device
[  259.839154][   T29] audit: type=1326 audit(2000000152.650:32008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  259.862043][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'.
[  259.913223][T10727] xt_hashlimit: max too large, truncated to 1048576
[  259.984722][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.031201][T10730] hub 6-0:1.0: USB hub found
[  260.036300][T10730] hub 6-0:1.0: 8 ports detected
[  260.124983][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.458647][T10736] xt_hashlimit: max too large, truncated to 1048576
[  260.564774][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.575802][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.728637][T10747] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10747 comm=syz.3.2057
[  260.748016][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'.
[  261.082594][T10759] pim6reg: entered allmulticast mode
[  261.090326][T10759] pim6reg: left allmulticast mode
[  261.127689][T10762] sg_write: process 934 (syz.5.2062) changed security contexts after opening file descriptor, this is not allowed.
[  261.561987][T10769] hub 6-0:1.0: USB hub found
[  261.592078][T10769] hub 6-0:1.0: 8 ports detected
[  261.953398][T10783] loop3: detected capacity change from 0 to 128
[  261.975446][T10783] ext4: Unknown parameter 'mask'
[  262.051685][T10786] lo speed is unknown, defaulting to 1000
[  262.058916][T10786] lo speed is unknown, defaulting to 1000
[  262.096988][T10790] syz.1.2069: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  262.111650][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.1.2069 Tainted: G        W          6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  262.123733][T10790] Tainted: [W]=WARN
[  262.127555][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  262.137625][T10790] Call Trace:
[  262.140929][T10790]  <TASK>
[  262.143890][T10790]  dump_stack_lvl+0xf2/0x150
[  262.148557][T10790]  dump_stack+0x15/0x20
[  262.152724][T10790]  warn_alloc+0x145/0x1b0
[  262.157123][T10790]  ? __schedule+0x6fa/0x930
[  262.161777][T10790]  ? __vmalloc_node_range_noprof+0x88/0xe80
[  262.167752][T10790]  __vmalloc_node_range_noprof+0xaa/0xe80
[  262.173538][T10790]  ? __pfx_futex_wake_mark+0x10/0x10
[  262.178958][T10790]  ? __rcu_read_unlock+0x4e/0x70
[  262.183923][T10790]  ? avc_has_perm_noaudit+0x1cc/0x210
[  262.189360][T10790]  ? should_fail_ex+0x31/0x230
[  262.194284][T10790]  ? xskq_create+0x36/0xd0
[  262.198758][T10790]  ? should_failslab+0x8f/0xb0
[  262.203651][T10790]  vmalloc_user_noprof+0x59/0x70
[  262.208699][T10790]  ? xskq_create+0x79/0xd0
[  262.213169][T10790]  xskq_create+0x79/0xd0
[  262.217480][T10790]  xsk_init_queue+0x82/0xd0
[  262.222069][T10790]  xsk_setsockopt+0x409/0x520
[  262.226793][T10790]  ? __pfx_xsk_setsockopt+0x10/0x10
[  262.232121][T10790]  __sys_setsockopt+0x187/0x200
[  262.237163][T10790]  __x64_sys_setsockopt+0x66/0x80
[  262.242239][T10790]  x64_sys_call+0x282e/0x2dc0
[  262.246969][T10790]  do_syscall_64+0xc9/0x1c0
[  262.251493][T10790]  ? clear_bhb_loop+0x55/0xb0
[  262.256306][T10790]  ? clear_bhb_loop+0x55/0xb0
[  262.261036][T10790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.266989][T10790] RIP: 0033:0x7f68c3070809
[  262.271457][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.291177][T10790] RSP: 002b:00007f68c16c6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  262.299695][T10790] RAX: ffffffffffffffda RBX: 00007f68c3236080 RCX: 00007f68c3070809
[  262.307737][T10790] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010
[  262.315815][T10790] RBP: 00007f68c30e393e R08: 0000000000000020 R09: 0000000000000000
[  262.323814][T10790] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000
[  262.332028][T10790] R13: 0000000000000000 R14: 00007f68c3236080 R15: 00007fff080daeb8
[  262.340101][T10790]  </TASK>
[  262.343411][T10790] Mem-Info:
[  262.346730][T10790] active_anon:6932 inactive_anon:0 isolated_anon:0
[  262.346730][T10790]  active_file:3684 inactive_file:20487 isolated_file:0
[  262.346730][T10790]  unevictable:0 dirty:166 writeback:0
[  262.346730][T10790]  slab_reclaimable:2998 slab_unreclaimable:16711
[  262.346730][T10790]  mapped:33133 shmem:3255 pagetables:957
[  262.346730][T10790]  sec_pagetables:0 bounce:0
[  262.346730][T10790]  kernel_misc_reclaimable:0
[  262.346730][T10790]  free:1855600 free_pcp:15391 free_cma:0
[  262.391772][T10790] Node 0 active_anon:27728kB inactive_anon:0kB active_file:14736kB inactive_file:81948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132532kB dirty:664kB writeback:0kB shmem:13020kB writeback_tmp:0kB kernel_stack:3024kB pagetables:3828kB sec_pagetables:0kB all_unreclaimable? no
[  262.419815][T10790] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  262.446759][T10790] lowmem_reserve[]: 0 2866 7844 0
[  262.451871][T10790] Node 0 DMA32 free:2950308kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB
[  262.480722][T10790] lowmem_reserve[]: 0 0 4978 0
[  262.485581][T10790] Node 0 Normal free:4456732kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:16940kB inactive_anon:0kB active_file:14736kB inactive_file:81948kB unevictable:0kB writepending:664kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:68788kB local_pcp:37704kB free_cma:0kB
[  262.516336][T10790] lowmem_reserve[]: 0 0 0 0
[  262.516365][T10790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  262.516553][T10790] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950308kB
[  262.516788][T10790] Node 0 Normal: 649*4kB (UME) 293*8kB (UME) 501*16kB (UME) 422*32kB (UME) 166*64kB (UME) 100*128kB (UME) 156*256kB (UME) 115*512kB (UME) 57*1024kB (UME) 41*2048kB (UME) 1017*4096kB (UM) = 4456668kB
[  262.517115][T10790] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  262.517131][T10790] 24530 total pagecache pages
[  262.517138][T10790] 5 pages in swap cache
[  262.517201][T10790] Free swap  = 123528kB
[  262.517209][T10790] Total swap = 124996kB
[  262.517217][T10790] 2097051 pages RAM
[  262.517224][T10790] 0 pages HighMem/MovableOnly
[  262.517231][T10790] 80174 pages reserved
[  262.595086][T10790] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2069'.
[  262.677922][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'.
[  262.774745][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2071'.
[  262.866163][T10814] rdma_rxe: rxe_newlink: failed to add vcan0
[  262.923359][T10819] loop3: detected capacity change from 0 to 128
[  263.567799][T10821] bio_check_eod: 20 callbacks suppressed
[  263.567819][T10821] syz.3.2078: attempt to access beyond end of device
[  263.567819][T10821] loop3: rw=2049, sector=196, nr_sectors = 8 limit=128
[  263.587673][T10827] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.2079'.
[  263.599097][T10821] syz.3.2078: attempt to access beyond end of device
[  263.599097][T10821] loop3: rw=2049, sector=212, nr_sectors = 8 limit=128
[  263.624252][T10821] syz.3.2078: attempt to access beyond end of device
[  263.624252][T10821] loop3: rw=2049, sector=228, nr_sectors = 8 limit=128
[  263.626091][   T29] kauditd_printk_skb: 264 callbacks suppressed
[  263.626110][   T29] audit: type=1400 audit(2000000156.550:32273): avc:  denied  { read } for  pid=10825 comm="syz.4.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  263.647481][T10821] syz.3.2078: attempt to access beyond end of device
[  263.647481][T10821] loop3: rw=2049, sector=244, nr_sectors = 8 limit=128
[  263.687172][   T29] audit: type=1400 audit(2000000156.590:32274): avc:  denied  { create } for  pid=10825 comm="syz.4.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  263.692607][T10821] syz.3.2078: attempt to access beyond end of device
[  263.692607][T10821] loop3: rw=2049, sector=260, nr_sectors = 8 limit=128
[  263.725432][T10821] syz.3.2078: attempt to access beyond end of device
[  263.725432][T10821] loop3: rw=2049, sector=276, nr_sectors = 8 limit=128
[  263.725610][   T29] audit: type=1326 audit(2000000156.650:32275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  263.762684][   T29] audit: type=1326 audit(2000000156.650:32276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  263.764346][T10821] syz.3.2078: attempt to access beyond end of device
[  263.764346][T10821] loop3: rw=2049, sector=292, nr_sectors = 8 limit=128
[  263.822865][T10821] syz.3.2078: attempt to access beyond end of device
[  263.822865][T10821] loop3: rw=2049, sector=308, nr_sectors = 8 limit=128
[  263.863218][T10821] syz.3.2078: attempt to access beyond end of device
[  263.863218][T10821] loop3: rw=2049, sector=324, nr_sectors = 8 limit=128
[  263.882435][T10821] syz.3.2078: attempt to access beyond end of device
[  263.882435][T10821] loop3: rw=2049, sector=340, nr_sectors = 8 limit=128
[  263.953295][   T29] audit: type=1400 audit(2000000156.870:32277): avc:  denied  { create } for  pid=10831 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  263.977765][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2081'.
[  264.016511][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2081'.
[  264.038875][   T29] audit: type=1400 audit(2000000156.870:32278): avc:  denied  { unmount } for  pid=9359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  264.076658][   T29] audit: type=1400 audit(2000000157.000:32279): avc:  denied  { connect } for  pid=10831 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.099541][   T29] audit: type=1400 audit(2000000157.000:32280): avc:  denied  { setopt } for  pid=10831 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.105791][ T3396] usb 11-1: enqueue for inactive port 0
[  264.119222][   T29] audit: type=1400 audit(2000000157.000:32281): avc:  denied  { read } for  pid=10831 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.141877][ T3396] usb 11-1: enqueue for inactive port 0
[  264.144069][   T29] audit: type=1400 audit(2000000157.000:32282): avc:  denied  { setopt } for  pid=10831 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  264.200694][T10810] netlink: 'syz.1.2075': attribute type 6 has an invalid length.
[  264.300672][ T3396] vhci_hcd: vhci_device speed not set
[  264.442775][T10850] siw: device registration error -23
[  264.949682][T10854] loop3: detected capacity change from 0 to 128
[  264.966749][T10854] ext4: Unknown parameter 'mask'
[  265.240732][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'.
[  265.266844][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2088'.
[  265.687142][T10864] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2090'.
[  265.864898][T10864] IPv6: Can't replace route, no match found
[  265.963736][T10864] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2090'.
[  266.007988][   T28] tipc: Subscription rejected, illegal request
[  266.205561][T10874] loop3: detected capacity change from 0 to 512
[  266.212241][T10874] EXT4-fs: Ignoring removed orlov option
[  266.224380][T10874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  266.240365][T10874] EXT4-fs (loop3): orphan cleanup on readonly fs
[  266.248256][T10874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2093: bg 0: block 248: padding at end of block bitmap is not set
[  266.304981][T10874] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2093: Failed to acquire dquot type 1
[  266.319053][T10874] EXT4-fs (loop3): 1 truncate cleaned up
[  266.325324][T10874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  266.344768][T10874] EXT4-fs: Ignoring removed orlov option
[  266.350632][T10874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  266.359242][T10874] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  266.375771][T10874] EXT4-fs error (device loop3): __ext4_remount:6749: comm syz.3.2093: Abort forced by user
[  266.386224][T10874] EXT4-fs (loop3): Remounting filesystem read-only
[  266.392758][T10874] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  266.403174][T10874] ext4 filesystem being remounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.426839][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.417313][   T35] IPVS: starting estimator thread 0...
[  267.486847][T10892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2099'.
[  267.506037][T10893] IPVS: using max 2064 ests per chain, 103200 per kthread
[  267.560158][T10905] loop3: detected capacity change from 0 to 1024
[  267.596882][T10905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.622630][T10892] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  267.656095][T10892] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  267.668538][T10892] EXT4-fs (loop3): This should not happen!! Data will be lost
[  267.668538][T10892] 
[  267.678265][T10892] EXT4-fs (loop3): Total free blocks count 0
[  267.684278][T10892] EXT4-fs (loop3): Free/Dirty block details
[  267.690202][T10892] EXT4-fs (loop3): free_blocks=68451041280
[  267.696134][T10892] EXT4-fs (loop3): dirty_blocks=64
[  267.701272][T10892] EXT4-fs (loop3): Block reservation details
[  267.707306][T10892] EXT4-fs (loop3): i_reserved_data_blocks=4
[  267.804663][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.913573][T10911] Â: renamed from vlan0 (while UP)
[  267.941771][T10911] loop3: detected capacity change from 0 to 512
[  267.960944][T10911] EXT4-fs: Ignoring removed nobh option
[  267.979944][T10911] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  267.994600][T10911] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2102: attempt to clear invalid blocks 2 len 1
[  268.028506][T10911] EXT4-fs (loop3): Remounting filesystem read-only
[  268.043082][T10911] EXT4-fs (loop3): 1 truncate cleaned up
[  268.051457][T10911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.064276][T10911] SELinux: (dev loop3, type ext4) getxattr errno 5
[  268.072446][T10911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.111648][T10894] netlink: 'syz.4.2096': attribute type 6 has an invalid length.
[  268.218383][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.236358][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.265550][ T3396] usb usb8-port2: attempt power cycle
[  268.412480][T10925] pim6reg: entered allmulticast mode
[  268.440834][T10925] pim6reg: left allmulticast mode
[  268.502453][T10919] loop3: detected capacity change from 0 to 32768
[  268.573175][T10919]  loop3: p1 p2 p3 < p5 p6 >
[  268.578982][T10919] loop3: p1 size 242222080 extends beyond EOD, truncated
[  268.588262][T10919] loop3: p2 start 4294967295 is beyond EOD, truncated
[  268.636249][   T29] kauditd_printk_skb: 288 callbacks suppressed
[  268.636328][   T29] audit: type=1326 audit(2000000161.560:32569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.666435][   T29] audit: type=1326 audit(2000000161.560:32570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.692159][   T29] audit: type=1326 audit(2000000161.560:32571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.715838][   T29] audit: type=1326 audit(2000000161.560:32572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.739491][   T29] audit: type=1326 audit(2000000161.560:32573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.763004][   T29] audit: type=1326 audit(2000000161.560:32574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.786620][   T29] audit: type=1326 audit(2000000161.560:32575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.810225][   T29] audit: type=1326 audit(2000000161.560:32576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.833953][   T29] audit: type=1326 audit(2000000161.560:32577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.857610][   T29] audit: type=1326 audit(2000000161.560:32578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  268.907620][T10927] Cannot find del_set index 4 as target
[  268.992587][T10941] lo speed is unknown, defaulting to 1000
[  268.999774][T10941] lo speed is unknown, defaulting to 1000
[  269.089803][T10948] lo speed is unknown, defaulting to 1000
[  269.096040][T10948] lo speed is unknown, defaulting to 1000
[  269.132335][T10951] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2116'.
[  269.622627][T10956] loop3: detected capacity change from 0 to 164
[  269.693507][T10956] Unable to read rock-ridge attributes
[  269.747467][T10956] Unable to read rock-ridge attributes
[  269.866521][T10962] pim6reg: left allmulticast mode
[  270.062008][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'.
[  270.295904][ T3396] usb usb8-port2: unable to enumerate USB device
[  270.457810][T10981] loop3: detected capacity change from 0 to 512
[  270.492388][T10981] EXT4-fs: Ignoring removed orlov option
[  270.501087][T10980] lo speed is unknown, defaulting to 1000
[  270.505185][T10981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  270.519946][T10982] tipc: Enabling of bearer <
th:sy> rejected, media not registered
[  270.524266][T10981] EXT4-fs (loop3): 1 orphan inode deleted
[  270.527992][T10980] lo speed is unknown, defaulting to 1000
[  270.533799][T10981] EXT4-fs (loop3): 1 truncate cleaned up
[  270.534718][T10981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.606914][T10981] veth0_to_team: entered promiscuous mode
[  270.612695][T10981] veth0_to_team: entered allmulticast mode
[  270.660067][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.679047][T10988] binfmt_misc: register: failed to install interpreter file ./file0
[  270.765346][T10994] xt_hashlimit: max too large, truncated to 1048576
[  270.792942][T10990] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.839620][T10990] bond1: entered allmulticast mode
[  270.845434][T10990] team0: Port device bond1 added
[  270.895167][T10994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.905458][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.071963][T11009] loop3: detected capacity change from 0 to 512
[  271.106283][T11009] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  271.117902][T11009] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  271.128050][T11009] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2133: Corrupt directory, running e2fsck is recommended
[  271.156938][T11009] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  271.169815][T11009] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2133: corrupted in-inode xattr: invalid ea_ino
[  271.227645][T11009] EXT4-fs (loop3): Remounting filesystem read-only
[  271.234711][T11009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.267473][T11009] SELinux: (dev loop3, type ext4) getxattr errno 5
[  271.281184][T11009] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.361620][T11009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.408580][T11009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.469399][T11009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.548908][T11009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.635020][T11009] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.648394][T11009] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.671133][T11009] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.688776][T11042] tmpfs: Unknown parameter 'inodes\2'
[  271.699588][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2136'.
[  271.699584][T11009] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.735999][T11042] ÿÿÿÿ: renamed from sit0 (while UP)
[  271.799534][T11045] xt_hashlimit: max too large, truncated to 1048576
[  271.854018][T11047] ªªªªª»: renamed from vlan0 (while UP)
[  271.862415][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.871679][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.893485][T11050] tap0: tun_chr_ioctl cmd 1074025675
[  271.898868][T11050] tap0: persist enabled
[  271.903443][T11050] tap0: tun_chr_ioctl cmd 1074025675
[  271.908837][T11050] tap0: persist enabled
[  272.285638][T11057] wireguard0: entered promiscuous mode
[  272.291178][T11057] wireguard0: entered allmulticast mode
[  272.328919][T11061] netlink: 'syz.4.2140': attribute type 10 has an invalid length.
[  272.418782][T11068] xt_hashlimit: max too large, truncated to 1048576
[  272.482972][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.503164][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.688203][T11074] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2145'.
[  272.721391][T11070] IPv6: Can't replace route, no match found
[  272.733959][T11070] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2145'.
[  272.972823][T11086] syzkaller0: entered promiscuous mode
[  272.978388][T11086] syzkaller0: entered allmulticast mode
[  273.117934][T11089] Cannot find del_set index 4 as target
[  273.184642][T11094] loop3: detected capacity change from 0 to 128
[  273.192874][T11094] ext4: Unknown parameter 'mask'
[  273.366189][T11097] ip6t_rpfilter: unknown options
[  274.106221][   T29] kauditd_printk_skb: 456 callbacks suppressed
[  274.106240][   T29] audit: type=1326 audit(2000000167.010:33035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.136166][   T29] audit: type=1326 audit(2000000167.020:33036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.159813][   T29] audit: type=1326 audit(2000000167.020:33037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.183797][   T29] audit: type=1326 audit(2000000167.020:33038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe30a3b2727 code=0x7ffc0000
[  274.207448][   T29] audit: type=1326 audit(2000000167.020:33039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.213652][T11106] loop3: detected capacity change from 0 to 128
[  274.231081][   T29] audit: type=1326 audit(2000000167.020:33040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.239144][T11106] ext4: Unknown parameter 'mask'
[  274.261176][   T29] audit: type=1326 audit(2000000167.020:33041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.289808][   T29] audit: type=1326 audit(2000000167.020:33042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.313681][   T29] audit: type=1326 audit(2000000167.020:33043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.337248][   T29] audit: type=1326 audit(2000000167.020:33044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30a3b0809 code=0x7ffc0000
[  274.408571][T11104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.437397][T11112] No such timeout policy "syz0"
[  274.463675][T11112] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  274.502528][T11104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.548014][T11117] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  274.568885][T11104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.626826][T11104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.712713][T11104] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.760259][T11104] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.839942][T11104] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.868275][T11104] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.002683][T11143] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2165'.
[  275.011902][T11143] 0ªX¹¦À: renamed from caif0
[  275.023896][T11143] 0ªX¹¦À: entered allmulticast mode
[  275.029282][T11143] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  275.540936][T11183] netlink: 'syz.5.2169': attribute type 322 has an invalid length.
[  275.628058][T11186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35316 sclass=netlink_route_socket pid=11186 comm=syz.5.2169
[  275.963491][T11212] tls_set_device_offload: netdev not found
[  276.058629][T11212] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  276.242467][T11247] xt_hashlimit: max too large, truncated to 1048576
[  276.337400][T11247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.365896][T11247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.768205][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'.
[  276.837954][T11340] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  277.913418][T11383] syz.4.2187[11383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.913527][T11383] syz.4.2187[11383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.956843][T11383] syz.4.2187[11383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  278.110029][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'.
[  278.131372][T11399] batman_adv: batadv0: Interface deactivated: dummy0
[  278.138332][T11399] batman_adv: batadv0: Removing interface: dummy0
[  278.149864][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.157468][T11399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.166465][T11399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.189205][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.205890][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.363504][T11409] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2192'.
[  278.902356][    T8] kernel write not supported for file /1277/net/psched (pid: 8 comm: kworker/0:0)
[  278.942043][T11449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2196'.
[  279.108554][T11455] wireguard1: entered promiscuous mode
[  279.114082][T11455] wireguard1: entered allmulticast mode
[  279.299273][T11457] netlink: 'syz.1.2198': attribute type 10 has an invalid length.
[  279.689908][T11353] syz.0.2182 (11353) used greatest stack depth: 6088 bytes left
[  279.717806][T11463] loop3: detected capacity change from 0 to 128
[  279.724984][   T29] kauditd_printk_skb: 547 callbacks suppressed
[  279.724998][   T29] audit: type=1326 audit(2000000172.640:33592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.1.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  279.755185][   T29] audit: type=1326 audit(2000000172.660:33593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.778984][   T29] audit: type=1326 audit(2000000172.660:33594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.802670][   T29] audit: type=1326 audit(2000000172.660:33595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.826296][   T29] audit: type=1326 audit(2000000172.660:33596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.849987][   T29] audit: type=1326 audit(2000000172.660:33597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.874475][   T29] audit: type=1326 audit(2000000172.680:33598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.1.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  279.898107][   T29] audit: type=1326 audit(2000000172.700:33599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.921754][   T29] audit: type=1326 audit(2000000172.700:33600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11464 comm="syz.5.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  279.953219][   T29] audit: type=1326 audit(2000000172.800:33601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.1.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  280.095181][T11470] bio_check_eod: 24 callbacks suppressed
[  280.095199][T11470] syz.3.2202: attempt to access beyond end of device
[  280.095199][T11470] loop3: rw=2049, sector=268, nr_sectors = 16 limit=128
[  280.118686][T11473] bridge_slave_0: default FDB implementation only supports local addresses
[  280.135361][T11470] syz.3.2202: attempt to access beyond end of device
[  280.135361][T11470] loop3: rw=2049, sector=292, nr_sectors = 8 limit=128
[  280.157891][T11470] syz.3.2202: attempt to access beyond end of device
[  280.157891][T11470] loop3: rw=2049, sector=308, nr_sectors = 8 limit=128
[  280.185803][T11470] syz.3.2202: attempt to access beyond end of device
[  280.185803][T11470] loop3: rw=2049, sector=324, nr_sectors = 8 limit=128
[  280.200241][T11470] syz.3.2202: attempt to access beyond end of device
[  280.200241][T11470] loop3: rw=2049, sector=340, nr_sectors = 8 limit=128
[  280.221987][T11470] syz.3.2202: attempt to access beyond end of device
[  280.221987][T11470] loop3: rw=2049, sector=356, nr_sectors = 8 limit=128
[  280.245782][T11470] syz.3.2202: attempt to access beyond end of device
[  280.245782][T11470] loop3: rw=2049, sector=372, nr_sectors = 8 limit=128
[  280.268449][T11470] syz.3.2202: attempt to access beyond end of device
[  280.268449][T11470] loop3: rw=2049, sector=388, nr_sectors = 8 limit=128
[  280.296941][T11470] syz.3.2202: attempt to access beyond end of device
[  280.296941][T11470] loop3: rw=2049, sector=404, nr_sectors = 8 limit=128
[  280.317858][T11470] syz.3.2202: attempt to access beyond end of device
[  280.317858][T11470] loop3: rw=2049, sector=420, nr_sectors = 8 limit=128
[  280.616125][T11494] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2208'.
[  281.598192][T11507] wireguard0: entered promiscuous mode
[  281.603776][T11507] wireguard0: entered allmulticast mode
[  281.741240][T11513] netlink: 'syz.5.2211': attribute type 10 has an invalid length.
[  281.762994][T11510] netlink: 'syz.0.2213': attribute type 21 has an invalid length.
[  281.828689][T11514] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2212' sets config #0
[  281.856300][T11510] netlink: 'syz.0.2213': attribute type 6 has an invalid length.
[  281.864185][T11510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2213'.
[  282.108771][T11516] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  282.615603][T11533] No such timeout policy "syz0"
[  282.622733][T11533] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  282.682680][T11534] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  282.694521][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.706209][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.715940][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.727180][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.313874][T11546] Invalid ELF header magic: != ELF
[  283.471868][T11558] ip6t_rpfilter: unknown options
[  283.712788][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory
[  283.848831][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2227'.
[  283.863463][T11564] loop3: detected capacity change from 0 to 512
[  283.918142][T11564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.013398][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.264459][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2232'.
[  284.273584][T11577] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2232'.
[  284.341997][T11581] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  284.740356][T11577] bond0: (slave bond_slave_0): Releasing backup interface
[  284.831035][T11577] bond0: (slave bond_slave_1): Releasing backup interface
[  284.882439][T11577] infiniband syz1: set down
[  284.926235][T11577] team0: Port device team_slave_0 removed
[  284.933622][T11594] serio: Serial port ptm0
[  284.964800][T11577] team0: Port device team_slave_1 removed
[  284.989411][   T29] kauditd_printk_skb: 416 callbacks suppressed
[  284.989429][   T29] audit: type=1400 audit(2000002737.907:34018): avc:  denied  { view } for  pid=11593 comm="syz.4.2236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  285.073310][T11577] bond0: (slave geneve1): Releasing backup interface
[  285.081832][T11577] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.090972][T11577] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.099971][T11577] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.108934][T11577] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.184592][T11577] bond0: (slave netdevsim1): Releasing backup interface
[  285.214325][T11601] xt_hashlimit: max too large, truncated to 1048576
[  285.224374][   T29] audit: type=1326 audit(2000002738.147:34019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.254672][   T29] audit: type=1326 audit(2000002738.147:34020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.278484][   T29] audit: type=1326 audit(2000002738.147:34021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.286819][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.302100][   T29] audit: type=1326 audit(2000002738.147:34022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.330071][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.362155][   T29] audit: type=1326 audit(2000002738.197:34023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.385895][   T29] audit: type=1326 audit(2000002738.197:34024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.409616][   T29] audit: type=1326 audit(2000002738.207:34025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.433158][   T29] audit: type=1326 audit(2000002738.207:34026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.456864][   T29] audit: type=1326 audit(2000002738.207:34027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  285.487473][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2238'.
[  285.556378][T11612] siw: device registration error -23
[  288.266870][T11619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2252'.
[  288.268911][T11624] loop3: detected capacity change from 0 to 1764
[  288.309981][T11623] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.326832][T11624] iso9660: Corrupted directory entry in block 2 of inode 1920
[  288.352085][T11624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2244'.
[  288.362998][T11634] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2246' sets config #1
[  288.373319][T11623] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.407283][T11623] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.467903][T11623] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.533486][T11623] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.556577][T11623] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.570774][T11623] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.589389][T11623] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.622238][T11649] xt_hashlimit: overflow, try lower: 18446744073709551614/7
[  289.066830][T11708] xt_hashlimit: max too large, truncated to 1048576
[  289.133642][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.155285][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.501469][T11738] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2258'.
[  289.510599][T11738] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2258'.
[  289.524676][T11733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2256'.
[  289.591807][T11746] netlink: 'syz.1.2261': attribute type 2 has an invalid length.
[  289.599722][T11746] netlink: 'syz.1.2261': attribute type 8 has an invalid length.
[  289.607518][T11746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2261'.
[  289.633465][T11746] netlink: 'syz.1.2261': attribute type 39 has an invalid length.
[  289.720157][T11748] 9pnet_fd: Insufficient options for proto=fd
[  289.736742][T11748] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2262'.
[  290.456962][T11754] nftables ruleset with unbound chain
[  290.463986][   T29] kauditd_printk_skb: 507 callbacks suppressed
[  290.464001][   T29] audit: type=1400 audit(2000002743.377:34535): avc:  denied  { bind } for  pid=11753 comm="syz.1.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  290.486438][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'.
[  290.490317][   T29] audit: type=1400 audit(2000002743.407:34536): avc:  denied  { bind } for  pid=11753 comm="syz.1.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  290.551381][T11756] lo speed is unknown, defaulting to 1000
[  290.558074][T11756] lo speed is unknown, defaulting to 1000
[  290.656277][T11762] xt_hashlimit: max too large, truncated to 1048576
[  290.677252][   T29] audit: type=1326 audit(2000002743.597:34537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.701034][   T29] audit: type=1326 audit(2000002743.597:34538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.724726][   T29] audit: type=1326 audit(2000002743.597:34539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.748422][   T29] audit: type=1326 audit(2000002743.597:34540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.772227][   T29] audit: type=1326 audit(2000002743.597:34541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.798547][T11762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.807211][T11762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.815235][   T29] audit: type=1326 audit(2000002743.717:34542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.838902][   T29] audit: type=1326 audit(2000002743.717:34543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  290.862581][   T29] audit: type=1326 audit(2000002743.717:34544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  291.584608][T11770] loop3: detected capacity change from 0 to 2048
[  291.616227][T11770]  loop3: p1 < > p4
[  291.620902][T11770] loop3: p4 size 8388608 extends beyond EOD, truncated
[  291.655149][ T3021]  loop3: p1 < > p4
[  291.659677][ T3021] loop3: p4 size 8388608 extends beyond EOD, truncated
[  291.685196][T10932] udevd[10932]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  291.686326][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  291.782565][T11776] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  291.817549][T11778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  291.844061][T11780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2273'.
[  291.870282][T11780] GPL[11780] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.870371][T11780] GPL[11780] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.881445][T11780] GPL[11780] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.949455][T11782] loop3: detected capacity change from 0 to 1024
[  291.979897][T11782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.011521][T11782] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  292.026984][T11782] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 32 with error 28
[  292.039525][T11782] EXT4-fs (loop3): This should not happen!! Data will be lost
[  292.039525][T11782] 
[  292.049470][T11782] EXT4-fs (loop3): Total free blocks count 0
[  292.055591][T11782] EXT4-fs (loop3): Free/Dirty block details
[  292.061579][T11782] EXT4-fs (loop3): free_blocks=68451041280
[  292.067499][T11782] EXT4-fs (loop3): dirty_blocks=64
[  292.072654][T11782] EXT4-fs (loop3): Block reservation details
[  292.078787][T11782] EXT4-fs (loop3): i_reserved_data_blocks=4
[  292.143023][T11301] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  292.243030][   T24] IPVS: starting estimator thread 0...
[  292.336499][T11820] IPVS: using max 2016 ests per chain, 100800 per kthread
[  292.490178][T11839] loop3: detected capacity change from 0 to 512
[  292.505778][T11839] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  292.527826][T11839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.547376][T11839] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2284: corrupted inode contents
[  292.559771][T11839] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2284: mark_inode_dirty error
[  292.571570][T11839] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2284: corrupted inode contents
[  292.615978][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.645962][T11850] loop3: detected capacity change from 0 to 512
[  292.659534][T11850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.672494][T11850] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.686882][T11850] Process accounting resumed
[  292.693913][T11850] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  292.717406][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.743970][T11854] netlink: 'syz.3.2287': attribute type 21 has an invalid length.
[  292.752121][T11854] netlink: 'syz.3.2287': attribute type 1 has an invalid length.
[  292.759951][T11854] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2287'.
[  292.979611][T11881] xt_hashlimit: max too large, truncated to 1048576
[  293.042941][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.052539][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.396934][T11900] vlan0: entered allmulticast mode
[  293.402150][T11900] bridge_slave_0: entered allmulticast mode
[  293.410325][T11900] bridge_slave_0: left allmulticast mode
[  293.789687][T11918] xt_hashlimit: max too large, truncated to 1048576
[  293.856483][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.866485][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.084214][T11901] syz.5.2295 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  294.098441][T11901] CPU: 1 UID: 0 PID: 11901 Comm: syz.5.2295 Tainted: G        W          6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  294.110558][T11901] Tainted: [W]=WARN
[  294.114363][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  294.124575][T11901] Call Trace:
[  294.127910][T11901]  <TASK>
[  294.130850][T11901]  dump_stack_lvl+0xf2/0x150
[  294.135453][T11901]  dump_stack+0x15/0x20
[  294.139617][T11901]  dump_header+0x83/0x2d0
[  294.144002][T11901]  oom_kill_process+0x341/0x4c0
[  294.148869][T11901]  out_of_memory+0x9af/0xbe0
[  294.153484][T11901]  ? css_next_descendant_pre+0x11c/0x140
[  294.159249][T11901]  mem_cgroup_out_of_memory+0x13e/0x190
[  294.164811][T11901]  try_charge_memcg+0x508/0x7f0
[  294.169687][T11901]  obj_cgroup_charge_pages+0xbd/0x1a0
[  294.175128][T11901]  __memcg_kmem_charge_page+0x9d/0x170
[  294.180740][T11901]  __alloc_pages_noprof+0x1bc/0x340
[  294.186056][T11901]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  294.191593][T11901]  alloc_pages_noprof+0xe1/0x100
[  294.196554][T11901]  __vmalloc_node_range_noprof+0x6eb/0xe80
[  294.202402][T11901]  __kvmalloc_node_noprof+0x121/0x170
[  294.207992][T11901]  ? ip_set_alloc+0x1f/0x30
[  294.212512][T11901]  ip_set_alloc+0x1f/0x30
[  294.216864][T11901]  hash_netiface_create+0x273/0x730
[  294.222102][T11901]  ? __nla_parse+0x40/0x60
[  294.226624][T11901]  ? __pfx_hash_netiface_create+0x10/0x10
[  294.232363][T11901]  ip_set_create+0x359/0x8a0
[  294.237003][T11901]  ? strnstr+0x61/0x100
[  294.241266][T11901]  ? __nla_parse+0x40/0x60
[  294.245740][T11901]  nfnetlink_rcv_msg+0x4a9/0x570
[  294.250811][T11901]  netlink_rcv_skb+0x12c/0x230
[  294.255655][T11901]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  294.261161][T11901]  nfnetlink_rcv+0x16c/0x15d0
[  294.265866][T11901]  ? kmem_cache_free+0xdc/0x2d0
[  294.270739][T11901]  ? nlmon_xmit+0x51/0x60
[  294.275097][T11901]  ? __kfree_skb+0x102/0x150
[  294.279837][T11901]  ? consume_skb+0x49/0x160
[  294.284344][T11901]  ? nlmon_xmit+0x51/0x60
[  294.288691][T11901]  ? dev_hard_start_xmit+0x3c1/0x3f0
[  294.294012][T11901]  ? __dev_queue_xmit+0xb6e/0x2090
[  294.299138][T11901]  ? ref_tracker_free+0x3a5/0x410
[  294.304193][T11901]  ? __dev_queue_xmit+0x186/0x2090
[  294.309438][T11901]  ? __netlink_deliver_tap+0x4c6/0x4f0
[  294.314940][T11901]  netlink_unicast+0x599/0x670
[  294.319739][T11901]  netlink_sendmsg+0x5cc/0x6e0
[  294.324561][T11901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.329952][T11901]  __sock_sendmsg+0x140/0x180
[  294.334651][T11901]  ____sys_sendmsg+0x312/0x410
[  294.339520][T11901]  __sys_sendmsg+0x19d/0x230
[  294.344144][T11901]  __x64_sys_sendmsg+0x46/0x50
[  294.348975][T11901]  x64_sys_call+0x2734/0x2dc0
[  294.353664][T11901]  do_syscall_64+0xc9/0x1c0
[  294.358242][T11901]  ? clear_bhb_loop+0x55/0xb0
[  294.362991][T11901]  ? clear_bhb_loop+0x55/0xb0
[  294.367681][T11901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.373636][T11901] RIP: 0033:0x7fa7b59c0809
[  294.378066][T11901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.397703][T11901] RSP: 002b:00007fa7b4037058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.406219][T11901] RAX: ffffffffffffffda RBX: 00007fa7b5b85fa0 RCX: 00007fa7b59c0809
[  294.414236][T11901] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[  294.422300][T11901] RBP: 00007fa7b5a3393e R08: 0000000000000000 R09: 0000000000000000
[  294.430434][T11901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.438449][T11901] R13: 0000000000000000 R14: 00007fa7b5b85fa0 R15: 00007ffce8083118
[  294.446442][T11901]  </TASK>
[  294.449634][T11901] memory: usage 307200kB, limit 307200kB, failcnt 2496
[  294.456522][T11901] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0
[  294.464412][T11901] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  294.471732][T11901] Memory cgroup stats for /syz5:
[  294.473049][T11901] cache 0
[  294.481035][T11901] rss 0
[  294.483844][T11901] shmem 0
[  294.486905][T11901] mapped_file 0
[  294.490492][T11901] dirty 0
[  294.493492][T11901] writeback 0
[  294.496967][T11901] workingset_refault_anon 122
[  294.501651][T11901] workingset_refault_file 0
[  294.506223][T11901] swap 409600
[  294.509540][T11901] swapcached 0
[  294.512924][T11901] pgpgin 337171
[  294.516463][T11901] pgpgout 337171
[  294.520129][T11901] pgfault 289661
[  294.523695][T11901] pgmajfault 53
[  294.527230][T11901] inactive_anon 0
[  294.531011][T11901] active_anon 0
[  294.534587][T11901] inactive_file 0
[  294.538279][T11901] active_file 0
[  294.541759][T11901] unevictable 0
[  294.545251][T11901] hierarchical_memory_limit 314572800
[  294.550646][T11901] hierarchical_memsw_limit 9223372036854771712
[  294.556840][T11901] total_cache 0
[  294.560359][T11901] total_rss 0
[  294.563682][T11901] total_shmem 0
[  294.567198][T11901] total_mapped_file 0
[  294.571191][T11901] total_dirty 0
[  294.574643][T11901] total_writeback 0
[  294.578512][T11901] total_workingset_refault_anon 122
[  294.583787][T11901] total_workingset_refault_file 0
[  294.588910][T11901] total_swap 409600
[  294.592728][T11901] total_swapcached 0
[  294.596731][T11901] total_pgpgin 337171
[  294.600710][T11901] total_pgpgout 337171
[  294.604782][T11901] total_pgfault 289661
[  294.608907][T11901] total_pgmajfault 53
[  294.613063][T11901] total_inactive_anon 0
[  294.617252][T11901] total_active_anon 0
[  294.621239][T11901] total_inactive_file 0
[  294.625458][T11901] total_active_file 0
[  294.629436][T11901] total_unevictable 0
[  294.633410][T11901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2295,pid=11899,uid=0
[  294.648169][T11901] Memory cgroup out of memory: Killed process 11899 (syz.5.2295) total-vm:83176kB, anon-rss:620kB, file-rss:22444kB, shmem-rss:112kB, UID:0 pgtables:132kB oom_score_adj:1000
[  294.936981][T11923] netlink: 'syz.5.2298': attribute type 2 has an invalid length.
[  294.944787][T11923] netlink: 'syz.5.2298': attribute type 8 has an invalid length.
[  294.952625][T11923] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2298'.
[  294.969713][T11923] netlink: 'syz.5.2298': attribute type 39 has an invalid length.
[  295.220825][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2299'.
[  295.229906][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2299'.
[  295.937100][T11951] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2304' sets config #1
[  295.988709][   T29] kauditd_printk_skb: 267 callbacks suppressed
[  295.988725][   T29] audit: type=1326 audit(2000002748.907:34812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  296.021611][   T29] audit: type=1326 audit(2000002748.907:34813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  296.045464][   T29] audit: type=1326 audit(2000002748.907:34814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  296.069142][   T29] audit: type=1326 audit(2000002748.907:34815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68c3070843 code=0x7ffc0000
[  296.092732][   T29] audit: type=1326 audit(2000002748.907:34816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f68c306f2bf code=0x7ffc0000
[  296.116295][   T29] audit: type=1326 audit(2000002748.907:34817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f68c3070897 code=0x7ffc0000
[  296.139801][   T29] audit: type=1326 audit(2000002748.907:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68c306f170 code=0x7ffc0000
[  296.163506][   T29] audit: type=1326 audit(2000002748.907:34819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68c307040b code=0x7ffc0000
[  296.187009][   T29] audit: type=1326 audit(2000002748.907:34820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68c307040b code=0x7ffc0000
[  296.210614][   T29] audit: type=1326 audit(2000002748.907:34821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68c30a28e5 code=0x7ffc0000
[  296.259336][T11978] loop3: detected capacity change from 0 to 512
[  296.268473][T11978] EXT4-fs: inline encryption not supported
[  296.288008][T11978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.301485][T11978] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.315803][T11978] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2307: corrupted inode contents
[  296.330940][T11978] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2307: mark_inode_dirty error
[  296.343486][T11978] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2307: corrupted inode contents
[  296.356346][T11978] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2307: mark_inode_dirty error
[  296.511603][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2307'.
[  296.633904][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.770206][T11988] blktrace: Concurrent blktraces are not allowed on loop7
[  296.821692][T11992] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  296.828470][T11992] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  296.836258][T11992] vhci_hcd vhci_hcd.0: Device attached
[  296.853824][T11993] vhci_hcd: connection closed
[  296.854088][T11297] vhci_hcd: stop threads
[  296.863238][T11297] vhci_hcd: release socket
[  296.867787][T11297] vhci_hcd: disconnect device
[  296.904369][T11996] lo speed is unknown, defaulting to 1000
[  296.913712][T11996] lo speed is unknown, defaulting to 1000
[  296.919122][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2316'.
[  296.928602][T12002] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2316'.
[  296.992302][T12005] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  297.104792][T12002] bond0: (slave bond_slave_0): Releasing backup interface
[  297.115740][T12002] bond0: (slave bond_slave_1): Releasing backup interface
[  297.132513][T12002] bond0: (slave geneve1): Releasing backup interface
[  297.410205][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'.
[  297.671131][T12031] xt_hashlimit: max too large, truncated to 1048576
[  297.734050][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.759572][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.782357][T12037] xt_TCPMSS: Only works on TCP SYN packets
[  298.302640][T12045] wireguard0: entered promiscuous mode
[  298.308196][T12045] wireguard0: entered allmulticast mode
[  298.317573][T12046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2328'.
[  298.328201][T12046] netlink: 'syz.1.2328': attribute type 10 has an invalid length.
[  298.340806][T12046] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  298.425712][T12058] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2332'.
[  298.447064][T12061] loop3: detected capacity change from 0 to 1024
[  298.458113][T12058] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12058 comm=syz.0.2332
[  298.477607][T12061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.498684][T12061] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.535737][T12066] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2334'.
[  298.672360][T12083] wireguard0: entered promiscuous mode
[  298.678012][T12083] wireguard0: entered allmulticast mode
[  299.528692][T12124] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  299.768785][T12147] ip6erspan0: tun_chr_ioctl cmd 35108
[  299.777326][T12147] ip6erspan0: tun_chr_ioctl cmd 2147767506
[  300.147665][T12169] ip6gre1: entered promiscuous mode
[  300.148521][T12175] __nla_validate_parse: 10 callbacks suppressed
[  300.148538][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'.
[  300.152978][T12169] ip6gre1: entered allmulticast mode
[  300.224469][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'.
[  300.233426][T12178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'.
[  300.304296][T12182] serio: Serial port ptm0
[  301.304073][T12196] xt_hashlimit: max too large, truncated to 1048576
[  301.475185][   T29] kauditd_printk_skb: 507 callbacks suppressed
[  301.475205][   T29] audit: type=1326 audit(2000002754.387:35329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.505042][   T29] audit: type=1326 audit(2000002754.387:35330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.528922][   T29] audit: type=1326 audit(2000002754.387:35331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.552430][   T29] audit: type=1326 audit(2000002754.387:35332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.576201][   T29] audit: type=1326 audit(2000002754.387:35333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.600043][   T29] audit: type=1326 audit(2000002754.387:35334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.641701][T12200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.657242][T12196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.668614][T12196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.719453][   T29] audit: type=1326 audit(2000002754.557:35335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.743202][   T29] audit: type=1326 audit(2000002754.557:35336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  301.807048][   T29] audit: type=1326 audit(2000002754.727:35337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  301.830850][   T29] audit: type=1326 audit(2000002754.727:35338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  301.868976][T12208] netem: unknown loss type 0
[  301.873683][T12208] netem: change failed
[  302.613758][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2363'.
[  302.653126][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'.
[  302.662151][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'.
[  302.690661][T12249] loop3: detected capacity change from 0 to 512
[  302.738729][T12249] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  302.814149][T12249] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.2363: iget: bad i_size value: -6917529027641081756
[  302.828830][T12249] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2363: couldn't read orphan inode 17 (err -117)
[  302.843242][T12249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.874635][T12249] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2363: bg 0: block 65: padding at end of block bitmap is not set
[  302.890083][T12249] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2363: Failed to acquire dquot type 0
[  302.946213][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.117531][T12297] loop3: detected capacity change from 0 to 512
[  304.127171][T12297] xt_TCPMSS: Only works on TCP SYN packets
[  304.540310][T12310] pim6reg: entered allmulticast mode
[  304.549408][T12310] pim6reg: left allmulticast mode
[  304.625044][T12312] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2378'.
[  304.639068][T12310] hub 6-0:1.0: USB hub found
[  304.643822][T12310] hub 6-0:1.0: 8 ports detected
[  304.653045][T12312] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  304.725029][T12314] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  304.742394][T12315] smc: net device bond0 applied user defined pnetid SYZ0
[  304.767745][T12315] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2378'.
[  304.777135][T12315] smc: net device bond0 erased user defined pnetid SYZ0
[  304.981941][T12342] siw: device registration error -23
[  305.400929][T12372] IPVS: lc: UDP 224.0.0.1:0 - no destination available
[  305.827341][T12413] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  306.323316][T12436] loop3: detected capacity change from 0 to 512
[  306.333710][T12436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  306.356033][T12436] EXT4-fs (loop3): 1 truncate cleaned up
[  306.362155][T12436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.446307][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.484540][T12443] loop3: detected capacity change from 0 to 128
[  306.494852][T12443] msdos: Unknown parameter '«¸úWëR¾&"Ù~™Wf¿Œ#IñO-ïŸ'
[  306.505941][   T29] kauditd_printk_skb: 548 callbacks suppressed
[  306.505957][   T29] audit: type=1400 audit(2000002759.427:35885): avc:  denied  { bind } for  pid=12442 comm="syz.3.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  306.544589][T12443] lo speed is unknown, defaulting to 1000
[  306.550789][T12443] lo speed is unknown, defaulting to 1000
[  306.692051][   T29] audit: type=1400 audit(2000002759.607:35886): avc:  denied  { setopt } for  pid=12442 comm="syz.3.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  306.712360][   T29] audit: type=1400 audit(2000002759.607:35887): avc:  denied  { write } for  pid=12442 comm="syz.3.2402" path="socket:[34014]" dev="sockfs" ino=34014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  306.768197][   T29] audit: type=1400 audit(2000002759.687:35888): avc:  denied  { create } for  pid=12448 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  306.798782][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  306.798804][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  306.798817][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  306.812020][   T29] audit: type=1400 audit(2000002759.727:35889): avc:  denied  { write } for  pid=12448 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  306.818508][   T29] audit: type=1400 audit(2000002759.727:35890): avc:  denied  { mount } for  pid=12448 comm="syz.5.2414" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  306.818788][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  306.818811][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  306.818827][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  306.819659][   T29] audit: type=1400 audit(2000002759.737:35891): avc:  denied  { write } for  pid=12446 comm="syz.3.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  306.868868][   T29] audit: type=1400 audit(2000002759.767:35892): avc:  denied  { write } for  pid=12446 comm="syz.3.2403" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  306.912930][T12447] loop3: detected capacity change from 0 to 512
[  306.921827][   T29] audit: type=1326 audit(2000002759.787:35893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.5.2414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7b59c0809 code=0x0
[  306.985153][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  307.000127][T12447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  307.021011][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  307.021034][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2404'.
[  307.030186][T12447] System zones: 0-2, 18-18, 34-34
[  307.062694][T12447] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2403: bg 0: block 248: padding at end of block bitmap is not set
[  307.078937][T12447] Quota error (device loop3): write_blk: dquota write failed
[  307.086504][T12447] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2403: Failed to acquire dquot type 1
[  307.099350][T12447] EXT4-fs (loop3): 1 truncate cleaned up
[  307.105589][T12447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.118480][T12447] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.132538][T12470] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2406'.
[  307.227894][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.620431][T12476] xt_hashlimit: max too large, truncated to 1048576
[  307.680029][T12481] SELinux:  Context system_u: is not valid (left unmapped).
[  307.685035][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.698393][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.233257][T12498] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  308.445909][T12514] loop3: detected capacity change from 0 to 1024
[  308.461640][T12514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.672965][T12522] dvmrp0: left allmulticast mode
[  308.816821][T12529] xt_hashlimit: max too large, truncated to 1048576
[  308.879908][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.888596][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.159661][T12534] netlink: 'syz.5.2430': attribute type 10 has an invalid length.
[  309.268764][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.454759][T12542] siw: device registration error -23
[  309.473746][T12542] No such timeout policy "syz0"
[  309.817443][T12555] netlink: 'syz.1.2437': attribute type 4 has an invalid length.
[  309.935723][T12558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  310.444500][T12570] hub 6-0:1.0: USB hub found
[  310.449288][T12570] hub 6-0:1.0: 8 ports detected
[  310.590628][T12580] lo speed is unknown, defaulting to 1000
[  310.598044][T12580] lo speed is unknown, defaulting to 1000
[  310.813673][T12597] loop3: detected capacity change from 0 to 512
[  310.822569][T12597] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  311.646594][T12616] xt_hashlimit: max too large, truncated to 1048576
[  311.661629][   T29] kauditd_printk_skb: 1793 callbacks suppressed
[  311.661645][   T29] audit: type=1326 audit(2000002764.577:37686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.1.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  311.700510][   T29] audit: type=1400 audit(2000002764.587:37687): avc:  denied  { create } for  pid=12612 comm="syz.4.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  311.720365][   T29] audit: type=1400 audit(2000002764.587:37688): avc:  denied  { bind } for  pid=12612 comm="syz.4.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  311.739984][   T29] audit: type=1400 audit(2000002764.587:37689): avc:  denied  { name_bind } for  pid=12612 comm="syz.4.2455" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  311.756947][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.760956][   T29] audit: type=1400 audit(2000002764.587:37690): avc:  denied  { node_bind } for  pid=12612 comm="syz.4.2455" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  311.790263][   T29] audit: type=1400 audit(2000002764.597:37691): avc:  denied  { listen } for  pid=12612 comm="syz.4.2455" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  311.794982][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.811009][   T29] audit: type=1326 audit(2000002764.617:37692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.1.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  311.842293][   T29] audit: type=1326 audit(2000002764.617:37693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.1.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  311.866108][   T29] audit: type=1326 audit(2000002764.617:37694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.1.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  311.892063][   T29] audit: type=1326 audit(2000002764.617:37695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.1.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f68c3070809 code=0x7ffc0000
[  311.961208][T12621] loop3: detected capacity change from 0 to 512
[  311.996820][T12621] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  312.004808][T12621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  312.041829][T12621] EXT4-fs (loop3): orphan cleanup on readonly fs
[  312.058231][T12621] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13
[  312.083551][T12621] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13
[  312.106368][T12621] EXT4-fs (loop3): 1 truncate cleaned up
[  312.122450][T12621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  312.236040][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.499576][T12631] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  312.562041][T12634] __nla_validate_parse: 13 callbacks suppressed
[  312.562060][T12634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2459'.
[  312.589285][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'.
[  312.601883][T12634] siw: device registration error -23
[  312.607561][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'.
[  312.657457][T12634] No such timeout policy "syz0"
[  312.686163][T12639] SELinux:  policydb version -858998881 does not match my version range 15-33
[  312.696335][T12639] SELinux: failed to load policy
[  312.737127][T12639] pim6reg1: entered promiscuous mode
[  312.742479][T12639] pim6reg1: entered allmulticast mode
[  313.325470][T12653] loop3: detected capacity change from 0 to 128
[  313.332046][T12653] ext4: Unknown parameter 'mask'
[  314.117567][T12684] atomic_op ffff888119427928 conn xmit_atomic 0000000000000000
[  314.151727][T12687] xt_hashlimit: max too large, truncated to 1048576
[  314.204253][T12691] loop3: detected capacity change from 0 to 1024
[  314.219940][T12687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.226387][T12691] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2484: Failed to acquire dquot type 0
[  314.231348][T12687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.243048][T12691] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  314.262743][T12691] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.2484: corrupted inode contents
[  314.276233][T12691] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.2484: mark_inode_dirty error
[  314.288680][T12691] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.2484: corrupted inode contents
[  314.301140][T12691] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2484: mark_inode_dirty error
[  314.312824][T12691] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.2484: corrupted inode contents
[  314.326075][T12691] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  314.334940][T12691] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.2484: corrupted inode contents
[  314.349748][T12691] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.2484: mark_inode_dirty error
[  314.362555][T12691] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  314.372712][T12691] EXT4-fs (loop3): 1 truncate cleaned up
[  314.380033][T12691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.460315][T12700] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.467764][T12700] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  314.478895][T12700] bond0: (slave sit0): Error -95 calling set_mac_address
[  314.535863][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.564507][T12713] loop3: detected capacity change from 0 to 128
[  314.572843][T12713] ext4: Unknown parameter 'mask'
[  315.476509][T12761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  315.747436][T12777] xt_hashlimit: max too large, truncated to 1048576
[  315.822453][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.846659][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.618460][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2502'.
[  316.718326][T12803] netlink: 'syz.5.2503': attribute type 3 has an invalid length.
[  316.735588][   T29] kauditd_printk_skb: 807 callbacks suppressed
[  316.735818][   T29] audit: type=1400 audit(2000002769.637:38501): avc:  denied  { create } for  pid=12802 comm="syz.5.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  316.865141][   T29] audit: type=1400 audit(2000002769.767:38502): avc:  denied  { create } for  pid=12802 comm="syz.5.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  316.885919][   T29] audit: type=1400 audit(2000002769.767:38503): avc:  denied  { wake_alarm } for  pid=12802 comm="syz.5.2503" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  316.907334][   T29] audit: type=1400 audit(2000002769.767:38504): avc:  denied  { mount } for  pid=12805 comm="syz.0.2504" name="/" dev="rpc_pipefs" ino=33709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  316.965183][   T29] audit: type=1326 audit(2000002769.867:38505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  316.989549][   T29] audit: type=1326 audit(2000002769.867:38506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4dab2f170 code=0x7ffc0000
[  317.013200][   T29] audit: type=1326 audit(2000002769.867:38507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  317.037575][   T29] audit: type=1326 audit(2000002769.867:38508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  317.061185][   T29] audit: type=1326 audit(2000002769.867:38509): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  317.083903][   T29] audit: type=1326 audit(2000002769.867:38510): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  317.553820][T12840] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  317.567674][T12840] 9pnet_fd: Insufficient options for proto=fd
[  317.664165][T12847] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2513'.
[  317.677545][T12847] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  317.744234][T12849] smc: net device bond0 applied user defined pnetid SYZ0
[  317.751856][T12849] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2513'.
[  317.762516][T12849] smc: net device bond0 erased user defined pnetid SYZ0
[  317.981295][T12857] xt_hashlimit: max too large, truncated to 1048576
[  318.050648][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.061733][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.754678][T12880] loop3: detected capacity change from 0 to 128
[  318.761716][T12880] EXT4-fs: test_dummy_encryption option not supported
[  318.895823][T12887] xt_hashlimit: max too large, truncated to 1048576
[  318.960168][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.968988][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.978831][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'.
[  319.007335][T12891] program syz.5.2526 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.641001][T12901] xt_hashlimit: max too large, truncated to 1048576
[  319.667265][T12903] xt_hashlimit: max too large, truncated to 1048576
[  319.710896][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.721493][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.733808][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.743969][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.329645][T12920] xt_hashlimit: max too large, truncated to 1048576
[  320.352641][T12922] loop3: detected capacity change from 0 to 512
[  320.364255][T12922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.378065][T12926] xt_hashlimit: max too large, truncated to 1048576
[  320.398424][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.407307][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.425848][T12922] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  320.442640][T12926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.451841][T12926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.599777][T12932] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  320.686868][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.828123][T12937] loop3: detected capacity change from 0 to 512
[  320.860329][T12937] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  320.870562][T12937] System zones: 0-2, 18-18, 34-34
[  320.877411][T12937] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2541: bg 0: block 248: padding at end of block bitmap is not set
[  320.892370][T12937] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2541: Failed to acquire dquot type 1
[  320.906069][T12937] EXT4-fs (loop3): 1 truncate cleaned up
[  320.912373][T12937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.943461][T12937] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.996539][T12950] xt_hashlimit: max too large, truncated to 1048576
[  321.036600][T12954] xt_hashlimit: max too large, truncated to 1048576
[  321.065757][T12950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.074636][T12950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.102419][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.111997][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.660742][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.755411][   T29] kauditd_printk_skb: 418 callbacks suppressed
[  321.755430][   T29] audit: type=1326 audit(2000002774.677:38927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.5.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  321.820136][   T29] audit: type=1326 audit(2000002774.677:38928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.5.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b59c0809 code=0x7ffc0000
[  321.843991][   T29] audit: type=1326 audit(2000002774.677:38929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  321.868011][   T29] audit: type=1326 audit(2000002774.677:38930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  321.891686][   T29] audit: type=1326 audit(2000002774.677:38931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4dab2f170 code=0x7ffc0000
[  321.915309][   T29] audit: type=1326 audit(2000002774.677:38932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  321.939308][   T29] audit: type=1326 audit(2000002774.677:38933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  321.962828][   T29] audit: type=1326 audit(2000002774.677:38934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  321.986583][   T29] audit: type=1326 audit(2000002774.677:38935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  322.010456][   T29] audit: type=1326 audit(2000002774.677:38936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4dab30809 code=0x7ffc0000
[  322.034444][T12977] xt_hashlimit: max too large, truncated to 1048576
[  322.063903][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2551'.
[  322.162452][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.171992][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.937219][T12995] xt_hashlimit: max too large, truncated to 1048576
[  323.037461][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.046380][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.068037][T13003] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2562'.
[  323.108947][T13003] IPv6: sit1: Disabled Multicast RS
[  323.328717][T13015] xt_hashlimit: max too large, truncated to 1048576
[  323.391841][T13015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.400551][T13015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.579171][T13022] loop3: detected capacity change from 0 to 128
[  323.586027][T13022] ext4: Unknown parameter 'mask'
[  323.791174][T13030] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2572'.
[  323.800243][T13030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2572'.
[  324.458692][T13043] netlink: 'syz.5.2576': attribute type 5 has an invalid length.
[  324.471714][T13043] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  324.560901][T13045] loop3: detected capacity change from 0 to 164
[  324.567627][T13045] iso9660: Unknown parameter 'M'
[  324.632880][T13053] xt_hashlimit: max too large, truncated to 1048576
[  324.640592][T13051] geneve0: entered allmulticast mode
[  324.670526][T13055] loop3: detected capacity change from 0 to 128
[  324.677348][T13055] ext4: Unknown parameter 'mask'
[  324.699941][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.710296][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.956593][   T35] usb usb8-port2: attempt power cycle
[  325.628425][T13077] loop3: detected capacity change from 0 to 128
[  325.778438][T13078] bio_check_eod: 20 callbacks suppressed
[  325.778461][T13078] syz.3.2586: attempt to access beyond end of device
[  325.778461][T13078] loop3: rw=2049, sector=228, nr_sectors = 8 limit=128
[  325.798072][T13078] syz.3.2586: attempt to access beyond end of device
[  325.798072][T13078] loop3: rw=2049, sector=244, nr_sectors = 8 limit=128
[  325.813814][T13078] syz.3.2586: attempt to access beyond end of device
[  325.813814][T13078] loop3: rw=2049, sector=260, nr_sectors = 8 limit=128
[  325.828305][T13078] syz.3.2586: attempt to access beyond end of device
[  325.828305][T13078] loop3: rw=2049, sector=276, nr_sectors = 8 limit=128
[  325.842270][T13078] syz.3.2586: attempt to access beyond end of device
[  325.842270][T13078] loop3: rw=2049, sector=292, nr_sectors = 8 limit=128
[  325.856501][T13078] syz.3.2586: attempt to access beyond end of device
[  325.856501][T13078] loop3: rw=2049, sector=308, nr_sectors = 8 limit=128
[  325.875820][T13078] syz.3.2586: attempt to access beyond end of device
[  325.875820][T13078] loop3: rw=2049, sector=324, nr_sectors = 8 limit=128
[  325.889435][T13078] syz.3.2586: attempt to access beyond end of device
[  325.889435][T13078] loop3: rw=2049, sector=340, nr_sectors = 8 limit=128
[  325.903109][T13078] syz.3.2586: attempt to access beyond end of device
[  325.903109][T13078] loop3: rw=2049, sector=356, nr_sectors = 8 limit=128
[  325.917351][T13078] syz.3.2586: attempt to access beyond end of device
[  325.917351][T13078] loop3: rw=2049, sector=372, nr_sectors = 8 limit=128
[  326.358283][T13108] serio: Serial port ptm0
[  326.836278][   T35] usb usb8-port2: unable to enumerate USB device
[  326.869952][   T29] kauditd_printk_skb: 692 callbacks suppressed
[  326.869969][   T29] audit: type=1400 audit(2000002779.787:39629): avc:  denied  { read write } for  pid=9359 comm="syz-executor" name="loop3" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  326.956078][T13113] loop3: detected capacity change from 0 to 128
[  327.122196][   T29] audit: type=1400 audit(2000002779.827:39630): avc:  denied  { open } for  pid=9359 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.147389][   T29] audit: type=1400 audit(2000002779.827:39631): avc:  denied  { ioctl } for  pid=9359 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=897 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.173286][   T29] audit: type=1400 audit(2000002779.847:39632): avc:  denied  { unmount } for  pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  327.193884][   T29] audit: type=1400 audit(2000002779.907:39633): avc:  denied  { mounton } for  pid=13112 comm="syz.3.2599" path="/194/file0" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  327.217432][   T29] audit: type=1400 audit(2000002779.917:39634): avc:  denied  { mount } for  pid=13112 comm="syz.3.2599" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  327.239592][   T29] audit: type=1326 audit(2000002779.917:39635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  327.263979][   T29] audit: type=1326 audit(2000002779.917:39636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  327.288223][   T29] audit: type=1326 audit(2000002779.917:39637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  327.311896][   T29] audit: type=1326 audit(2000002779.917:39638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  328.044327][T13132] loop3: detected capacity change from 0 to 128
[  328.070536][T13132] ext4: Unknown parameter 'mask'
[  328.272662][T13136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2605'.
[  328.374852][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2608'.
[  328.545035][T13152] syz.5.2611[13152] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.547190][T13152] syz.5.2611[13152] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.564426][T13150] hub 8-0:1.0: USB hub found
[  328.594724][T13152] syz.5.2611[13152] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.606520][T13150] hub 8-0:1.0: 8 ports detected
[  328.638776][T13152] bond2: entered promiscuous mode
[  328.643881][T13152] bond2: entered allmulticast mode
[  328.671248][T13152] 8021q: adding VLAN 0 to HW filter on device bond2
[  328.712262][T13152] bond2 (unregistering): Released all slaves
[  329.425443][T13185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  330.076530][T13197] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  330.096402][T13197] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2623'.
[  330.255731][T13205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13205 comm=syz.1.2624
[  330.515466][ T3399] usb usb8-port2: attempt power cycle
[  331.341273][T13225] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2631'.
[  331.393992][T13225] bond0: entered allmulticast mode
[  331.609576][T13233] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  331.616283][T13233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  331.624449][T13233] vhci_hcd vhci_hcd.0: Device attached
[  331.631282][T13231] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  331.637818][T13231] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  331.645954][T13231] vhci_hcd vhci_hcd.0: Device attached
[  331.682909][T13231] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9)
[  331.689467][T13231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  331.697060][T13231] vhci_hcd vhci_hcd.0: Device attached
[  331.765625][T13233] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  331.772275][T13233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  331.780580][T13233] vhci_hcd vhci_hcd.0: Device attached
[  331.835807][   T35] vhci_hcd: vhci_device speed not set
[  331.905089][   T35] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[  331.979125][T13242] loop3: detected capacity change from 0 to 128
[  332.033577][   T29] kauditd_printk_skb: 854 callbacks suppressed
[  332.033647][   T29] audit: type=1326 audit(2000002784.947:40493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.221898][   T29] audit: type=1326 audit(2000002784.977:40494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.246195][   T29] audit: type=1326 audit(2000002784.977:40495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.269814][   T29] audit: type=1326 audit(2000002784.977:40496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.294158][   T29] audit: type=1326 audit(2000002784.977:40497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.318492][   T29] audit: type=1326 audit(2000002784.987:40498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.342093][   T29] audit: type=1326 audit(2000002784.987:40499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.350465][T13243] bio_check_eod: 56 callbacks suppressed
[  332.350485][T13243] syz.3.2634: attempt to access beyond end of device
[  332.350485][T13243] loop3: rw=2049, sector=140, nr_sectors = 16 limit=128
[  332.366374][   T29] audit: type=1326 audit(2000002784.987:40500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.409348][   T29] audit: type=1326 audit(2000002784.987:40501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.432952][   T29] audit: type=1326 audit(2000002784.987:40502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.3.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd4e0809 code=0x7ffc0000
[  332.457694][T13243] syz.3.2634: attempt to access beyond end of device
[  332.457694][T13243] loop3: rw=2049, sector=164, nr_sectors = 8 limit=128
[  332.471256][T13243] syz.3.2634: attempt to access beyond end of device
[  332.471256][T13243] loop3: rw=2049, sector=180, nr_sectors = 8 limit=128
[  332.485687][T13243] syz.3.2634: attempt to access beyond end of device
[  332.485687][T13243] loop3: rw=2049, sector=196, nr_sectors = 8 limit=128
[  332.500171][T13243] syz.3.2634: attempt to access beyond end of device
[  332.500171][T13243] loop3: rw=2049, sector=212, nr_sectors = 8 limit=128
[  332.514080][T13243] syz.3.2634: attempt to access beyond end of device
[  332.514080][T13243] loop3: rw=2049, sector=228, nr_sectors = 8 limit=128
[  332.528517][T13232] vhci_hcd: connection reset by peer
[  332.534039][T13237] vhci_hcd: connection closed
[  332.534182][T13235] vhci_hcd: connection closed
[  332.535174][T13238] vhci_hcd: connection closed
[  332.544135][T11281] vhci_hcd: stop threads
[  332.553187][T11281] vhci_hcd: release socket
[  332.557681][T11281] vhci_hcd: disconnect device
[  332.562571][T11281] vhci_hcd: stop threads
[  332.566895][T11281] vhci_hcd: release socket
[  332.571524][T11281] vhci_hcd: disconnect device
[  332.576580][T11281] vhci_hcd: stop threads
[  332.580871][T11281] vhci_hcd: release socket
[  332.585435][T11281] vhci_hcd: disconnect device
[  332.591109][T11281] vhci_hcd: stop threads
[  332.595409][T11281] vhci_hcd: release socket
[  332.599840][T11281] vhci_hcd: disconnect device
[  332.605991][T13243] syz.3.2634: attempt to access beyond end of device
[  332.605991][T13243] loop3: rw=2049, sector=244, nr_sectors = 8 limit=128
[  332.632657][T13243] syz.3.2634: attempt to access beyond end of device
[  332.632657][T13243] loop3: rw=2049, sector=260, nr_sectors = 8 limit=128
[  332.647340][T13243] syz.3.2634: attempt to access beyond end of device
[  332.647340][T13243] loop3: rw=2049, sector=276, nr_sectors = 8 limit=128
[  332.660903][T13243] syz.3.2634: attempt to access beyond end of device
[  332.660903][T13243] loop3: rw=2049, sector=292, nr_sectors = 8 limit=128
[  332.695601][ T3399] usb usb8-port2: unable to enumerate USB device
[  332.879162][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2638'.
[  332.896023][T13259] loop3: detected capacity change from 0 to 128
[  332.905532][T13259] vfat: Unknown parameter '\'
[  333.000091][T13252] hub 6-0:1.0: USB hub found
[  333.010864][T13252] hub 6-0:1.0: 8 ports detected
[  333.986355][T13281] siw: device registration error -23
[  334.196862][T13291] loop3: detected capacity change from 0 to 1024
[  334.212409][T13291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.400722][T13300] ==================================================================
[  334.408871][T13300] BUG: KCSAN: data-race in redirty_tail_locked / vfs_fsync_range
[  334.416644][T13300] 
[  334.418982][T13300] read-write to 0xffff88810668ea38 of 4 bytes by task 13291 on cpu 0:
[  334.427247][T13300]  redirty_tail_locked+0x54/0x270
[  334.432359][T13300]  writeback_single_inode+0x221/0x3f0
[  334.437785][T13300]  sync_inode_metadata+0x5c/0x90
[  334.442771][T13300]  generic_buffers_fsync_noflush+0xd8/0x120
[  334.448722][T13300]  ext4_sync_file+0x1ff/0x6c0
[  334.453445][T13300]  vfs_fsync_range+0x116/0x130
[  334.458240][T13300]  ext4_buffered_write_iter+0x326/0x370
[  334.463825][T13300]  ext4_file_write_iter+0x383/0xf20
[  334.469054][T13300]  iter_file_splice_write+0x5f1/0x980
[  334.474478][T13300]  direct_splice_actor+0x160/0x2c0
[  334.479641][T13300]  splice_direct_to_actor+0x302/0x670
[  334.485042][T13300]  do_splice_direct+0xd7/0x150
[  334.489861][T13300]  do_sendfile+0x398/0x660
[  334.494312][T13300]  __x64_sys_sendfile64+0x110/0x150
[  334.499631][T13300]  x64_sys_call+0xfbd/0x2dc0
[  334.504265][T13300]  do_syscall_64+0xc9/0x1c0
[  334.508790][T13300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.514730][T13300] 
[  334.517066][T13300] read to 0xffff88810668ea38 of 4 bytes by task 13300 on cpu 1:
[  334.524720][T13300]  vfs_fsync_range+0x9a/0x130
[  334.529433][T13300]  ext4_buffered_write_iter+0x326/0x370
[  334.535022][T13300]  ext4_file_write_iter+0x383/0xf20
[  334.540253][T13300]  iter_file_splice_write+0x5f1/0x980
[  334.545667][T13300]  direct_splice_actor+0x160/0x2c0
[  334.550822][T13300]  splice_direct_to_actor+0x302/0x670
[  334.556237][T13300]  do_splice_direct+0xd7/0x150
[  334.561037][T13300]  do_sendfile+0x398/0x660
[  334.565493][T13300]  __x64_sys_sendfile64+0x110/0x150
[  334.570731][T13300]  x64_sys_call+0xfbd/0x2dc0
[  334.575363][T13300]  do_syscall_64+0xc9/0x1c0
[  334.579895][T13300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.585827][T13300] 
[  334.588164][T13300] value changed: 0x0000003a -> 0x00000002
[  334.593896][T13300] 
[  334.596236][T13300] Reported by Kernel Concurrency Sanitizer on:
[  334.602402][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.3.2647 Tainted: G        W          6.12.0-syzkaller-10689-g7af08b57bcb9 #0
[  334.614334][T13300] Tainted: [W]=WARN
[  334.618158][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  334.628248][T13300] ==================================================================
[  335.865446][    T9] usb usb8-port2: attempt power cycle
[  336.976865][   T35] usb 3-1: enqueue for inactive port 0
[  336.982432][   T35] usb 3-1: enqueue for inactive port 0
[  337.055150][   T35] vhci_hcd: vhci_device speed not set
[  337.685399][    T9] usb usb8-port2: unable to enumerate USB device
[  337.703715][   T29] kauditd_printk_skb: 175 callbacks suppressed
[  337.703795][   T29] audit: type=1400 audit(2000002790.617:40678): avc:  denied  { unmount } for  pid=9359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  337.704739][ T9359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.