last executing test programs:

3.001435343s ago: executing program 0 (id=848):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = msgget$private(0x0, 0x214)
msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x82, 0x2}, 0x0, 0x0, 0x3, 0x9c84, 0x1, 0x0, 0x0, 0xfffc, 0x1b})
msgsnd(r0, &(0x7f0000000100)=ANY=[], 0x1d, 0x0)
msgctl$IPC_RMID(r0, 0x0)
unshare(0x60400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0], 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18)
r7 = socket$inet6(0xa, 0x802, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e9ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffffc00000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c)
msgrcv(0x0, 0x0, 0xffffffffffffff87, 0x3, 0x2000)
sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)

2.903084903s ago: executing program 0 (id=849):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
readv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@discard}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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")
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x24008005)
r4 = socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x0)
listen(r4, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
io_uring_enter(0xffffffffffffffff, 0x54, 0xfffe0000, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3db}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff414}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8020}, 0x4000)
poll(&(0x7f0000000080), 0x0, 0x5)
shutdown(0xffffffffffffffff, 0x1)

2.838718093s ago: executing program 3 (id=851):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
lseek(r5, 0x2000, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67)
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.744713464s ago: executing program 2 (id=852):
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80c00)
r1 = inotify_init1(0x800)
sendfile(r0, r1, &(0x7f0000000200)=0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffede, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='-\x00', 0x0)

2.617108284s ago: executing program 2 (id=854):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x101, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_io_uring_submit(0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_gettime(0xffffffffffffffff, 0x0)
mlockall(0x7)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r3, 0xa, 0x13)
fcntl$setlease(r3, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000004c0)="d57d58fd5b18b4fd9759bc67b321a644183b5c87ff6cc3b6c06683a09f801a8f208e21ca3a07524b9b085f0e8cbe61ab5e263a5e8763f85ccc51350847ed6eee5959ddf004f34c0dfa05fba0b0cf460b0797456638ded470e78f176ffc2ef1e3acd504217de62d969a5acc0323b117f7e4d52398adabf926d445e096a2a63895dc0d26d86f51735bf9ed7fa2bd02c9f9f8bba1df70612f931fdb85cba4bd78342a6f86", &(0x7f0000000300)="92de8efdce867de4f6f5b858d2bc2c8cef4e70a68f96a8e5325201e498b2a18e6132"}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x4000)

2.047229395s ago: executing program 0 (id=857):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002240)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000000100000040000000080000000000000", @ANYRES32=r0, @ANYBLOB="00004439225b000000000014e2e6750000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70200000200000085"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
preadv(r2, &(0x7f0000000ac0)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000980)=""/178, 0xb2}], 0x6, 0x0, 0x0)
close(r2)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write(r3, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1)
preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00')
read$char_usb(r5, &(0x7f0000000140)=""/189, 0xfffffecd)
preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0)
read$msr(r5, &(0x7f0000000280)=""/61, 0x3d)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

2.046228875s ago: executing program 4 (id=859):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3ff, 0xf, 0x1000, 0x3140c, 0xffffffffffffffff, 0xa07, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x8, @void, @value, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000800)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_usbip_server_init(0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000840)=ANY=[@ANYBLOB="006e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374698f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41a3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000a42907969efe06bd1f1b114a71f8f59903010fb445fc75b3a594297cb3c7b5f9c5148cb6fa1a841449cbf2e0d4f181168d8133e55300f0f3982ad07150fcf9293d6c9899eff596d57d0bbfda3a0072e6f50545f5e8c736af2a8b927a13c7ad85029ce19e3ed743679376215a8ee07f310b57a87d42b9af0dc99704461a31d3eb91e5d7c342a9e4216c2504cb2d9dda", @ANYRES64=r0], 0x1, 0x67e, &(0x7f0000001c40)="$eJzs3V1v29Ydx/EfZdmW3aEItiEIgjQ5SVbAwTKHkhsHRgYsGkXZ3CRRIOnBBgYUXWMXQeR0SzJg8U3nmz0A3RvYXW92sRcxYNd7F7vbgGK7G7AbDnyQLVlPVqI4bfb9GLFo8s9z/iQV/kFbPBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDl1Gy7bKnhtbZ3zGhOLfCbY5Znrc3rVjZxa2K/kpX8U6mkS9msS98+WXwx+XZDV7KfrqiUvJR0+M7FC/e/VSx01x+T0MvQtA0+e3H4QJ3O3tMzxM5p6ubfJBXOELTptrzQ95rVTdd4oW821tftO1v10NS9hhvuhpHbNE7gFiI/MCvOLVPe2Fgz7uquv93arFUbbnfmve9VbHvd/GgxO9CSVkNny2s0vNZmGpMsTmLumc9/mgW41aYx+486e2uTkkyCymcJqkwKqtiVSrlcqZTX727cvWfbxYEZdsKyj2kgYuZvWnzNzO7kDbyiQlL//25JDZXU0rZ2ZIZ+OaopkK/miOW5bv1//447tt/e+t+t8pekH+SLLyut/1ezn66Oqv8jcjEy6QrDllgj5k/3NZ+38kwvdKjH+kgddbSnpzNo28hcm0kr5/C1KVcteQrly1NT1XSOyecYbWhd67L1obZUVyijujw15CrUrkJFctN3lKNArqqK5CuQ0Yoc3ZJRWRva0JqM3CVpV7621dKmaqrqP3Ec7+tRut/XxuSoblB5RMBib1BlTEuj6v/PPsvep3n9t6n//6+y98FifhYbFwN8BcT59f+UrqXfi68jIwAAAAAAMGtW+tv3hfRv9+9JilX3Gq79ptMCAAAAAAAzZCle1BVZSj/Spvdkcf0PAAAAAMDbxkrvsbMkLacf6rdO7oQ6yy8B5s4hRQAAAAAA8IrSO/+vLkhxOmjFNVlTXf8DAAAAAICvgd/1jLFf7I6xG3f/rF+QFLYXrb/8a1HBvHXU3vmOdVBNllQP8piBTwBE9cvWu/lAvenLgqT0J8e9YuW95YNgHo87+OX+pLH+reBUAgtzvQ30J9AdgLNoJT2vF/O29LmuZ6tcz8eZf3hYULok62W57jXcVcdv3C+rWn23ELk70S+fPPqVFBxv5/6jzt7qx592Hqa5HCWzjg6SRj/rS6cwfGec5PI8HW8hvedi2BYvqd7t8vet5rKV9mt3t39O1YNCb0fjDsBJn7/RjeyY3VjOYpcPj0fcT7a/lGx/eTU9ZH1bH8xbJ1mUT2/5sAMxIotSmsXNLObmys3spZtf0k7BKn13TqqsDh6DviwqvVlM3hfWvwf2xbgs8n2xlmTx16ShEVmsTZfFwBEBgDdl/6QKpYOYD9TdbnnontRequ5Mru4P+qv78z/GcbrCnFTM/zYxtpeSkjP6ipXWoYVsZOLi5SFndDuvKyWNOKPbr1Ddkr7+fPIMpDztgSz+G8fx/XLa7x9OVdUvkhW+GNlv2KjMJbvwzvODn6cD4Cc+2ftk70mlsrZuf2DbdyuaTzcjf5kTtQcAMGDyM3YmRlgf6HoWcf3hP9/Ppvoq3jePP1Kwqo/1qTp6qNv5IwR0bXiryz0fQ7idXbWq56rVXLxwf0k6HVvW7ZFXdWkt7YmtHMfOq7tKf6U+iV17zUcBAIDzdWNCHR5e/0t99f+2VrKIlctDr7v7a/npJwSPii33Jzrw6wZJD17HHgEA4O3nBl9ay9FvrSDw2h+WNzbK1WjLNYHv/NgEXm3TNV4rcgNnq9radE078CPf8RumHWjRq7mhCbfbbT+ITN0PTNsPvZ30ye8mf/R76DarrchzwnbDrYaucfxWVHUiU/NCx7S3f9jwwi03SFcO267j1T2nGnl+y4T+duC4q8aErtsT6NXcVuTVvWSyZdqB16wGu+YnfmO76ZqaGzqB1478rMFuX16r7gfNtNlVxVM/6BAAgLfRsxeHjz/qdPaejpk40uSYfGJhSIOMEQQAwFfMSbnun39h3Eql15wUAAAAAAAAAAAAAAAAAAAAAADoc5b7/6aamB92s6B0POcX756pHUuzTmyaicK0a3VviTh8/LcxwUvHc7q7vzfm6Nw28B/fkN5J5yibU5x9X0vp3njp1X897Vrf38/26MiYZOHQRYvHx6I4+/8OycSTP41YFMdxPH71xf59uDBuA/snipKeLrzCIXgDJyMA5+p/AQAA//9EWjnX")
truncate(0x0, 0x0)
socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffffffffffffc3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
recvmsg(r3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = msgget$private(0x0, 0x5bd)
msgsnd(r5, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0)
msgsnd(r5, 0x0, 0x401, 0x0)
msgctl$IPC_RMID(r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='hugepage_set_pmd\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
futex(&(0x7f0000000580)=0x1, 0x8, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x2, 0x0)
ioctl(r2, 0x6, &(0x7f0000000740))
lchown(&(0x7f0000000dc0)='./file0\x00', 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

1.956815895s ago: executing program 1 (id=860):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3f, &(0x7f0000000680)=ANY=[@ANYBLOB="188f0b2d50621b104b0105000000002098a740b3", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024", @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = dup2(r5, r5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x58, [{}, {0x0, 0x100000000000000}]}, 0x68)
write$selinux_load(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757831d49c4477e791cd26120ebf4f2ca69d8a6a94af66e2d93fe2e912c552da37c405f62b"], 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x10)
r10 = inotify_init1(0x80000)
inotify_add_watch(r10, &(0x7f00000002c0)='./file0\x00', 0x600010c)
lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000007c0))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398e5, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x3, 0x1, 0x1}}, 0x40)
fcntl$setlease(r0, 0x400, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x16da82, 0x0)

1.941230705s ago: executing program 3 (id=861):
r0 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
fgetxattr(r2, &(0x7f0000000080)=@random={'osx.', '\xfc@\x00'}, 0x0, 0x0)
inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x600010c)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
unshare(0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x2, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$eJzs3V9rZGcZAPDnTDJrtpuaVL2ohdZiK9miO5M0tg1etBXFu4JS79eQTELIJBMyk3YTiqT4AQQRXfDKK28EP4Ag+xFkYcG9FxVFdFcvvFCPnDMn2ex4ZpPQ+bMkvx+8M+9555zzPG+yOfOeP3tOAJfWyxHxbkRMRMRrETFTtFeKEofdks338MFHK1nJPnn/b0kkRVtEXj12rVhsqvtWqr1/sLncbDZ2i+l6Z2un3t4/uLGxtbzeWG9sLy4uvLn01tIbS/MD6WfWr7e/+aef/PAX33r7N1/58Pc3/3L9+1nS3yg+L/oxcPfz12r2szg2GRG7wwg2BhNFf6rjTgQAgDPJxvifiYgv5uP/mZjIR3O53iHd1OizAwAAAAYhfWc6/p1EpAAAAMCF9U5ETEdSqRXXAkxHpVKrda/h/Vw8U2m22p0vr7X2tlezzyJmo1pZ22g25otramejmmTTC3n90fTrPdOLEfFcRPx45mo+XVtpNVfHffADAAAALolrPfv//5zp7v8DAAAAF8zsuBMAAAAAhq7f/n8y4jwAAACA4XH+HwAAAC60b7/3XlbSo+dfr36wv7fZ+uDGaqO9WdvaW6mttHZ3auut1np+z76t09bXbLV2vhrbe7fqnUa7U2/vH9zcau1td25ueH4gAAAAjMtzX7hzP4mIw69dzUvmSvYy0WcB1wrAhVE5z8x/HF4ewOj1+5oHLr7JcScAjM/huBMAxu2xW32UDApOXrzz2DGD3w4vJwAAYLDmPl9+/j/bBaiOOzlgqM51/h+4UJz/h8vrnOf/7w4rD2D0qkYAcOmd9qiPvjfvKDv/f6VsxjQ9dV0AAMBQTeclqdSKc4HTUanUahHP5v/Vv5qsbTQb8xHx6Yj43Uz1U9n0Qr5k4vGAAAAAAAAAAAAAAAAAAAAAAAAAAHBGaZpECgAAAFxoEZU/J8Xzv+ZmXp3uPT5wJfnXTBSP9PrwZ+//9NZyp7O7kLX//bi9c7tof30cRzAAAACAXkf76Uf78QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwSA8ffLRyVEYZ969fj4jZsviTMZW/T0U1Ip75RxKTJ5ZLImJiAPEPP46I58viJ1laMVtk0Ru/EhFXRxP/xTRNS+NfG0B8uMzuZNufd8v+/irxcv5e/vc/WZRPqv/2r3K8/Zvos/179owxXrj3q3rf+B9HvDBZvv05ip/0if9K2QpLfijf++7Bwf81dlce6c8j5kq/f5LHYtU7Wzv19v7BjY2t5fXGemN7cXHhzaW3lt5Ymq+vbTQbxWtpH3/04q//29P0n7Qr73/0iT97Sv9fzSrVE41pb5gi2L1bDz7brVZ7VpHHv/5K+e//+SfEz/5NfKn4Hsg+nzuqH3brJ730y7svlSZWxF/t0//Tfv/X+620x2vf+cEfzjgrADAC7f2DzeVms7E79MrtNE1HFUvl/JWj0d3QQkw9LT1VOa0yiCNbAADA0+bRoH/cmQAAAAAAAAAAAAAAAAAAAMDl1d6PyrBvJ9Yb83A8XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKL/BQAA//9PHd4N")
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x1016c7, 0x8, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x92ae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r7 = dup(r6)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2)
r9 = fcntl$dupfd(r7, 0x0, r8)
r10 = dup3(r6, r9, 0x80000)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x19)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x40041)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)

1.908221555s ago: executing program 1 (id=862):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x67)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x10002}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x19fbcc0e, 0x800000, 0x0, 0x8000000000000001, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r7, &(0x7f00000005c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x3}}, 0x120)
r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$pppl2tp(0x18, 0x1, 0x1)
write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r11, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x10)
dup(0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x4f0, 0x220, 0x110, 0x408, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast2, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @rand_addr=0x64010102, 0xf}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:nvram_device_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540)

1.868105265s ago: executing program 0 (id=863):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@errors_remount}, {@dax_always}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@nouid32}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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")
openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r7, 0x1c05}], 0x2, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x5, 0x1, 0x100, 0x400, 0x9, r9})

1.618833606s ago: executing program 2 (id=864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d00000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000063fd23bdbcdb44033cb3cc000000000000000000000000701cf14cd3a62ff1d3079ab61768c503e8d41172079af6b8ef8c7f5e4bca3104cda5195c7cddd5332eaa1fcb41d484df7bc5089c26561ce7e0b6d46f9e34b8d8c3601d07ad625e6af8dfef5f4da7e338f2d9dcf09a9b81991f2c264d96d8ffbb930fc43dfea5fc8797f2156d66a25bb515559f32167407880fe1421b43d2c6515276f3a9cececbbf7b5f33691d0134542a7ca5a03dde"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=<r1=>0xffffffffffffffff, @ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000)
unshare(0x68040200)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c756e616d653dd0"])
socket$inet_sctp(0x2, 0x5, 0x84)
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
close(r13)

1.429622787s ago: executing program 3 (id=865):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000140)={0x0, 0x7000, 0x80000}, 0x20)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a})
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
finit_module(r4, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
close_range(r9, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r2, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8800, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20)
write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='hrtimer_init\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x18)
unshare(0x68040200)

1.394590917s ago: executing program 1 (id=866):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
eventfd(0x400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="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")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x114, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x92d9, 0x4752, 0x6, 0x5, 0x3480, 0x9, 0x8000, 0x9, 0x2]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x104}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10c}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5c}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, 0x114}, 0x1, 0x0, 0x0, 0x20044051}, 0xc0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r7}, 0x10)
syz_clone(0x3e8b6100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000005c0)='kfree\x00', r9}, 0x18)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000001000000000000a00000a34000000060a010400000000000000000200000008000b40000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x7, 0x5})

1.326190636s ago: executing program 1 (id=867):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008000, &(0x7f0000000040), 0x1, 0x5db, &(0x7f0000000680)="$eJzs3c9vVNUeAPDvmf6gpfBayMt7j7d4NHl5geRJSwsYYlzAnjT4I27cWGkhSIGG1mjRxJLgxsS4McbElQvxv1CULStduXDjypAQNSxNHHNn5rbTdqZDm2kvcj+fZOg958xwzu30O+fMmXPuBFBao9k/lYhDETGfIobT8kpZbzQKR+v3e/TbuxeyW4pq9aVfUqRGXn7/1Pg51HjwQER8922Kgz0b611Yunllem5u9kYjPb54dX58YenmsctXpy/NXpq9Nvns5OlTJ0+dnjjetXM9d/uNt4Y/mHr1i89+TxNf/jiV4kzsa5Q1n0e3jMZo/XeyZ21+9ns93e3KCtLTOJ/mpzj1FtggtiR//voi4p8xHD2x+uQNx/svFNo4YEdVU0R1vfw1YEMB8HRJwhxKKh8H5O/t178Pruz+kATYJQ/P1icANsZ/b31uMAZqcwN7H6VontZJEdGNmbmsjvv3pm5fvDd1O3ZoHg5obflWRPyrVfynWmyO1Gbxs/ivrIn/bFxwvvEzy39xm/WPrkuLf9g99fgf2Fb8v9YU/69vs37xDwAAAAAAAN1z92xEPNPq8//KyvqfaLH+ZygiznSh/s6f/1UedKEaoIWHZyOeb7n+txIR3xyoVmOkp5HaX1sP0JcuXp6bPR4Rf4uIo9G3J0tPbFLHsQ8PftquLF//l9+y+u831gLWN85WHvSu2z87M7043ZWTh5J7eCvi3y3X/6aV/j+16P+z14P5x6zj4P/unG9Xtnn8Azup+nnEkZb9f1q5T9r8+hzjtfHAeD4q2Og/73z0Vbv6O8b/QFdPF2iS9f97N4//kdR8vZ6FrddxYqm32q6sc//fevzfn16uXXKmv5H39vTi4o2JiP50rifLbc5PEctbbzU8fWpxMrkaL1n8H/3v5vN/rcb/g7ExqNKva/cU5/7xx9BP7dpj/A/FyeJ/Zkv9/9YPJu+MfN2u/sfr/0/W+vqjjRzzf1D3SR6m/Wvz8+AbWI3d3nVF2xzNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACViNgXqTK2clypjI1FDEXE32NvZe76wuL/L15/89pMVlb7/v9K/k2/w/V0yr//f6QpPbkufSIiDkTExz2DtfTYhetzM0WfPAAAAAAAAAAAAAAAAAAAADwhhtrs/8/83FN064Ad11t0A4DCtIj/74toB7D79P9QXuIfykv8Q3mJfygv8Q/lJf6hvMQ/lJf4BwAAAACAp8qBw3d/SBGx/Nxg7Zbpb5T1FdoyYKdVim4AUBiX+IHysvQHyst7fCB1KB9o+6BOj4z97YvmL3RsGAAAAAAAAAAAAACw4sgh+/+hrOz/h/Ky/x/KK9//f7jgdgC7z3t8IDrs5G+5/7/jowAAAAAAAAAAAACAblpYunllem5u9kZJD/pXc155EtqzuwfVavW97K/gSWnPX/wgXwpfZDMGu/UfFvu6BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPozAAD//wHEHxQ=")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000c40)="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", 0x18d)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r9}, 0x0, &(0x7f0000000880)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0))

1.320899526s ago: executing program 4 (id=868):
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/\x00')
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x8000000000000001)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890)
r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ac0)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0xe}, {0x0, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000bb6da80f4b4287339276c71b45a15ff59f33db89223c68961d4eb730f9f0d4d59d84ca9e7c74b30cf2559e14d56af47cb210b377eeaf8ed09d931016897c4f5dcda1830fa8233c940207fe69d9192346ca641652c21b2af9370710f15373de269b37e856191b0135cdc600f5ffe3854fec54da92cb3502a5b380efa7fc352059007b199978f802635cd18744d54bdb2bac912ae10250ace0971947f158d9949236cdb6e4aba6deede25082b89ae83ff9af186aed551d62a195", @ANYRES32=0x0, @ANYRES32=r4], 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, r8, 0x20001}, [@IFLA_MTU={0x8, 0x4, 0xf}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x30}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@empty, @mcast2, @local, 0x4, 0x2, 0x0, 0x400, 0x9, 0x2580242, r8})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7}, 0x18)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

1.219912547s ago: executing program 2 (id=869):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000000140)={0x0, 0x0, 0x80000}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/25, 0x19}, {&(0x7f0000001480)=""/162, 0xa2}], 0x3, 0x40, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
socket$key(0xf, 0x3, 0x2)
syz_io_uring_setup(0x690a, &(0x7f00000005c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140))
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180))
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r6)
keyctl$invalidate(0x15, r6)
close_range(r5, r5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfffffffd)
io_setup(0x2007, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])

1.218688227s ago: executing program 4 (id=870):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r7, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000700)=""/25, 0x19}], 0x4, &(0x7f0000000300)=""/99, 0x63}, 0x3}, {{0x0, 0x0, &(0x7f0000000400), 0x27, &(0x7f0000000440)=""/220, 0xdc}, 0x3}], 0x2, 0x832b, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
sendto$inet6(r8, &(0x7f0000003240)="0d0ad7c36d", 0x5, 0x6d91fb6106d8d10c, 0x0, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)="1ae96d0103010000", 0x8)
socket(0x10, 0x3, 0x0)

1.112935157s ago: executing program 3 (id=871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x0, 0x2710}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x34, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x7}, @void}}}, 0x1c}}, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
inotify_init1(0xc0000)
setrlimit(0x9, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x82)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0xa)
r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$selinux_validatetrans(r5, 0x0, 0x4c)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.069684287s ago: executing program 2 (id=872):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
lseek(r5, 0x2000, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67)
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

941.959518ms ago: executing program 0 (id=873):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, &(0x7f0000000340)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
preadv2(r2, 0x0, 0x0, 0x400, 0x7ff, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYRESOCT=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880)
sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000003c80))
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x20000312)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

930.606027ms ago: executing program 1 (id=874):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="b868570000ee0000000000000034a40059000000000000858e33ac7a18af29e60d00000000000000c466e0b93ab3a37d28ade86a7b7bf9a095c322ac71fce8887821bee1950e5f3b8d2c89254e76cf006f26861c627a1ff3738315d7ab53f18df7b849b45470608ae91851aae1734da40f471987a530", @ANYRESOCT, @ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, @void, @value}, 0x75)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fremovexattr(r0, &(0x7f0000002480)=@known='trusted.overlay.upper\x00')
ppoll(&(0x7f0000000300)=[{}, {}, {r0, 0x4502}], 0x3, 0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000b8983e43fe0cc55dd24602279d99d495fbe89aa02a5d90b9a64276c8e029552ce0897186b6c062e28f1977370515e68c750d134dc90082951b3bd464afe428c1442225d1a91cb7071ddcfd00a0e82984a4ea73de123661b45481fdb44cd7e3ee09503f0af9b175ed761651d58a4e63f2db6e539b08bf481f85f839fdd17a6311eddfa68da1f15e216445ae30813a4f21325f0b69da4c17365930afe3c78e29a5c68ec6cdf10386acaf82f7cd808ed1217dbb5eb73c927b1c418c3f2f31c02faa2b21b0d0cb057101"], 0x8, 0x0)
msgctl$IPC_RMID(r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0)
removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x3, 0x5, 0x93d, 0x0, 0x0, "88297c25317f52b4b34e5c89aedf6868c9be97"})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x880)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)

690.666998ms ago: executing program 3 (id=875):
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='^.\x00')
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='mctp_key_acquire\x00', r5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010102, 0xffffffffffffffff, "6201ca4375ff639878c2de265d052a89dc54a5c31cdb0af6245a29d2515cdf22", 0x7d83, 0x465, 0x80, 0x2e8}, 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)

341.369429ms ago: executing program 4 (id=876):
r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000080000000400000021000000c1000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000170000000000000000000000c917b7b0a0006968c76b0cf7c5c5e3e98a719117519e30b2452974eae700d8517ce2f7c5d4e2988c24d391b587"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x20000000}, 0x20)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@private2, <r3=>0x0}, &(0x7f0000000600)=0x14)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000008e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x0, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-5lx  \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x2, 0x56, &(0x7f0000000540)=""/86, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000640)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x1, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r5, r6, r2, r2, r1, r2, r2, r2], &(0x7f0000000840)=[{0x5, 0x1, 0x1}, {0x1, 0x5, 0xd, 0x7}], 0x10, 0x10, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x1}})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32], 0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$selinux_user(r8, &(0x7f0000000940)=ANY=[@ANYBLOB='systemiu:object_r:ptchown_exec_t:s0 system_u\x00'], 0x2d)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b800070000000103000000000000000002420c000000054000000000000000030900020073797a300000000080000380080001400000000054000380140001006d6163766c616e3100000000000000001400010067656e6576653100000000c12eb7739e009e135809008c44fddbfd0000000000140001006970365f7674693000a70000000000002dfd0167006e6574707f6930000018000380140001006d6163767461703000000000000000000900020073797a3200"/200], 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x1)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000003740)='rxrpc\x00', 0x0, &(0x7f00000037c0)="592d94a0d233f82f9d187fa0caa179600947c499607ead21fcf96957c1d2dff0", 0x20, 0xfffffffffffffffe)

130.983689ms ago: executing program 4 (id=877):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000005c0)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='fscache_invalidate\x00', r2, 0x0, 0x8b}, 0x18)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x20, 0x4, 0x3, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20001, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
sendmmsg$unix(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000)
mkdir(0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = getegid()
r9 = getgid()
setregid(r8, r9)
r10 = fcntl$getown(r7, 0x9)
ioprio_set$pid(0x1, r10, 0x2000)
r11 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000180)={0xb, 0x173, 0xcd})

113.172699ms ago: executing program 2 (id=878):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x4)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync')
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240))
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), r0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)={0x50, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x50}}, 0x4010)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r12 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000100)='cpu\xa0\t\xd4\xfe\a/')

91.626879ms ago: executing program 3 (id=879):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0x0, 0x1}, {0x6, 0x0, 0x20, 0x4000}]})
pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="07e0d2", 0x3}], 0x1, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
syz_usb_disconnect(r2)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800006693c1003cc1c74626000000bfa200002a4dab81444f0858f8ffffffb70000b072727b0095000000000000009062903ce2a346e89fc83a8e3d30e83d83"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8000000000000000}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0xd7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000440)='wfdno', 0xfffffffffffffffc)

65.485679ms ago: executing program 0 (id=880):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x42c03)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd29)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000d9a000/0x10000)=nil, 0x10000)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = epoll_create1(0x0)
r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r6, 0x11, 0x0, r8, @void, @value}, 0x14)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0)

59.9282ms ago: executing program 4 (id=881):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x2f8, 0x1d0, 0xffffffff, 0x1d0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x1, 0x2, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000640)=ANY=[@ANYBLOB="0f539af210940180c200000086dd601200b000483a00fc0000005cfa22500000000000000000ff020000000000000000000000000001030290780000000060d4696200003a0120010000000000000000000000000001200100000000000000000000000000002f01000000000000070822ebffff00fc0000000000000000eae299aeb8b55266cd80fde2d9f03dd341057d29baa8dbda2f351fc058e0e3526c89075d565f9eb47469569ec3f4f304e05362"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
sigaltstack(0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x13, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x100000001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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")
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0)

0s ago: executing program 1 (id=882):
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b6affec850000007d000000850000002a00000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
keyctl$chown(0x4, r0, 0x0, 0xee01)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
inotify_init1(0x80000)
keyctl$unlink(0x9, r0, r0)
ppoll(&(0x7f0000001f00), 0x0, &(0x7f0000001f40), 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6)
fcntl$addseals(r2, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9})
creat(&(0x7f00000000c0)='./file0\x00', 0x100)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0051ff028008003a00b71f9c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
unshare(0x2c060000)
r4 = syz_io_uring_setup(0x2526, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x10000003, 0x5}, &(0x7f0000000480)=<r5=>0x0, &(0x7f0000000500)=<r6=>0x0)
r7 = eventfd2(0x936, 0x401)
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r7, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x100, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
prctl$PR_SET_DUMPABLE(0x4, 0x2)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x215)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_audit(0x10, 0x3, 0x9)

kernel console output (not intermixed with test programs):

8] IPVS: Error joining to the multicast group
[   77.332095][ T5018] loop3: detected capacity change from 0 to 1764
[   77.347454][ T5018] ISOFS: unable to read i-node block
[   77.352900][ T5018] isofs_fill_super: get root inode failed
[   77.443578][ T5021] futex_wake_op: syz.1.431 tries to shift op by -1; fix this program
[   77.457057][ T5021] netlink: 'syz.1.431': attribute type 3 has an invalid length.
[   77.490252][ T5023] team0 (unregistering): Port device bridge0 removed
[   77.764974][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   77.992366][ T5036] lo speed is unknown, defaulting to 1000
[   78.006944][ T5036] lo speed is unknown, defaulting to 1000
[   78.014304][ T5036] lo speed is unknown, defaulting to 1000
[   78.057500][ T5037] syz.0.437[5037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.057572][ T5037] syz.0.437[5037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.101415][ T5037] syz.0.437[5037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.265268][ T5047] xt_hashlimit: max too large, truncated to 1048576
[   78.303883][ T5047] macvlan1: entered promiscuous mode
[   78.315454][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[   78.347200][ T5047] macvlan1 (unregistering): left promiscuous mode
[   78.373738][ T5055] lo speed is unknown, defaulting to 1000
[   78.386494][ T5055] lo speed is unknown, defaulting to 1000
[   78.392603][ T5055] lo speed is unknown, defaulting to 1000
[   78.403456][ T5061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.424797][ T5061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.535822][ T5066] netlink: 'syz.3.444': attribute type 2 has an invalid length.
[   78.597313][ T5073] loop3: detected capacity change from 0 to 1024
[   78.628167][ T5073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.641333][ T5073] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.674550][ T5073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.944951][ T5086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5086 comm=syz.4.449
[   79.126631][ T5090] lo speed is unknown, defaulting to 1000
[   79.134493][ T5090] lo speed is unknown, defaulting to 1000
[   79.143435][ T5090] lo speed is unknown, defaulting to 1000
[   79.541747][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'.
[   79.975462][ T5112] netlink: 56 bytes leftover after parsing attributes in process `syz.2.456'.
[   80.417523][ T5133] delete_channel: no stack
[   80.423742][ T5133] delete_channel: no stack
[   80.430343][ T5133] netlink: 'syz.3.461': attribute type 21 has an invalid length.
[   80.576772][ T5143] loop3: detected capacity change from 0 to 128
[   80.583409][ T5143] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.629478][ T5143] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.678263][ T5149] 4��s[5149] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.678430][ T5149] 4��s[5149] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.690334][ T5143] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   80.701606][ T5149] 4��s[5149] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.867642][ T5149] netlink: '4��s': attribute type 178 has an invalid length.
[   81.137256][ T5160] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   81.224563][ T5164] netlink: 'syz.1.471': attribute type 39 has an invalid length.
[   81.239069][ T5166] loop2: detected capacity change from 0 to 512
[   81.351461][ T5166] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino
[   81.387409][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.398184][   T29] kauditd_printk_skb: 503 callbacks suppressed
[   81.398210][   T29] audit: type=1326 audit(1733740448.976:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.427814][   T29] audit: type=1326 audit(1733740448.976:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.465815][ T5166] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 15 (err -117)
[   81.481926][ T5166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.539574][   T29] audit: type=1326 audit(1733740449.056:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.563166][   T29] audit: type=1326 audit(1733740449.056:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.586649][   T29] audit: type=1326 audit(1733740449.056:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.610003][   T29] audit: type=1326 audit(1733740449.056:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.633621][   T29] audit: type=1326 audit(1733740449.056:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.657052][   T29] audit: type=1326 audit(1733740449.056:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.680406][   T29] audit: type=1326 audit(1733740449.056:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.703764][   T29] audit: type=1326 audit(1733740449.056:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ea5cfed9 code=0x7ffc0000
[   81.930802][ T5183] vlan0: entered allmulticast mode
[   81.936641][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.971379][ T5185] lo speed is unknown, defaulting to 1000
[   81.976739][ T5187] bridge_slave_0: left allmulticast mode
[   81.982809][ T5187] bridge_slave_0: left promiscuous mode
[   81.988651][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.997044][ T5187] bridge_slave_1: left allmulticast mode
[   82.002760][ T5187] bridge_slave_1: left promiscuous mode
[   82.008525][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.017237][ T5187] bond0: (slave bond_slave_0): Releasing backup interface
[   82.025449][ T5187] bond0: (slave bond_slave_1): Releasing backup interface
[   82.034119][ T5187] team0: Port device team_slave_0 removed
[   82.042169][ T5187] team0: Port device team_slave_1 removed
[   82.050143][ T5185] lo speed is unknown, defaulting to 1000
[   82.057846][ T5185] lo speed is unknown, defaulting to 1000
[   82.172556][ T5197] loop4: detected capacity change from 0 to 128
[   82.188061][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.188755][ T5195] vlan2: entered promiscuous mode
[   82.207045][ T5197] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   82.245481][ T5197] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.303422][ T5200] loop3: detected capacity change from 0 to 512
[   82.518357][ T5211] lo speed is unknown, defaulting to 1000
[   82.525105][ T5211] lo speed is unknown, defaulting to 1000
[   82.531777][ T5211] lo speed is unknown, defaulting to 1000
[   82.680405][ T5200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.694228][ T5200] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.763463][ T5208] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   82.911098][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   82.958544][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.993641][ T5221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'.
[   83.007539][ T5220] SELinux:  Context system_u:object_r:event_device_t:s0 is not valid (left unmapped).
[   83.016031][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'.
[   83.056440][ T5223] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   83.088880][ T5223] loop3: detected capacity change from 0 to 512
[   83.116345][ T5223] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   83.125531][ T5223] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   83.144843][ T5226] netlink: 72 bytes leftover after parsing attributes in process `+}[@'.
[   83.163774][ T5223] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   83.208989][ T5223] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   83.252058][ T5223] System zones: 0-2, 18-18, 34-34
[   83.274499][ T5223] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   83.322619][ T5235] team0 (unregistering): Port device team_slave_0 removed
[   83.337610][ T5235] team0 (unregistering): Port device team_slave_1 removed
[   83.354384][ T5223] EXT4-fs (loop3): 1 truncate cleaned up
[   83.364806][ T5223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.380011][ T5237] lo speed is unknown, defaulting to 1000
[   83.386070][ T5237] lo speed is unknown, defaulting to 1000
[   83.394811][ T5237] lo speed is unknown, defaulting to 1000
[   83.404499][ T5223] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 3: comm syz.3.492: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   83.480516][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.630034][ T5247] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   83.745747][ T5259] loop2: detected capacity change from 0 to 128
[   83.760272][ T5259] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.779138][ T5259] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.807734][ T5259] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   83.883525][ T5264] netlink: 256 bytes leftover after parsing attributes in process `syz.1.506'.
[   83.912297][ T5267] dccp_invalid_packet: P.Data Offset(100) too large
[   84.061246][ T5267] loop3: detected capacity change from 0 to 512
[   84.213047][ T5267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.358768][ T5267] EXT4-fs (loop3): 1 truncate cleaned up
[   84.442871][ T5267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.557282][ T5253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.503: inode #1073372648: comm syz.3.503: iget: illegal inode #
[   84.606978][ T5253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.503: error while reading EA inode 1073372648 err=-117
[   84.630836][ T5253] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm syz.3.503: corrupted xattr block 33: invalid header
[   84.661926][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.672340][ T5253] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[   84.677521][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.718980][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.753478][ T5280] bridge0: port 3(gretap0) entered blocking state
[   84.760117][ T5280] bridge0: port 3(gretap0) entered disabled state
[   84.775872][ T5280] gretap0: entered allmulticast mode
[   84.781969][ T5280] gretap0: entered promiscuous mode
[   84.788075][ T5280] bridge0: port 3(gretap0) entered blocking state
[   84.794553][ T5280] bridge0: port 3(gretap0) entered forwarding state
[   84.813490][ T5280] bridge0: port 4(vlan0) entered blocking state
[   84.819911][ T5280] bridge0: port 4(vlan0) entered disabled state
[   84.827893][ T5280] vlan0: entered allmulticast mode
[   84.833784][ T5280] vlan0: left allmulticast mode
[   84.903177][ T5282] smc: net device bond0 applied user defined pnetid SYZ0
[   84.944505][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.028610][ T5295] loop3: detected capacity change from 0 to 1024
[   85.035593][ T5295] EXT4-fs: Ignoring removed mblk_io_submit option
[   85.058401][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.302495][ T5324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'.
[   85.488702][ T5345] program syz.0.521 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.549607][ T5349] serio: Serial port ptm0
[   85.651403][ T5351] block device autoloading is deprecated and will be removed.
[   85.757953][ T5356] 9pnet_fd: Insufficient options for proto=fd
[   85.790150][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.825675][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.876255][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[   85.927517][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.192587][ T5367] loop3: detected capacity change from 0 to 512
[   86.220734][ T5367] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.524: corrupted xattr block 95: invalid header
[   86.239592][ T5366] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[   86.250151][ T5367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.524: bg 0: block 7: invalid block bitmap
[   86.281235][ T5367] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   86.301472][ T5367] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.524: corrupted xattr block 95: invalid header
[   86.316991][ T5367] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[   86.326077][ T5367] EXT4-fs (loop3): 1 orphan inode deleted
[   86.332299][ T5367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.362124][ T5372] bridge_slave_0: left allmulticast mode
[   86.367925][ T5372] bridge_slave_0: left promiscuous mode
[   86.373681][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.408259][   T29] kauditd_printk_skb: 526 callbacks suppressed
[   86.408275][   T29] audit: type=1400 audit(1733740453.986:5154): avc:  denied  { unlink } for  pid=3301 comm="syz-executor" name="file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.440943][ T5372] bridge_slave_1: left allmulticast mode
[   86.446812][ T5372] bridge_slave_1: left promiscuous mode
[   86.449569][   T29] audit: type=1400 audit(1733740454.016:5155): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   86.452593][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.474387][   T29] audit: type=1400 audit(1733740454.016:5156): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.503194][   T29] audit: type=1400 audit(1733740454.016:5157): avc:  denied  { open } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   86.525786][   T29] audit: type=1400 audit(1733740454.016:5158): avc:  denied  { getattr } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   86.533639][ T5380] loop2: detected capacity change from 0 to 1024
[   86.548768][   T29] audit: type=1400 audit(1733740454.016:5159): avc:  denied  { setopt } for  pid=5376 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.549757][   T29] audit: type=1400 audit(1733740454.086:5160): avc:  denied  { create } for  pid=5362 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   86.595324][   T29] audit: type=1400 audit(1733740454.086:5161): avc:  denied  { write } for  pid=5362 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   86.613987][ T5380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.616345][   T29] audit: type=1400 audit(1733740454.156:5162): avc:  denied  { mounton } for  pid=5375 comm="syz.2.530" path="/106/file0" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   86.655620][ T5380] EXT4-fs (loop2): shut down requested (0)
[   86.662045][   T29] audit: type=1400 audit(1733740454.206:5163): avc:  denied  { execmem } for  pid=5376 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   86.718143][ T5372] bond0: (slave bond_slave_0): Releasing backup interface
[   86.726073][ T5372] bond0: (slave bond_slave_1): Releasing backup interface
[   86.733952][ T5372] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.741721][ T5372] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.771366][ T5386] loop1: detected capacity change from 0 to 256
[   86.782516][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.873708][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[   87.020607][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.044436][ T5390] loop4: detected capacity change from 0 to 512
[   87.133301][ T5390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.268975][ T5390] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.461736][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'.
[   87.470805][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'.
[   87.496715][ T5399] siw: device registration error -23
[   87.537400][ T5402] loop2: detected capacity change from 0 to 512
[   87.548291][ T5390] veth0_to_team: entered promiscuous mode
[   87.554208][ T5390] veth0_to_team: entered allmulticast mode
[   87.554628][ T5402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[   87.568224][ T5402] System zones: 0-2, 18-18, 34-34
[   87.574500][ T5402] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.534: bg 0: block 248: padding at end of block bitmap is not set
[   87.590282][ T5402] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.534: Failed to acquire dquot type 1
[   87.603242][ T5402] EXT4-fs (loop2): 1 truncate cleaned up
[   87.609671][ T5402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.622747][ T5402] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.641850][ T5402] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   87.653819][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.700736][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'.
[   87.743419][ T5423] loop1: detected capacity change from 0 to 512
[   87.751127][ T5423] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.763204][ T5423] EXT4-fs: test_dummy_encryption option not supported
[   87.800261][ T5428] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   87.810143][ T5428] SELinux: failed to load policy
[   87.835409][ T5430] loop1: detected capacity change from 0 to 1024
[   87.886589][ T5430] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.542: Failed to acquire dquot type 0
[   87.925272][ T5430] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   87.974497][ T5430] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.542: corrupted inode contents
[   88.002382][ T5430] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.542: mark_inode_dirty error
[   88.014552][ T5430] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.542: corrupted inode contents
[   88.027115][ T5430] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.542: mark_inode_dirty error
[   88.038653][ T5430] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.542: corrupted inode contents
[   88.052002][ T5430] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   88.060803][ T5430] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.542: corrupted inode contents
[   88.073095][ T5430] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.542: mark_inode_dirty error
[   88.087480][ T5430] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   88.097693][ T5430] EXT4-fs (loop1): 1 truncate cleaned up
[   88.104199][ T5430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.125462][ T5430] __nla_validate_parse: 1 callbacks suppressed
[   88.125478][ T5430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.542'.
[   88.182278][ T5444] loop3: detected capacity change from 0 to 164
[   88.213145][ T5445] lo speed is unknown, defaulting to 1000
[   88.219702][ T5445] lo speed is unknown, defaulting to 1000
[   88.226090][ T5445] lo speed is unknown, defaulting to 1000
[   88.534597][ T5444] syz.3.545: attempt to access beyond end of device
[   88.534597][ T5444] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   88.616011][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.653068][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.744549][ T5444] syz.3.545: attempt to access beyond end of device
[   88.744549][ T5444] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   88.966547][ T5444] syz.3.545: attempt to access beyond end of device
[   88.966547][ T5444] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   89.026457][ T5444] syz.3.545: attempt to access beyond end of device
[   89.026457][ T5444] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   89.081955][ T5444] syz.3.545: attempt to access beyond end of device
[   89.081955][ T5444] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   89.160244][ T5457] bridge0: port 1(bond0) entered blocking state
[   89.166704][ T5457] bridge0: port 1(bond0) entered disabled state
[   89.173972][ T5459] atomic_op ffff888117c9d928 conn xmit_atomic 0000000000000000
[   89.186416][ T5444] syz.3.545: attempt to access beyond end of device
[   89.186416][ T5444] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   89.220470][ T5457] bond0: entered allmulticast mode
[   89.227078][ T5457] bond0: entered promiscuous mode
[   89.281429][ T5461] lo speed is unknown, defaulting to 1000
[   89.324810][ T5461] lo speed is unknown, defaulting to 1000
[   89.365093][ T5461] lo speed is unknown, defaulting to 1000
[   89.942180][ T5472] loop4: detected capacity change from 0 to 512
[   89.962628][ T5473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'.
[   89.983760][ T5469] hub 2-0:1.0: USB hub found
[   90.007999][ T5472] EXT4-fs: dax option not supported
[   90.027006][ T5469] hub 2-0:1.0: 8 ports detected
[   91.168559][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[   91.240606][ T5492] loop4: detected capacity change from 0 to 512
[   91.257487][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'.
[   91.356270][ T5492] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.557: iget: bad extended attribute block 1
[   91.388964][ T5490] hsr_slave_1 (unregistering): left promiscuous mode
[   91.402157][ T5503] loop3: detected capacity change from 0 to 512
[   91.437052][ T5503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.450392][ T5492] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.557: couldn't read orphan inode 15 (err -117)
[   91.467688][ T5492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.470752][ T5503] EXT4-fs (loop3): 1 truncate cleaned up
[   91.485466][   T29] kauditd_printk_skb: 290 callbacks suppressed
[   91.485479][   T29] audit: type=1400 audit(1733740459.056:5450): avc:  denied  { mount } for  pid=5491 comm="syz.4.557" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   91.514215][   T29] audit: type=1326 audit(1733740459.056:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa76c8a6ea7 code=0x7ffc0000
[   91.537566][   T29] audit: type=1326 audit(1733740459.056:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa76c84c0e9 code=0x7ffc0000
[   91.560881][   T29] audit: type=1326 audit(1733740459.056:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa76c8ae840 code=0x7ffc0000
[   91.566844][ T5503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.584254][   T29] audit: type=1326 audit(1733740459.056:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa76c8aec27 code=0x7ffc0000
[   91.584285][   T29] audit: type=1326 audit(1733740459.056:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa76c8ae840 code=0x7ffc0000
[   91.584330][   T29] audit: type=1326 audit(1733740459.056:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76c8afed9 code=0x7ffc0000
[   91.623305][ T5492] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, 
[   91.643041][   T29] audit: type=1326 audit(1733740459.056:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76c8afed9 code=0x7ffc0000
[   91.643081][   T29] audit: type=1326 audit(1733740459.066:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa76c8a6ea7 code=0x7ffc0000
[   91.666377][ T5492] block bitmap and bg descriptor inconsistent: 7837 vs 220 free clusters
[   91.729986][   T29] audit: type=1326 audit(1733740459.066:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa76c84c0e9 code=0x7ffc0000
[   91.842469][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.848876][ T5514] loop2: detected capacity change from 0 to 1024
[   91.864615][ T5514] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   91.901775][ T5514] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   91.933418][ T5514] EXT4-fs (loop2): orphan cleanup on readonly fs
[   91.949078][ T5517] loop4: detected capacity change from 0 to 512
[   91.959585][ T5514] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[   91.976905][ T5519] bridge0: port 1(gretap0) entered blocking state
[   91.983407][ T5519] bridge0: port 1(gretap0) entered disabled state
[   91.999111][ T5514] EXT4-fs (loop2): Remounting filesystem read-only
[   92.008682][ T5517] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.560: bad orphan inode 11
[   92.026459][ T5514] EXT4-fs (loop2): 1 orphan inode deleted
[   92.032517][ T5519] gretap0: entered allmulticast mode
[   92.042871][ T5514] SELinux: (dev loop2, type ext4) getxattr errno 5
[   92.049715][ T5517] ext4_test_bit(bit=10, block=4) = 1
[   92.055029][ T5517] is_bad_inode(inode)=0
[   92.059270][ T5517] NEXT_ORPHAN(inode)=2080374784
[   92.064166][ T5517] max_ino=32
[   92.067402][ T5517] i_nlink=0
[   92.076857][ T5519] gretap0: entered promiscuous mode
[   92.082289][ T5517] EXT4-fs (loop4): 1 truncate cleaned up
[   92.096802][ T5519] bridge0: port 2(vlan0) entered blocking state
[   92.103232][ T5519] bridge0: port 2(vlan0) entered disabled state
[   92.109962][ T5519] vlan0: entered allmulticast mode
[   92.115657][ T5519] vlan0: left allmulticast mode
[   92.125962][ T5514] loop2: detected capacity change from 0 to 1764
[   92.154535][ T5514] netlink: 240 bytes leftover after parsing attributes in process `syz.2.559'.
[   92.316478][ T5529] loop1: detected capacity change from 0 to 512
[   92.325077][ T5529] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   92.336707][ T5529] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[   92.344651][ T5527] loop2: detected capacity change from 0 to 256
[   92.346849][ T5529] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.574: Corrupt directory, running e2fsck is recommended
[   92.367339][ T5529] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   92.375652][ T5529] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.574: corrupted in-inode xattr: invalid ea_ino
[   92.406469][ T5529] EXT4-fs (loop1): Remounting filesystem read-only
[   92.497960][ T5534] lo speed is unknown, defaulting to 1000
[   92.505242][ T5534] lo speed is unknown, defaulting to 1000
[   92.513033][ T5534] lo speed is unknown, defaulting to 1000
[   92.729906][ T5529] SELinux: (dev loop1, type ext4) getxattr errno 5
[   92.738333][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'.
[   92.977343][ T5544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.568'.
[   92.989661][ T5544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'.
[   93.316676][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'.
[   93.354567][ T5560] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   93.370020][ T5559] geneve0: entered allmulticast mode
[   93.375576][ T5560] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   93.387090][ T5560] loop4: detected capacity change from 0 to 164
[   93.405999][ T5560] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   93.418711][ T5560] rdma_rxe: rxe_newlink: failed to add vcan0
[   93.466409][ T5559] syzkaller0: entered promiscuous mode
[   93.471937][ T5559] syzkaller0: entered allmulticast mode
[   93.665258][ T5569] loop1: detected capacity change from 0 to 4096
[   93.806234][ T5579] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[   93.997477][ T5587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   94.219490][ T5598] netlink: 76 bytes leftover after parsing attributes in process `syz.2.582'.
[   94.257592][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.273817][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.293780][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   94.298392][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'.
[   94.312703][ T5600] IPVS: Error joining to the multicast group
[   94.710595][ T5611] loop3: detected capacity change from 0 to 512
[   94.718291][ T5611] EXT4-fs: Mount option(s) incompatible with ext3
[   94.794061][ T5615] loop3: detected capacity change from 0 to 1024
[   94.824661][ T5615] EXT4-fs (loop3): shut down requested (0)
[   94.832400][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   94.842148][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   94.851085][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   94.860601][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   94.869691][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   94.881277][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   94.890211][ T5615] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   94.967055][ T5623] syz.1.591[5623] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.967129][ T5623] syz.1.591[5623] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.978957][ T5623] syz.1.591[5623] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.063748][ T5631] loop1: detected capacity change from 0 to 512
[   95.082100][ T5631] EXT4-fs: Ignoring removed bh option
[   95.088394][ T5631] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   95.096788][ T5631] EXT4-fs (loop1): invalid journal inode
[   95.102551][ T5631] EXT4-fs (loop1): can't get journal size
[   95.119408][ T5631] EXT4-fs (loop1): 1 truncate cleaned up
[   95.131965][ T5631] syz.1.594[5631] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.133164][ T5631] random: crng reseeded on system resumption
[   95.959179][ T5649] bridge0: port 2(gretap0) entered blocking state
[   95.965682][ T5649] bridge0: port 2(gretap0) entered disabled state
[   95.975345][ T5649] gretap0: entered allmulticast mode
[   95.981272][ T5649] gretap0: entered promiscuous mode
[   95.992479][ T5647] loop4: detected capacity change from 0 to 512
[   96.007442][ T5647] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   96.019029][ T5647] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[   96.029231][ T5647] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.599: Corrupt directory, running e2fsck is recommended
[   96.048706][ T5647] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   96.054367][ T5649] bridge0: port 3(vlan3) entered blocking state
[   96.058144][ T5647] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.599: corrupted in-inode xattr: invalid ea_ino
[   96.063246][ T5649] bridge0: port 3(vlan3) entered disabled state
[   96.096575][ T5649] vlan3: entered allmulticast mode
[   96.104484][ T5647] EXT4-fs (loop4): Remounting filesystem read-only
[   96.113941][ T5649] vlan3: left allmulticast mode
[   96.125827][ T5647] SELinux: (dev loop4, type ext4) getxattr errno 5
[   96.223281][ T5656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'.
[   96.232302][ T5656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'.
[   96.317136][ T4119] hid (null): unknown global tag 0xc
[   96.322623][ T4119] hid (null): invalid report_count 1547616459
[   96.328893][ T4119] hid (null): unknown global tag 0xc
[   96.346374][ T4119] hid-generic 0003:B8DB:0000.0007: unknown main item tag 0xd
[   96.353894][ T4119] hid-generic 0003:B8DB:0000.0007: unknown global tag 0xc
[   96.361188][ T4119] hid-generic 0003:B8DB:0000.0007: item 0 0 1 12 parsing failed
[   96.397156][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.406568][ T4119] hid-generic 0003:B8DB:0000.0007: probe with driver hid-generic failed with error -22
[   96.412926][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.440677][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'.
[   96.512080][ T5669] pim6reg: entered allmulticast mode
[   96.531369][   T29] kauditd_printk_skb: 836 callbacks suppressed
[   96.531385][   T29] audit: type=1400 audit(1733740464.106:6292): avc:  denied  { mount } for  pid=5668 comm="syz.3.604" name="/" dev="gadgetfs" ino=11714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   96.568247][ T5669] pim6reg: left allmulticast mode
[   96.587485][ T5671] loop1: detected capacity change from 0 to 128
[   96.613056][   T29] audit: type=1400 audit(1733740464.186:6293): avc:  denied  { watch watch_reads } for  pid=5670 comm="syz.1.605" path="/138" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   96.642768][   T29] audit: type=1400 audit(1733740464.216:6294): avc:  denied  { mount } for  pid=5668 comm="syz.3.604" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   96.670077][ T5669] hub 6-0:1.0: USB hub found
[   96.674762][ T5669] hub 6-0:1.0: 8 ports detected
[   96.685671][   T29] audit: type=1400 audit(1733740464.256:6295): avc:  denied  { create } for  pid=5668 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.707337][   T29] audit: type=1400 audit(1733740464.276:6296): avc:  denied  { ioctl } for  pid=5668 comm="syz.3.604" path="socket:[11716]" dev="sockfs" ino=11716 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.756399][   T29] audit: type=1400 audit(1733740464.286:6297): avc:  denied  { connect } for  pid=5670 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   96.776407][   T29] audit: type=1400 audit(1733740464.296:6298): avc:  denied  { name_connect } for  pid=5670 comm="syz.1.605" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[   96.797611][   T29] audit: type=1400 audit(1733740464.296:6299): avc:  denied  { listen } for  pid=5670 comm="syz.1.605" faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   96.818013][   T29] audit: type=1400 audit(1733740464.326:6300): avc:  denied  { unmount } for  pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   96.880320][ T5679] loop3: detected capacity change from 0 to 512
[   96.886879][ T5679] EXT4-fs: Ignoring removed nobh option
[   96.892965][   T29] audit: type=1400 audit(1733740464.426:6301): avc:  denied  { create } for  pid=5678 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.915082][ T5679] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   96.924067][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'.
[   96.933138][ T5679] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.607: attempt to clear invalid blocks 2 len 1
[   96.946958][ T5679] EXT4-fs (loop3): Remounting filesystem read-only
[   96.953703][ T5679] EXT4-fs (loop3): 1 truncate cleaned up
[   96.959954][ T5679] SELinux: (dev loop3, type ext4) getxattr errno 5
[   97.017801][ T5688] loop4: detected capacity change from 0 to 512
[   97.028529][ T5688] EXT4-fs mount: 17 callbacks suppressed
[   97.028543][ T5688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.034844][ T5693] netlink: 128 bytes leftover after parsing attributes in process `syz.2.611'.
[   97.052854][ T5688] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.066010][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[   97.110958][ T5699] loop3: detected capacity change from 0 to 1024
[   97.143543][ T5702] loop2: detected capacity change from 0 to 1024
[   97.152257][ T5699] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   97.184617][ T5699] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   97.200967][ T5702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.214197][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.224163][ T5699] EXT4-fs (loop3): mount failed
[   97.244371][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.293886][ T5709] loop2: detected capacity change from 0 to 2048
[   97.362662][ T5710] loop4: detected capacity change from 0 to 4096
[   97.383940][ T5709]  loop2: p1 < > p4
[   97.390360][ T5709] loop2: p4 size 8388608 extends beyond EOD, truncated
[   97.508607][ T5710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.544563][ T5714] bridge0: port 4(bond0) entered blocking state
[   97.550993][ T5714] bridge0: port 4(bond0) entered disabled state
[   97.611330][ T5710] mmap: syz.4.616 (5710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   97.630237][ T5714] bond0: entered allmulticast mode
[   97.635425][ T5714] bond_slave_0: entered allmulticast mode
[   97.641196][ T5714] bond_slave_1: entered allmulticast mode
[   97.660765][ T5714] bond0: entered promiscuous mode
[   97.665840][ T5714] bond_slave_0: entered promiscuous mode
[   97.671729][ T5714] bond_slave_1: entered promiscuous mode
[   97.677859][ T5714] bridge0: port 4(bond0) entered blocking state
[   97.684171][ T5714] bridge0: port 4(bond0) entered forwarding state
[   97.692141][ T3001]  loop2: p1 < > p4
[   97.696793][ T3001] loop2: p4 size 8388608 extends beyond EOD, truncated
[   97.704426][ T5714] loop3: detected capacity change from 0 to 1024
[   97.706723][ T5717] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[   97.711977][ T5714] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   97.741709][ T3001]  loop2: p1 < > p4
[   97.746608][ T5714] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   97.755438][ T5719] lo speed is unknown, defaulting to 1000
[   97.755909][ T5717] ������: renamed from syzkaller0
[   97.766322][ T3001] loop2: p4 size 8388608 extends beyond EOD, truncated
[   97.766971][ T5714] EXT4-fs (loop3): orphan cleanup on readonly fs
[   97.777007][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.791144][ T5714] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem
[   97.801366][ T5717] tipc: Disabling bearer <eth:syzkaller0>
[   97.808507][ T5714] EXT4-fs (loop3): Remounting filesystem read-only
[   97.824191][ T5714] EXT4-fs (loop3): 1 orphan inode deleted
[   97.830557][ T5714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   97.832905][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   97.843034][ T5714] SELinux: (dev loop3, type ext4) getxattr errno 5
[   97.859548][ T5714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.863630][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   97.878740][ T5719] lo speed is unknown, defaulting to 1000
[   97.893350][ T5719] lo speed is unknown, defaulting to 1000
[   97.905628][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   97.906100][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   97.952769][ T5728] lo speed is unknown, defaulting to 1000
[   98.020283][ T5728] lo speed is unknown, defaulting to 1000
[   98.032713][ T5731] netlink: 'syz.4.620': attribute type 7 has an invalid length.
[   98.049007][ T5728] lo speed is unknown, defaulting to 1000
[   98.058073][ T5725] wireguard0: entered promiscuous mode
[   98.063671][ T5725] wireguard0: entered allmulticast mode
[   98.105185][ T5737] tun0: tun_chr_ioctl cmd 1074025675
[   98.110698][ T5737] tun0: persist enabled
[   98.130228][ T5739] lo speed is unknown, defaulting to 1000
[   98.137437][ T5739] lo speed is unknown, defaulting to 1000
[   98.153056][ T5739] lo speed is unknown, defaulting to 1000
[   98.258999][ T5746] loop3: detected capacity change from 0 to 128
[   98.357918][ T5749] __nla_validate_parse: 2 callbacks suppressed
[   98.357935][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'.
[   98.378137][ T5749] ����: renamed from syz_tun (while UP)
[   98.388157][ T5748] loop2: detected capacity change from 0 to 8192
[   98.535697][ T5754] loop3: detected capacity change from 0 to 512
[   98.542388][ T5754] EXT4-fs: Ignoring removed bh option
[   98.548748][ T5754] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   98.558116][ T5754] EXT4-fs (loop3): 1 truncate cleaned up
[   98.564067][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.614363][ T5760] syz.2.629[5760] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   98.614564][ T5760] syz.2.629[5760] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   98.620471][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[   98.626049][ T5760] syz.2.629[5760] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   98.658902][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.745751][ T5766] loop2: detected capacity change from 0 to 2048
[   98.769738][ T5766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.808279][ T5768] 9pnet: Could not find request transport: f
[   98.836077][ T5768] lo speed is unknown, defaulting to 1000
[   98.851196][ T5768] lo speed is unknown, defaulting to 1000
[   98.861604][ T5768] lo speed is unknown, defaulting to 1000
[   98.867030][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.940249][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'.
[   99.005323][ T5790] syz.0.635[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.005457][ T5790] syz.0.635[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.044121][ T5790] syz.0.635[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.076259][ T5798] loop2: detected capacity change from 0 to 512
[   99.100391][ T5798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   99.140097][ T5798] EXT4-fs (loop2): 1 truncate cleaned up
[   99.151985][ T5798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.171073][ T5804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.638'.
[   99.175818][ T5798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.637'.
[   99.205102][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.206946][ T5804] siw: device registration error -23
[   99.262766][ T5811] loop2: detected capacity change from 0 to 4096
[   99.291992][ T5811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.457234][ T5816] lo speed is unknown, defaulting to 1000
[   99.463812][ T5816] lo speed is unknown, defaulting to 1000
[   99.470025][ T5816] lo speed is unknown, defaulting to 1000
[   99.574038][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'.
[   99.583049][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[   99.946654][ T5824] siw: device registration error -23
[   99.961132][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.022662][ T5829] loop4: detected capacity change from 0 to 512
[  100.033283][ T5829] EXT4-fs: Mount option(s) incompatible with ext3
[  100.160829][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'.
[  100.173511][ T3436] hid (null): unknown global tag 0xc
[  100.177391][ T5834] loop3: detected capacity change from 0 to 512
[  100.178936][ T3436] hid (null): invalid report_count 1547616459
[  100.191226][ T3436] hid (null): unknown global tag 0xc
[  100.197754][ T3436] hid-generic 0003:B8DB:0000.0008: unknown main item tag 0xd
[  100.201972][ T5834] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  100.205151][ T3436] hid-generic 0003:B8DB:0000.0008: unknown global tag 0xc
[  100.221470][ T3436] hid-generic 0003:B8DB:0000.0008: item 0 0 1 12 parsing failed
[  100.229487][ T3436] hid-generic 0003:B8DB:0000.0008: probe with driver hid-generic failed with error -22
[  100.280637][ T5834] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.647: iget: bad i_size value: -6917529027641081756
[  100.294482][ T5834] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.647: couldn't read orphan inode 17 (err -117)
[  100.326755][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.469002][ T5834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.647: bg 0: block 65: padding at end of block bitmap is not set
[  100.487891][ T5834] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.647: Failed to acquire dquot type 0
[  100.541448][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.573139][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'.
[  100.752136][ T5863] bpf_get_probe_write_proto: 3 callbacks suppressed
[  100.752157][ T5863] syz.4.655[5863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.768801][ T5863] syz.4.655[5863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.786569][ T5863] syz.4.655[5863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.934529][ T5868] loop4: detected capacity change from 0 to 512
[  100.977695][ T5868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.991075][ T5868] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.018163][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.078203][ T5879] loop4: detected capacity change from 0 to 1024
[  101.085762][ T5878] loop2: detected capacity change from 0 to 4096
[  101.089694][ T5879] EXT4-fs: Ignoring removed mblk_io_submit option
[  101.147717][ T5882] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.668'.
[  101.214783][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.285244][ T5879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.536314][   T29] kauditd_printk_skb: 645 callbacks suppressed
[  101.536332][   T29] audit: type=1400 audit(1733740469.106:6941): avc:  denied  { write } for  pid=5877 comm="syz.4.658" name="bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  101.728082][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.768503][ T5898] loop2: detected capacity change from 0 to 512
[  101.814856][ T5898] EXT4-fs: Mount option(s) incompatible with ext3
[  101.828834][   T29] audit: type=1326 audit(1733740469.406:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  101.887411][   T29] audit: type=1326 audit(1733740469.426:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  101.910806][   T29] audit: type=1326 audit(1733740469.426:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  101.934586][   T29] audit: type=1326 audit(1733740469.426:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6321a71df7 code=0x7ffc0000
[  101.957883][   T29] audit: type=1326 audit(1733740469.426:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  101.972902][ T5911] loop3: detected capacity change from 0 to 2048
[  101.981335][   T29] audit: type=1326 audit(1733740469.436:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  101.992162][ T5906] loop1: detected capacity change from 0 to 164
[  102.011015][   T29] audit: type=1326 audit(1733740469.436:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  102.040769][   T29] audit: type=1326 audit(1733740469.436:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  102.040831][   T29] audit: type=1326 audit(1733740469.436:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  102.061211][ T5906] syz.1.662: attempt to access beyond end of device
[  102.061211][ T5906] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  102.077757][ T5911]  loop3: p1 < > p4
[  102.097839][ T5906] syz.1.662: attempt to access beyond end of device
[  102.097839][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.113482][ T5911] loop3: p4 size 8388608 extends beyond EOD, 
[  102.115141][ T5906] syz.1.662: attempt to access beyond end of device
[  102.115141][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.128482][ T5911] truncated
[  102.134583][ T5906] syz.1.662: attempt to access beyond end of device
[  102.134583][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.164816][ T5906] syz.1.662: attempt to access beyond end of device
[  102.164816][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.167555][ T5910] SELinux: syz.2.664 (5910) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  102.184789][ T5906] syz.1.662: attempt to access beyond end of device
[  102.184789][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.214555][ T5906] syz.1.662: attempt to access beyond end of device
[  102.214555][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.214711][ T5906] syz.1.662: attempt to access beyond end of device
[  102.214711][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.214757][ T5906] syz.1.662: attempt to access beyond end of device
[  102.214757][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.214869][ T5906] syz.1.662: attempt to access beyond end of device
[  102.214869][ T5906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  102.257054][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.385388][ T5928] loop4: detected capacity change from 0 to 128
[  102.387444][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  102.395591][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  102.428445][ T5930] loop2: detected capacity change from 0 to 512
[  102.436641][ T5930] EXT4-fs: Ignoring removed orlov option
[  102.449747][ T5930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  102.471281][ T5930] EXT4-fs (loop2): 1 orphan inode deleted
[  102.477170][ T5930] EXT4-fs (loop2): 1 truncate cleaned up
[  102.503023][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.790965][ T5941] loop1: detected capacity change from 0 to 512
[  102.804874][ T5941] EXT4-fs: dax option not supported
[  102.843643][ T5941] rdma_rxe: rxe_newlink: failed to add lo
[  102.883030][ T5945] loop1: detected capacity change from 0 to 512
[  102.894159][ T5945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.908959][ T5945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.922044][ T5945] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.966025][ T5945] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  102.980953][ T5945] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 1 with error 28
[  102.993214][ T5945] EXT4-fs (loop1): This should not happen!! Data will be lost
[  102.993214][ T5945] 
[  103.002902][ T5945] EXT4-fs (loop1): Total free blocks count 0
[  103.008958][ T5945] EXT4-fs (loop1): Free/Dirty block details
[  103.014915][ T5945] EXT4-fs (loop1): free_blocks=39626
[  103.020262][ T5945] EXT4-fs (loop1): dirty_blocks=1
[  103.025362][ T5945] EXT4-fs (loop1): Block reservation details
[  103.031419][ T5945] EXT4-fs (loop1): i_reserved_data_blocks=1
[  103.061324][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.247032][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.328847][ T5955] lo speed is unknown, defaulting to 1000
[  103.335337][ T5955] lo speed is unknown, defaulting to 1000
[  103.342118][ T5955] lo speed is unknown, defaulting to 1000
[  103.474208][ T5955] loop1: detected capacity change from 0 to 512
[  103.481180][ T5955] EXT4-fs: inline encryption not supported
[  103.489494][ T5955] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  103.552264][ T5955] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  103.560309][ T5955] System zones: 1-12
[  103.576824][ T5955] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.675: corrupted in-inode xattr: e_value size too large
[  103.591792][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.675: couldn't read orphan inode 15 (err -117)
[  103.606782][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.865677][ T5954] __nla_validate_parse: 1 callbacks suppressed
[  103.865696][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'.
[  103.907892][ T5964] loop2: detected capacity change from 0 to 512
[  103.950553][ T5967] pimreg: entered allmulticast mode
[  103.975983][ T5967] loop3: detected capacity change from 0 to 512
[  103.994620][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.006972][ T5964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.029316][ T5972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.680'.
[  104.033122][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.050818][ T5964] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.066559][ T5967] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.087494][ T5967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.103383][ T5977] lo speed is unknown, defaulting to 1000
[  104.128360][ T5977] lo speed is unknown, defaulting to 1000
[  104.134629][ T5977] lo speed is unknown, defaulting to 1000
[  104.149187][ T5967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.679'.
[  104.158690][ T5967] netlink: 5 bytes leftover after parsing attributes in process `syz.3.679'.
[  104.174646][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.184563][ T5967] loop3: detected capacity change from 0 to 164
[  104.228435][ T5979] siw: device registration error -23
[  104.238866][ T5967] rock: directory entry would overflow storage
[  104.245097][ T5967] rock: sig=0x66, size=4, remaining=3
[  104.491445][ T5993] loop3: detected capacity change from 0 to 8192
[  104.734381][ T5999] ieee802154 phy1 wpan1: encryption failed: -22
[  104.841113][ T6007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.690'.
[  104.926296][ T6005] loop4: detected capacity change from 0 to 8192
[  104.931378][ T6007] loop3: detected capacity change from 0 to 256
[  104.959061][ T6007] FAT-fs (loop3): Directory bread(block 64) failed
[  104.965654][ T6007] FAT-fs (loop3): Directory bread(block 65) failed
[  104.972303][ T6007] FAT-fs (loop3): Directory bread(block 66) failed
[  104.979029][ T6007] FAT-fs (loop3): Directory bread(block 67) failed
[  104.986992][ T6007] FAT-fs (loop3): Directory bread(block 68) failed
[  104.994134][ T6007] FAT-fs (loop3): Directory bread(block 69) failed
[  105.001851][ T6007] FAT-fs (loop3): Directory bread(block 70) failed
[  105.008785][ T6007] FAT-fs (loop3): Directory bread(block 71) failed
[  105.016067][ T6007] FAT-fs (loop3): Directory bread(block 72) failed
[  105.022575][ T6012] syz.1.691[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.022810][ T6012] syz.1.691[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.023118][ T6007] FAT-fs (loop3): Directory bread(block 73) failed
[  105.034437][ T6012] syz.1.691[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.051833][ T6005] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  105.071173][ T6005] FAT-fs (loop4): Filesystem has been set read-only
[  105.079864][ T6015] netlink: 64 bytes leftover after parsing attributes in process `syz.4.689'.
[  105.094979][ T6005] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  105.103506][ T6005] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  105.162880][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[  105.206265][ T6023] batadv_slave_1: entered promiscuous mode
[  105.219948][ T6021] netlink: 128 bytes leftover after parsing attributes in process `syz.3.694'.
[  105.243609][ T6022] batadv_slave_1: left promiscuous mode
[  105.244897][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'.
[  105.339641][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[  105.515549][ T6042] loop1: detected capacity change from 0 to 128
[  105.553332][ T6042] FAT-fs (loop1): bogus number of reserved sectors
[  105.559933][ T6042] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  105.569291][ T6042] FAT-fs (loop1): Can't find a valid FAT filesystem
[  105.622642][ T6050] rdma_op ffff88811608e580 conn xmit_rdma 0000000000000000
[  105.655960][ T6042] loop1: detected capacity change from 0 to 512
[  105.688077][ T6042] loop1: detected capacity change from 0 to 512
[  105.704277][ T6042] EXT4-fs: Ignoring removed nobh option
[  105.735696][ T6042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.776717][ T6042] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.841265][ T6052] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[  105.841265][ T6052]    program syz.0.702 not setting count and/or reply_len properly
[  105.884964][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.186903][ T6067] syz.0.705[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.187183][ T6067] syz.0.705[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.198695][ T6067] syz.0.705[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.984764][ T6066] loop1: detected capacity change from 0 to 2048
[  107.016887][   T29] kauditd_printk_skb: 776 callbacks suppressed
[  107.016905][   T29] audit: type=1400 audit(1733740474.596:7727): avc:  denied  { read } for  pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  107.086670][   T29] audit: type=1400 audit(1733740474.636:7728): avc:  denied  { search } for  pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.108032][   T29] audit: type=1400 audit(1733740474.636:7729): avc:  denied  { read } for  pid=3039 comm="dhcpcd" name="n42" dev="tmpfs" ino=4929 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.108077][   T29] audit: type=1400 audit(1733740474.636:7730): avc:  denied  { open } for  pid=3039 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=4929 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.108134][   T29] audit: type=1400 audit(1733740474.636:7731): avc:  denied  { getattr } for  pid=3039 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=4929 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.176012][   T29] audit: type=1326 audit(1733740474.656:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  107.199458][   T29] audit: type=1326 audit(1733740474.656:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  107.222835][   T29] audit: type=1326 audit(1733740474.656:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  107.246259][   T29] audit: type=1326 audit(1733740474.656:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  107.269735][   T29] audit: type=1326 audit(1733740474.656:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  107.339333][ T6085] syz.2.708 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  107.376585][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.427946][ T3299] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  107.518849][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.599776][ T6102] loop3: detected capacity change from 0 to 128
[  107.606929][ T6105] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  107.621608][ T6104] loop4: detected capacity change from 0 to 164
[  107.687537][ T6104] bio_check_eod: 10698 callbacks suppressed
[  107.687571][ T6104] syz.4.713: attempt to access beyond end of device
[  107.687571][ T6104] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  107.693552][ T6112] loop1: detected capacity change from 0 to 1024
[  107.707369][ T6104] syz.4.713: attempt to access beyond end of device
[  107.707369][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.707437][ T6104] syz.4.713: attempt to access beyond end of device
[  107.707437][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.741914][ T6112] EXT4-fs: Ignoring removed nobh option
[  107.744539][ T6104] syz.4.713: attempt to access beyond end of device
[  107.744539][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.750939][ T6112] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  107.762044][ T6104] syz.4.713: attempt to access beyond end of device
[  107.762044][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.773636][ T6112] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.711: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  107.795696][ T6104] syz.4.713: attempt to access beyond end of device
[  107.795696][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.804115][ T6112] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.711: couldn't read orphan inode 11 (err -117)
[  107.838163][ T6104] syz.4.713: attempt to access beyond end of device
[  107.838163][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.852330][ T6104] syz.4.713: attempt to access beyond end of device
[  107.852330][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.869788][ T6112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.887385][ T6129] SELinux: syz.0.723 (6129) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  107.906687][ T6104] syz.4.713: attempt to access beyond end of device
[  107.906687][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.920161][ T6104] syz.4.713: attempt to access beyond end of device
[  107.920161][ T6104] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  107.948656][ T6126] sit0: entered allmulticast mode
[  107.955038][ T6112] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.711: Invalid block bitmap block 0 in block_group 0
[  107.962817][ T6126] sit0: entered promiscuous mode
[  107.974264][ T6112] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.711: Failed to acquire dquot type 0
[  108.044488][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.149007][ T6133] lo speed is unknown, defaulting to 1000
[  108.155897][ T6133] lo speed is unknown, defaulting to 1000
[  108.165439][ T6133] lo speed is unknown, defaulting to 1000
[  108.332019][ T6146] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  108.332019][ T6146] The task syz.2.717 (6146) triggered the difference, watch for misbehavior.
[  108.370690][ T6145] loop1: detected capacity change from 0 to 4096
[  108.388204][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.445585][ T3379] IPVS: starting estimator thread 0...
[  108.535113][ T6151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  108.536234][ T6149] IPVS: using max 2256 ests per chain, 112800 per kthread
[  108.573532][ T6151] netlink: 'syz.3.719': attribute type 10 has an invalid length.
[  108.644431][ T6154] tipc: Started in network mode
[  108.649453][ T6154] tipc: Node identity cadb7d922ce2, cluster identity 4711
[  108.656782][ T6154] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  108.664936][ T6154] ������: renamed from syzkaller0
[  108.671557][ T6154] tipc: Disabling bearer <eth:syzkaller0>
[  108.738209][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.087188][ T6171] loop4: detected capacity change from 0 to 128
[  109.198732][ T6171] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.211739][ T6171] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.435778][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.443266][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.450833][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.485448][ T6176] loop2: detected capacity change from 0 to 2048
[  109.493141][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.500588][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.508040][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.515491][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.522993][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.530541][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.537954][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.545352][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.552869][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.560300][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.567718][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.667031][ T6176]  loop2: p2 < > p3 p4
[  109.672940][ T6176] loop2: p3 start 65535 is beyond EOD, truncated
[  109.679442][ T6176] loop2: p4 size 8192 extends beyond EOD, truncated
[  109.784395][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.792006][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.799530][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.807050][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.814529][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.822066][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.829640][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.837134][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.844610][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.850271][ T6183] loop2: detected capacity change from 0 to 128
[  109.852107][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.865755][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.873407][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.880917][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.888538][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.896008][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.903640][ T4119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  109.911911][ T4119] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  109.912236][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.938640][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  109.948710][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  110.113472][ T6187] loop4: detected capacity change from 0 to 512
[  110.127554][ T6187] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  110.130685][ T6199] loop3: detected capacity change from 0 to 164
[  110.135663][ T6187] System zones: 0-2, 18-18, 34-34
[  110.159369][ T6187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.731: bg 0: block 248: padding at end of block bitmap is not set
[  110.178172][ T6187] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.731: Failed to acquire dquot type 1
[  110.191169][ T6187] EXT4-fs (loop4): 1 truncate cleaned up
[  110.197500][ T6187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.210583][ T6187] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.225505][ T6187] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.731: deleted inode referenced: 12
[  110.237569][ T6187] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.731: deleted inode referenced: 12
[  110.308730][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.355463][ T6206] loop4: detected capacity change from 0 to 4096
[  110.370714][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.549987][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.634188][ T6214] loop1: detected capacity change from 0 to 1024
[  110.651634][ T6214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.690423][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.748969][ T6219] loop1: detected capacity change from 0 to 764
[  110.764116][ T6220] syz.2.740[6220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.764204][ T6220] syz.2.740[6220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.775823][ T6220] syz.2.740[6220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.804042][ T6219] Symlink component flag not implemented
[  110.818410][ T6219] Symlink component flag not implemented (101)
[  111.083338][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.090971][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.098633][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.110049][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.117576][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.125056][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.132542][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.140064][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.147619][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.155055][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.162597][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.170097][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.177646][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.185049][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.196775][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.204312][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.211860][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.219337][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.226895][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.234335][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.241835][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.249473][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.256910][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.264312][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.271982][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.279458][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.287011][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.294528][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.302058][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.309726][ T4119] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  111.320490][ T4119] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  111.399929][ T6233] lo speed is unknown, defaulting to 1000
[  111.406139][ T6233] lo speed is unknown, defaulting to 1000
[  111.416918][ T6233] lo speed is unknown, defaulting to 1000
[  111.657335][ T6240] loop4: detected capacity change from 0 to 164
[  112.064422][ T6250] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  112.101294][   T29] kauditd_printk_skb: 1486 callbacks suppressed
[  112.101310][   T29] audit: type=1326 audit(1733740479.676:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.184564][   T29] audit: type=1326 audit(1733740479.706:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.208110][   T29] audit: type=1326 audit(1733740479.706:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.231519][   T29] audit: type=1326 audit(1733740479.716:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.254894][   T29] audit: type=1326 audit(1733740479.716:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.278387][   T29] audit: type=1326 audit(1733740479.716:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.301772][   T29] audit: type=1326 audit(1733740479.716:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.325219][   T29] audit: type=1326 audit(1733740479.716:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.348597][   T29] audit: type=1326 audit(1733740479.716:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.372079][   T29] audit: type=1326 audit(1733740479.716:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6321a6fed9 code=0x7ffc0000
[  112.721835][ T6304] loop4: detected capacity change from 0 to 2048
[  112.816791][ T6304]  loop4: p1 < > p4
[  112.822412][ T6304] loop4: p4 size 8388608 extends beyond EOD, truncated
[  112.889464][ T6318] __nla_validate_parse: 5 callbacks suppressed
[  112.889481][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'.
[  113.044581][ T3001]  loop4: p1 < > p4
[  113.088820][ T3001] loop4: p4 size 8388608 extends beyond EOD, truncated
[  113.167826][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  113.187620][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  113.282580][ T6332] SELinux: syz.4.755 (6332) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  113.300976][ T6337] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  113.409523][ T6340] loop1: detected capacity change from 0 to 8192
[  114.120658][ T6353] loop4: detected capacity change from 0 to 128
[  114.241798][ T6349] SELinux:  Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped).
[  114.284035][ T6353] ext4: Unknown parameter 'mask'
[  114.534252][ T6365] loop2: detected capacity change from 0 to 8192
[  114.547792][ T6365] bio_check_eod: 46743 callbacks suppressed
[  114.547810][ T6365] syz.2.765: attempt to access beyond end of device
[  114.547810][ T6365] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  114.562665][ T6366] loop3: detected capacity change from 0 to 2048
[  114.568204][ T6365] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  114.581550][ T6365] FAT-fs (loop2): Filesystem has been set read-only
[  114.588719][ T6365] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  114.596763][ T6365] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  114.606554][ T6366]  loop3: p1 p2 p3 < > p4 < p5 p6 >
[  114.611798][ T6366] loop3: partition table partially beyond EOD, truncated
[  114.613166][ T6365] netlink: 64 bytes leftover after parsing attributes in process `syz.2.765'.
[  114.619117][ T6366] loop3: p1 size 33024 extends beyond EOD, truncated
[  114.635481][ T6366] loop3: p2 start 16908804 is beyond EOD, truncated
[  114.642253][ T6366] loop3: p3 start 4284289 is beyond EOD, truncated
[  114.658565][ T6366] loop3: p5 size 33024 extends beyond EOD, truncated
[  114.675607][ T6366] loop3: p6 start 16908804 is beyond EOD, truncated
[  114.684939][ T6371] ieee802154 phy1 wpan1: encryption failed: -22
[  114.721883][ T6362] syz.3.764[6362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.722019][ T6362] syz.3.764[6362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.735935][ T6362] syz.3.764[6362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.743282][ T6372] loop1: detected capacity change from 0 to 2048
[  114.814298][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  114.820200][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  114.824411][ T6372]  loop1: p2 < > p3 p4
[  114.835907][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  114.848650][ T6372] loop1: p3 start 65535 is beyond EOD, truncated
[  114.855054][ T6372] loop1: p4 size 8192 extends beyond EOD, truncated
[  114.912745][ T6380] bridge0: port 3(bond0) entered blocking state
[  114.919207][ T6380] bridge0: port 3(bond0) entered disabled state
[  114.951083][ T6380] bond0: entered allmulticast mode
[  114.956265][ T6380] bond_slave_0: entered allmulticast mode
[  114.962003][ T6380] bond_slave_1: entered allmulticast mode
[  114.999704][ T6380] bond0: entered promiscuous mode
[  115.004804][ T6380] bond_slave_0: entered promiscuous mode
[  115.010844][ T6380] bond_slave_1: entered promiscuous mode
[  115.017067][ T6380] bridge0: port 3(bond0) entered blocking state
[  115.023367][ T6380] bridge0: port 3(bond0) entered forwarding state
[  115.059489][ T6380] loop2: detected capacity change from 0 to 1024
[  115.072723][ T6378] netlink: 116 bytes leftover after parsing attributes in process `syz.0.778'.
[  115.082033][ T6378] smc: net device bond0 erased user defined pnetid SYZ0
[  115.091312][ T6383] lo speed is unknown, defaulting to 1000
[  115.093014][ T6380] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  115.124199][ T6383] lo speed is unknown, defaulting to 1000
[  115.146858][ T6380] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  115.154878][ T6380] EXT4-fs (loop2): orphan cleanup on readonly fs
[  115.163110][ T6383] lo speed is unknown, defaulting to 1000
[  115.204417][ T6380] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  115.236685][ T6380] EXT4-fs (loop2): Remounting filesystem read-only
[  115.246352][ T6380] EXT4-fs (loop2): 1 orphan inode deleted
[  115.256768][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  115.269970][ T6380] SELinux: (dev loop2, type ext4) getxattr errno 5
[  115.285041][ T6380] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.654530][ T6406] netlink: 108 bytes leftover after parsing attributes in process `syz.4.769'.
[  115.663688][ T6406] netlink: 108 bytes leftover after parsing attributes in process `syz.4.769'.
[  115.672690][ T6406] netlink: 108 bytes leftover after parsing attributes in process `syz.4.769'.
[  115.685630][ T6425] netem: unknown loss type 0
[  115.690449][ T6425] netem: change failed
[  115.699628][ T6425] loop1: detected capacity change from 0 to 512
[  115.710026][ T6425] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  115.739254][ T6425] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  115.747955][ T6427] bond0: left allmulticast mode
[  115.752697][ T6425] EXT4-fs (loop1): orphan cleanup on readonly fs
[  115.752833][ T6427] bond_slave_0: left allmulticast mode
[  115.764812][ T6427] bond_slave_1: left allmulticast mode
[  115.770326][ T6427] bond0: left promiscuous mode
[  115.775102][ T6427] bond_slave_0: left promiscuous mode
[  115.780652][ T6427] bond_slave_1: left promiscuous mode
[  115.786259][ T6427] bridge0: port 3(bond0) entered disabled state
[  115.794388][ T6425] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.773: Invalid block bitmap block 0 in block_group 0
[  115.828819][ T6425] EXT4-fs (loop1): Remounting filesystem read-only
[  115.837927][ T6425] EXT4-fs (loop1): 1 orphan inode deleted
[  115.850074][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.871856][ T6425] SELinux: (dev loop1, type ext4) getxattr errno 5
[  115.881085][ T6425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.894787][ T6427] bridge_slave_0: left allmulticast mode
[  115.900596][ T6427] bridge_slave_0: left promiscuous mode
[  115.906299][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.935129][ T6434] loop2: detected capacity change from 0 to 512
[  115.992772][ T6427] bridge_slave_1: left allmulticast mode
[  115.998474][ T6427] bridge_slave_1: left promiscuous mode
[  116.004335][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.020456][ T6434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.036594][ T6434] EXT4-fs (loop2): 1 truncate cleaned up
[  116.036756][ T6425] 9pnet_fd: Insufficient options for proto=fd
[  116.042790][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.067875][ T6427] bond0: (slave bond_slave_0): Releasing backup interface
[  116.082841][ T6427] bond0: (slave bond_slave_1): Releasing backup interface
[  116.090865][ T6434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.166619][ T6432] bridge0: port 1(veth0_to_bond) entered blocking state
[  116.173626][ T6432] bridge0: port 1(veth0_to_bond) entered disabled state
[  116.199597][ T6432] veth0_to_bond: entered allmulticast mode
[  116.210394][ T6432] veth0_to_bond: entered promiscuous mode
[  116.216662][ T6432] bridge0: port 1(veth0_to_bond) entered blocking state
[  116.223892][ T6432] bridge0: port 1(veth0_to_bond) entered forwarding state
[  116.232557][ T1730] bridge0: port 1(veth0_to_bond) entered disabled state
[  116.275338][ T6440] loop1: detected capacity change from 0 to 8192
[  116.284770][ T6448] rdma_rxe: rxe_newlink: failed to add bond0
[  116.298968][ T3379] hid (null): unknown global tag 0x11
[  116.306828][ T3379] hid-generic 0005:0007:0005.000B: ignoring exceeding usage max
[  116.317660][ T6440] vfat: Unknown parameter 'Q��_�ւC?&o�>�������\�v�Qy��d��Os�N����Nl�2X���ˏu<��j�'Z��-�C\Y��>�P
[  116.317660][ T6440] F�W!�o���f��B�1v}�gd
[  116.317660][ T6440] �5������"�9*w���>k[%�A-�2!��E�"�M1U3�7u�UWtDra\�q*M5ޅ�-l�50'
[  116.319327][ T3379] hid-generic 0005:0007:0005.000B: unexpected long global item
[  116.349367][ T3379] hid-generic 0005:0007:0005.000B: probe with driver hid-generic failed with error -22
[  116.390473][ T6440] loop1: detected capacity change from 0 to 164
[  116.411793][ T6453] pim6reg: entered allmulticast mode
[  116.432903][ T6453] pim6reg: left allmulticast mode
[  116.436860][ T6455] loop2: detected capacity change from 0 to 2048
[  116.444590][ T6440] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  116.466826][ T6455]  loop2: p1 < > p4
[  116.471266][ T6455] loop2: p4 size 8388608 extends beyond EOD, truncated
[  116.522381][ T6453] hub 6-0:1.0: USB hub found
[  116.527368][ T6453] hub 6-0:1.0: 8 ports detected
[  116.573170][ T3001]  loop2: p1 < > p4
[  116.580929][ T3001] loop2: p4 size 8388608 extends beyond EOD, truncated
[  116.595026][ T6461] sit0: entered allmulticast mode
[  116.619630][ T6461] sit0: entered promiscuous mode
[  116.727656][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  116.739406][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  116.769425][ T6470] loop1: detected capacity change from 0 to 1024
[  116.848256][ T6470] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.943841][ T6470] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  116.990786][ T6470] EXT4-fs (loop1): orphan cleanup on readonly fs
[  117.040100][ T6470] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  117.061382][ T6470] EXT4-fs (loop1): Remounting filesystem read-only
[  117.082287][ T6470] EXT4-fs (loop1): 1 orphan inode deleted
[  117.104100][ T6470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  117.121837][ T6470] SELinux: (dev loop1, type ext4) getxattr errno 5
[  117.166088][ T6465] bridge0: port 2(bond0) entered blocking state
[  117.172488][ T6465] bridge0: port 2(bond0) entered disabled state
[  117.214695][ T6470] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.266890][ T6465] bond0: entered allmulticast mode
[  117.273180][ T6465] bond0: entered promiscuous mode
[  117.284135][ T6478] hsr_slave_0 (unregistering): left promiscuous mode
[  117.302944][ T6467] lo speed is unknown, defaulting to 1000
[  117.309170][ T6467] lo speed is unknown, defaulting to 1000
[  117.318112][ T6482] pim6reg1: entered promiscuous mode
[  117.323505][ T6482] pim6reg1: entered allmulticast mode
[  117.333399][ T6467] lo speed is unknown, defaulting to 1000
[  117.512709][   T29] kauditd_printk_skb: 552 callbacks suppressed
[  117.512757][   T29] audit: type=1400 audit(1733740485.086:9771): avc:  denied  { read } for  pid=6490 comm="syz.2.792" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.543947][   T29] audit: type=1400 audit(1733740485.096:9772): avc:  denied  { open } for  pid=6490 comm="syz.2.792" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.569018][   T29] audit: type=1400 audit(1733740485.096:9773): avc:  denied  { ioctl } for  pid=6490 comm="syz.2.792" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.596845][ T6493] batadv_slave_0: entered promiscuous mode
[  117.643808][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'.
[  117.648804][ T6497] rdma_op ffff888142fdb180 conn xmit_rdma 0000000000000000
[  117.653403][ T6496] gretap0: left allmulticast mode
[  117.665134][ T6496] gretap0: left promiscuous mode
[  117.670222][ T6496] bridge0: port 2(gretap0) entered disabled state
[  117.682175][ T6496] bond0: left promiscuous mode
[  117.688991][ T6496] bond0: left allmulticast mode
[  117.693960][ T6496] bridge0: port 1(bond0) entered disabled state
[  117.748985][ T6491] netem: change failed
[  117.759100][ T6499] macsec0: entered allmulticast mode
[  117.764430][ T6499] hsr0: entered allmulticast mode
[  117.769533][ T6499] hsr_slave_0: entered allmulticast mode
[  117.775183][ T6499] hsr_slave_1: entered allmulticast mode
[  117.802924][ T6499] hsr0: left allmulticast mode
[  117.807789][ T6499] hsr_slave_0: left allmulticast mode
[  117.813256][ T6499] hsr_slave_1: left allmulticast mode
[  117.829725][   T29] audit: type=1326 audit(1733740485.406:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  117.895669][   T29] audit: type=1326 audit(1733740485.406:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  117.919486][   T29] audit: type=1326 audit(1733740485.406:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  117.942987][   T29] audit: type=1326 audit(1733740485.406:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  117.966459][   T29] audit: type=1326 audit(1733740485.406:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  117.989916][   T29] audit: type=1326 audit(1733740485.406:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  118.013466][   T29] audit: type=1326 audit(1733740485.406:9780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a605fed9 code=0x7ffc0000
[  118.600113][ T6521] loop4: detected capacity change from 0 to 8192
[  118.807483][ T6538] netlink: 348 bytes leftover after parsing attributes in process `syz.3.801'.
[  118.848947][ T6532] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  118.856610][ T6532] FAT-fs (loop4): Filesystem has been set read-only
[  118.880591][ T6521] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  118.968636][ T6551] loop3: detected capacity change from 0 to 512
[  118.992473][ T6551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  119.034984][ T6551] EXT4-fs (loop3): 1 truncate cleaned up
[  119.060307][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.079545][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  119.091488][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.099028][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.106471][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.123636][ T6564] netlink: 'syz.0.802': attribute type 10 has an invalid length.
[  119.126120][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.139164][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.146630][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.154109][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.161586][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.169084][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.176595][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.184108][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.191734][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.199362][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.206809][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.214341][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.221879][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.229354][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.236857][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.244317][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.251858][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.259302][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.266733][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.274142][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.281701][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.289145][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.296647][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.304218][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.311735][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.319305][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.326730][ T4119] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  119.335341][ T4119] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  119.381337][ T6583] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in;
[  119.381337][ T6583]    program syz.4.806 not setting count and/or reply_len properly
[  119.480993][ T6564] geneve1: entered promiscuous mode
[  119.492779][ T6564] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.501182][ T6564] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.509491][ T6564] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.517719][ T6564] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.528674][ T6564] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  119.539396][ T6591] netlink: 48 bytes leftover after parsing attributes in process `syz.4.806'.
[  119.686727][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'.
[  119.722112][ T6613] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  119.790890][ T6613] loop4: detected capacity change from 0 to 1024
[  119.846996][ T6613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.056528][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.185814][ T6662] loop4: detected capacity change from 0 to 512
[  120.193119][ T6662] EXT4-fs: inline encryption not supported
[  120.203362][ T6662] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  120.222550][ T6662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  120.231138][ T6662] System zones: 1-12
[  120.242834][ T6662] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.812: corrupted in-inode xattr: e_value size too large
[  120.259482][ T6662] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.812: couldn't read orphan inode 15 (err -117)
[  120.260471][ T6666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.813'.
[  120.283555][ T6662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.319882][ T6656] EXT4-fs error (device loop4): ext4_check_dx_root:2230: inode #2: comm syz.4.812: Corrupt dir, invalid name for '..', running e2fsck is recommended
[  120.383012][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.384834][ T6666] loop2: detected capacity change from 0 to 256
[  120.406322][ T6666] FAT-fs (loop2): Directory bread(block 64) failed
[  120.413032][ T6666] FAT-fs (loop2): Directory bread(block 65) failed
[  120.419818][ T6666] FAT-fs (loop2): Directory bread(block 66) failed
[  120.426531][ T6666] FAT-fs (loop2): Directory bread(block 67) failed
[  120.449221][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'.
[  120.458430][ T6666] FAT-fs (loop2): Directory bread(block 68) failed
[  120.465037][ T6666] FAT-fs (loop2): Directory bread(block 69) failed
[  120.472059][ T6666] FAT-fs (loop2): Directory bread(block 70) failed
[  120.479438][ T6666] FAT-fs (loop2): Directory bread(block 71) failed
[  120.496007][ T6683] syzkaller0: entered allmulticast mode
[  120.502759][ T6666] FAT-fs (loop2): Directory bread(block 72) failed
[  120.509594][ T6666] FAT-fs (loop2): Directory bread(block 73) failed
[  120.517175][ T6683] syzkaller0 (unregistering): left allmulticast mode
[  120.618727][ T6700] loop2: detected capacity change from 0 to 256
[  120.840071][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  120.974929][ T6754] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  121.008091][ T6756] loop4: detected capacity change from 0 to 2048
[  121.018193][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.544810][ T6762] lo speed is unknown, defaulting to 1000
[  121.551112][ T6762] lo speed is unknown, defaulting to 1000
[  121.557733][ T6762] lo speed is unknown, defaulting to 1000
[  121.736570][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'.
[  121.756456][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'.
[  121.793090][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.837'.
[  121.814611][ T6772] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.823188][ T6772] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.831582][ T6772] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.839966][ T6772] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.855196][ T6772] geneve1: left promiscuous mode
[  121.865156][ T6772] vlan2: left promiscuous mode
[  121.930949][ T6780] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  121.937541][ T6780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  121.945544][ T6780] vhci_hcd vhci_hcd.0: Device attached
[  122.121300][ T6790] netlink: 'syz.4.830': attribute type 15 has an invalid length.
[  122.147772][ T6790] loop4: detected capacity change from 0 to 1024
[  122.148922][ T6792] loop3: detected capacity change from 0 to 512
[  122.155040][ T6790] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.171827][ T6790] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  122.186224][ T3436] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  122.187844][ T6792] EXT4-fs: Ignoring removed orlov option
[  122.204911][ T6792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.226645][ T6790] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  122.306656][ T6792] EXT4-fs (loop3): 1 orphan inode deleted
[  122.312501][ T6792] EXT4-fs (loop3): 1 truncate cleaned up
[  122.469412][ T6782] vhci_hcd: connection reset by peer
[  122.483763][ T5361] vhci_hcd: stop threads
[  122.488117][ T5361] vhci_hcd: release socket
[  122.492571][ T5361] vhci_hcd: disconnect device
[  122.566630][   T29] kauditd_printk_skb: 749 callbacks suppressed
[  122.566646][   T29] audit: type=1400 audit(1733740490.146:10530): avc:  denied  { connect } for  pid=6799 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.599961][ T6801] loop2: detected capacity change from 0 to 512
[  122.606382][   T29] audit: type=1400 audit(1733740490.166:10531): avc:  denied  { write } for  pid=6797 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  122.627004][   T29] audit: type=1400 audit(1733740490.176:10532): avc:  denied  { read write } for  pid=6799 comm="syz.2.833" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  122.643314][ T6801] EXT4-fs: dax option not supported
[  122.651012][   T29] audit: type=1400 audit(1733740490.176:10533): avc:  denied  { open } for  pid=6799 comm="syz.2.833" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  122.680181][   T29] audit: type=1400 audit(1733740490.176:10535): avc:  denied  { read } for  pid=6786 comm="syz.3.829" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  122.703586][   T29] audit: type=1400 audit(1733740490.176:10534): avc:  denied  { ioctl } for  pid=6799 comm="syz.2.833" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  122.729180][   T29] audit: type=1400 audit(1733740490.176:10536): avc:  denied  { create } for  pid=6800 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  122.748845][   T29] audit: type=1400 audit(1733740490.176:10537): avc:  denied  { ioctl } for  pid=6800 comm="syz.4.832" path="socket:[14327]" dev="sockfs" ino=14327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  122.773718][   T29] audit: type=1400 audit(1733740490.176:10538): avc:  denied  { module_request } for  pid=6800 comm="syz.4.832" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  122.781883][ T6801] s
z1: rxe_newlink: already configured on lo
[  122.808143][   T29] audit: type=1400 audit(1733740490.186:10539): avc:  denied  { sys_module } for  pid=6800 comm="syz.4.832" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  122.873459][ T6812] loop4: detected capacity change from 0 to 512
[  122.907062][ T6812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  122.951515][ T6812] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm +}[@: corrupted in-inode xattr: e_name out of bounds
[  122.988575][ T6812] EXT4-fs (loop4): Remounting filesystem read-only
[  123.002958][ T6812] EXT4-fs (loop4): 1 truncate cleaned up
[  123.009284][ T6812] SELinux: (dev loop4, type ext4) getxattr errno 5
[  123.036379][ T6824] program syz.2.841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.083867][ T6826] loop4: detected capacity change from 0 to 164
[  123.141798][ T6829] vhci_hcd: invalid port number 255
[  123.147119][ T6829] vhci_hcd: default hub control req: 0400 v0000 i00ff l0
[  123.210037][ T6834] lo speed is unknown, defaulting to 1000
[  123.216383][ T6834] lo speed is unknown, defaulting to 1000
[  123.222578][ T6834] lo speed is unknown, defaulting to 1000
[  123.265314][ T6838] loop2: detected capacity change from 0 to 128
[  123.285732][ T6838] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.310295][ T6838] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  123.351691][ T6843] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  123.568992][ T6838] can0: slcan on ttyS3.
[  123.626646][ T6838] can0 (unregistered): slcan off ttyS3.
[  123.632884][ T6838] Falling back ldisc for ttyS3.
[  123.750636][ T6862] bond0: option arp_validate: invalid value (822309121)
[  123.789530][ T6877] loop2: detected capacity change from 0 to 512
[  123.808225][ T6877] journal_path: Lookup failure for './file1'
[  123.814367][ T6877] EXT4-fs: error: could not find journal device path
[  123.846620][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'.
[  123.855542][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'.
[  123.948632][ T6887] xt_socket: unknown flags 0xc
[  123.957702][ T6887] ref_ctr increment failed for inode: 0x401 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88814301b480
[  123.972178][ T6886] uprobe: syz.2.852:6886 failed to unregister, leaking uprobe
[  123.995748][ T6890] netlink: 76 bytes leftover after parsing attributes in process `syz.4.853'.
[  124.302450][ T6906] loop4: detected capacity change from 0 to 512
[  124.310620][ T6906] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  124.319893][ T6906] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  124.332703][ T6906] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  124.341968][ T6906] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  124.350056][ T6906] System zones: 0-2, 18-18, 34-34
[  124.355708][ T6906] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  124.370766][ T6906] EXT4-fs (loop4): 1 truncate cleaned up
[  124.379716][ T6906] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.856: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  124.641140][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  124.650010][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  124.662525][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  124.667411][ T6912] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  124.683077][ T6912] loop4: detected capacity change from 0 to 164
[  124.731001][ T6916] No source specified
[  124.743537][ T6916] x_tables: duplicate underflow at hook 4
[  124.750345][ T6916] SELinux: failed to load policy
[  124.777646][ T6912] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.859'.
[  124.778872][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[  124.801816][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.809285][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.816729][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.824363][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.831872][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.839316][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.846774][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.854204][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.861705][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.869187][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.876714][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.884105][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.891559][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.899121][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.906689][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.914075][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.921614][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.929153][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  124.936920][ T6918] loop3: detected capacity change from 0 to 512
[  124.943918][ T6918] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  124.953009][ T6918] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  124.962047][ T6918] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  124.971104][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  124.980107][ T6918] System zones: 0-2, 18-18, 34-34
[  124.985956][ T6918] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  125.001005][ T6918] EXT4-fs (loop3): 1 truncate cleaned up
[  125.011716][ T6918] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 3: comm syz.3.861: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  125.018159][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6928 comm=syz.1.862
[  125.038935][ T6930] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  125.042787][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.059525][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.066980][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.070289][ T6930] lo speed is unknown, defaulting to 1000
[  125.074456][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.080885][ T6930] lo speed is unknown, defaulting to 1000
[  125.087649][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.087679][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.093850][ T6930] lo speed is unknown, defaulting to 1000
[  125.100808][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.121486][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.123085][ T6932] loop2: detected capacity change from 0 to 1024
[  125.128897][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.142649][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.150077][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.154378][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6928 comm=syz.1.862
[  125.157526][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.177084][ T6932] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  125.177227][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.189783][ T6928] x_tables: duplicate underflow at hook 1
[  125.194786][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.208079][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.214360][ T6932] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  125.215544][ T4119] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0
[  125.233001][ T4119] hid-generic 0000:0003:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  125.242974][ T6932] EXT4-fs (loop2): orphan cleanup on readonly fs
[  125.255813][ T6932] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  125.278841][ T6932] EXT4-fs (loop2): Remounting filesystem read-only
[  125.292078][ T6932] EXT4-fs (loop2): 1 orphan inode deleted
[  125.301911][ T6936] netlink: 277 bytes leftover after parsing attributes in process `syz.1.866'.
[  125.303386][ T6932] SELinux: (dev loop2, type ext4) getxattr errno 5
[  125.369102][ T6942] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  125.401298][ T6938] lo speed is unknown, defaulting to 1000
[  125.407560][ T6938] lo speed is unknown, defaulting to 1000
[  125.413708][ T6938] lo speed is unknown, defaulting to 1000
[  125.421307][ T6940] pim6reg1: entered promiscuous mode
[  125.426710][ T6940] pim6reg1: entered allmulticast mode
[  125.571371][ T6950] gretap0: left allmulticast mode
[  125.576643][ T6950] gretap0: left promiscuous mode
[  125.581760][ T6950] bridge0: port 3(gretap0) entered disabled state
[  125.607240][ T6950] bridge0: port 4(bond0) entered disabled state
[  125.613667][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.620886][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.638958][ T6950] team0: Port device bridge0 removed
[  125.645104][ T6950] bond0: left allmulticast mode
[  125.650075][ T6950] bond_slave_0: left allmulticast mode
[  125.655599][ T6950] bond_slave_1: left allmulticast mode
[  125.661244][ T6950] bond0: left promiscuous mode
[  125.666541][ T6950] bond_slave_0: left promiscuous mode
[  125.672248][ T6950] bond_slave_1: left promiscuous mode
[  125.678197][ T6950] bridge0: port 4(bond0) entered disabled state
[  125.754518][ T6950] bridge_slave_0: left allmulticast mode
[  125.760391][ T6950] bridge_slave_0: left promiscuous mode
[  125.766242][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.777362][ T6950] bridge_slave_1: left allmulticast mode
[  125.777384][ T6950] bridge_slave_1: left promiscuous mode
[  125.777584][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.787658][ T6950] bond0: (slave bond_slave_0): Releasing backup interface
[  125.810436][ T6950] bond0: (slave bond_slave_1): Releasing backup interface
[  125.824872][ T6950] team0: Port device team_slave_0 removed
[  125.835156][ T6950] team0: Port device team_slave_1 removed
[  125.955650][ T6968] netlink: 76 bytes leftover after parsing attributes in process `^.'.
[  126.576459][ T6973] Cannot find set identified by id 0 to match
[  126.648445][ T6981] loop4: detected capacity change from 0 to 1024
[  126.743928][ T6986] loop2: detected capacity change from 0 to 164
[  126.756321][ T6986] Unable to read rock-ridge attributes
[  126.763172][ T6986] Unable to read rock-ridge attributes
[  126.835380][ T6989] bond1: entered promiscuous mode
[  126.840561][ T6989] bond1: entered allmulticast mode
[  126.846773][ T6989] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.855697][ T6976] geneve0: entered allmulticast mode
[  127.147029][ T6988] ==================================================================
[  127.155156][ T6988] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  127.162312][ T6988] 
[  127.164649][ T6988] write to 0xffff888106ab94a4 of 4 bytes by task 6981 on cpu 1:
[  127.172297][ T6988]  xas_set_mark+0x131/0x150
[  127.176862][ T6988]  __folio_start_writeback+0x1e8/0x430
[  127.182351][ T6988]  ext4_bio_write_folio+0x591/0x9d0
[  127.187583][ T6988]  mpage_process_page_bufs+0x486/0x5d0
[  127.193067][ T6988]  mpage_prepare_extent_to_map+0x788/0xb80
[  127.198897][ T6988]  ext4_do_writepages+0xa20/0x2130
[  127.204034][ T6988]  ext4_writepages+0x159/0x2e0
[  127.208844][ T6988]  do_writepages+0x1d8/0x480
[  127.213476][ T6988]  file_write_and_wait_range+0x168/0x2f0
[  127.219226][ T6988]  generic_buffers_fsync_noflush+0x46/0x120
[  127.225157][ T6988]  ext4_sync_file+0x1ff/0x6c0
[  127.229873][ T6988]  vfs_fsync_range+0x116/0x130
[  127.234682][ T6988]  ext4_buffered_write_iter+0x326/0x370
[  127.240294][ T6988]  ext4_file_write_iter+0x383/0xf20
[  127.245537][ T6988]  iter_file_splice_write+0x5f1/0x980
[  127.250980][ T6988]  direct_splice_actor+0x160/0x2c0
[  127.256138][ T6988]  splice_direct_to_actor+0x302/0x670
[  127.261546][ T6988]  do_splice_direct+0xd7/0x150
[  127.266348][ T6988]  do_sendfile+0x398/0x660
[  127.270793][ T6988]  __x64_sys_sendfile64+0x110/0x150
[  127.276019][ T6988]  x64_sys_call+0xfbd/0x2dc0
[  127.280626][ T6988]  do_syscall_64+0xc9/0x1c0
[  127.285371][ T6988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.291393][ T6988] 
[  127.293729][ T6988] read to 0xffff888106ab94a4 of 4 bytes by task 6988 on cpu 0:
[  127.301286][ T6988]  xas_find_marked+0x60a/0x660
[  127.306079][ T6988]  find_get_entry+0x54/0x390
[  127.310705][ T6988]  filemap_get_folios_tag+0x9e/0x210
[  127.316044][ T6988]  mpage_prepare_extent_to_map+0x329/0xb80
[  127.321881][ T6988]  ext4_do_writepages+0x6ea/0x2130
[  127.327032][ T6988]  ext4_writepages+0x159/0x2e0
[  127.331832][ T6988]  do_writepages+0x1d8/0x480
[  127.336472][ T6988]  file_write_and_wait_range+0x168/0x2f0
[  127.342140][ T6988]  generic_buffers_fsync_noflush+0x46/0x120
[  127.348081][ T6988]  ext4_sync_file+0x1ff/0x6c0
[  127.352796][ T6988]  vfs_fsync_range+0x116/0x130
[  127.357603][ T6988]  ext4_buffered_write_iter+0x326/0x370
[  127.363196][ T6988]  ext4_file_write_iter+0x383/0xf20
[  127.368454][ T6988]  iter_file_splice_write+0x5f1/0x980
[  127.373852][ T6988]  direct_splice_actor+0x160/0x2c0
[  127.379034][ T6988]  splice_direct_to_actor+0x302/0x670
[  127.384443][ T6988]  do_splice_direct+0xd7/0x150
[  127.389232][ T6988]  do_sendfile+0x398/0x660
[  127.393695][ T6988]  __x64_sys_sendfile64+0x110/0x150
[  127.398919][ T6988]  x64_sys_call+0xfbd/0x2dc0
[  127.403579][ T6988]  do_syscall_64+0xc9/0x1c0
[  127.408110][ T6988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.414046][ T6988] 
[  127.416380][ T6988] value changed: 0x0a000021 -> 0x04000021
[  127.422110][ T6988] 
[  127.424501][ T6988] Reported by Kernel Concurrency Sanitizer on:
[  127.430675][ T6988] CPU: 0 UID: 0 PID: 6988 Comm: syz.4.881 Not tainted 6.13.0-rc2-syzkaller #0
[  127.439572][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  127.449649][ T6988] ==================================================================
[  127.462517][ T3436] usb 1-1: enqueue for inactive port 0
[  127.476343][ T3436] usb 1-1: enqueue for inactive port 0
[  127.556316][ T3436] vhci_hcd: vhci_device speed not set
[  127.564443][ T3300] EXT4-fs unmount: 17 callbacks suppressed
[  127.564456][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.