last executing test programs:

2m30.821151789s ago: executing program 2 (id=6301):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x2, 0x4}}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000040), 0x111}}, 0x20)
close(r0)

2m30.796189419s ago: executing program 2 (id=6303):
socket$inet6(0xa, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x401]}, 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

2m30.583459923s ago: executing program 2 (id=6312):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3})

2m30.546667734s ago: executing program 2 (id=6315):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0)

2m30.497085184s ago: executing program 2 (id=6317):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
fallocate(r0, 0x0, 0x0, 0x8000c62)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r2, r2, 0x0, 0x100000800000009)

2m30.301364538s ago: executing program 2 (id=6321):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810)
recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)

2m30.284521087s ago: executing program 32 (id=6321):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810)
recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)

2m12.368618864s ago: executing program 0 (id=6769):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
read$hiddev(r1, &(0x7f0000000600)=""/98, 0x62)
socket(0x400000000010, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000040), 0x3b)
recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000)
close(r8)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)

2m11.575379857s ago: executing program 0 (id=6774):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r3, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)

2m11.515239908s ago: executing program 0 (id=6778):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

2m11.466096899s ago: executing program 0 (id=6781):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0)

2m11.442683219s ago: executing program 0 (id=6783):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x3, 0xef, 0x8, 0xc, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40)

2m10.71466466s ago: executing program 0 (id=6799):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000001680)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x4)

2m10.676988201s ago: executing program 33 (id=6799):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000001680)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x4)

1m28.932535018s ago: executing program 6 (id=8069):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0)

1m28.857095389s ago: executing program 6 (id=8072):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd)

1m28.685308522s ago: executing program 6 (id=8078):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='track_foreign_dirty\x00'}, 0x18)
creat(&(0x7f0000000040)='./bus\x00', 0x101)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x40047438, 0x110e22fff6)

1m28.651446932s ago: executing program 6 (id=8083):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0)

1m28.594016504s ago: executing program 6 (id=8084):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0})
io_uring_enter(r4, 0x40f9, 0x217, 0x48, 0x0, 0x0)
dup3(r4, r2, 0x80000)

1m28.520947205s ago: executing program 6 (id=8088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', 0x0})
sendfile(r3, r2, 0x0, 0x7ffff000)

1m28.507653835s ago: executing program 34 (id=8088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', 0x0})
sendfile(r3, r2, 0x0, 0x7ffff000)

3.278907657s ago: executing program 1 (id=9181):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd53, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

3.242353927s ago: executing program 1 (id=9182):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000140000009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='ext4_update_sb\x00', r4, 0x0, 0xa}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
fcntl$addseals(r5, 0x409, 0x8)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)

2.925753113s ago: executing program 5 (id=9187):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x5)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
utimes(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}})
sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.890286074s ago: executing program 7 (id=9190):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x2e, 0x61, 0x2e]}}, 0x0, 0x31, 0x0, 0x1, 0x7f}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x200, 0x10000000, 0x0, 0x900c}, 0x9, 0xbe}, [{0xf1d, 0x100, 0x4, 0x7, 0x8, 0x8001}, {0x3ff, 0x1, 0x200, 0x95, 0x5, 0x8001}, {0x521, 0x0, 0x1, 0x1000, 0x7, 0x4}, {0x831, 0x2, 0x10000008, 0x1, 0x8000, 0x7}, {0x1, 0xfffb, 0x2, 0x5, 0x8, 0x44d}, {0x2, 0x5, 0x8, 0x7, 0x7, 0x5}, {0x6, 0x8, 0x5, 0x8, 0x7dd, 0x3}, {0x0, 0xfffffff8, 0x400, 0x80, 0xa, 0x200}, {0x7, 0x61, 0x47de7270, 0x0, 0xc0, 0x1}, {0xfd, 0x5, 0x80000000, 0x7, 0xe69}, {0x2, 0x58, 0x0, 0x772, 0xf, 0x58000000}, {0x9d, 0x42, 0x80000000, 0x9, 0x1, 0x2}, {0xc035, 0x2, 0xffff, 0x6, 0x5, 0x8d}, {0x76800000, 0x7a0, 0x800, 0x0, 0xff, 0xe75}, {0xfffffffa, 0x4, 0x8, 0xffffff00, 0x9, 0x1}, {0x6, 0x7, 0x6, 0x3, 0x3, 0x1aa}, {0x5, 0xfffffffa, 0x9, 0x17a, 0x3fa, 0xa7e}, {0x7ff, 0x0, 0x0, 0x4, 0x1f26, 0x66f9}, {0x0, 0x52, 0x7, 0x8, 0x40}, {0x4, 0x2, 0x8, 0x6, 0x20, 0x9}, {0x7fffffff, 0xfff, 0x8d, 0xda, 0xc8, 0x8}, {0x2, 0x4, 0x8, 0x8, 0x48, 0xfffffff9}, {0x5, 0x2, 0x800, 0xfffffff8, 0xb, 0x5}, {0x7, 0x5, 0x10001, 0x8, 0x1, 0x26631101}, {0xc000000, 0xc2, 0x9, 0x1, 0x9, 0x1ff}, {0x9, 0x10, 0x0, 0x94, 0x3}, {0x8, 0x7fc, 0x265dc8b8, 0x5, 0x5, 0xd8d6}, {0x6, 0xffff, 0x4, 0x4, 0x7fffffff, 0xffffffff}, {0x10000, 0x0, 0x2, 0x7, 0x3, 0xc92}, {0x7, 0x2, 0x3, 0x7, 0xf, 0x3ff}, {0x7, 0x6, 0x9, 0x3, 0x9, 0x10}, {0x5, 0x6, 0xb4, 0xa, 0x36c, 0x10}, {0x0, 0x2, 0x5, 0x583, 0x7, 0x6}, {0x4, 0x7, 0x401, 0x816, 0x1839, 0x900000}, {0x1, 0x3, 0xe, 0x0, 0x7fffffff, 0x8}, {0x3, 0x6a4, 0x7, 0x7f, 0x3, 0x9}, {0x4, 0xfff, 0xfffffffc, 0x800, 0x7, 0x80000000}, {0x8, 0xf5, 0x0, 0xfffff801, 0x6, 0x7}, {0x1000, 0x98, 0x1, 0x33bb, 0xa, 0x5}, {0x2, 0x0, 0x8, 0x280000, 0x200, 0xd618}, {0x1a, 0x1000, 0x40, 0x0, 0x478b9d9a, 0x5}, {0x5, 0x2, 0x4, 0x44, 0x5, 0x80}, {0x7, 0x17f, 0x5, 0x10001, 0x9, 0x7}, {0x9, 0x1, 0xffff, 0x3, 0x800, 0x157ca7bc}, {0xffff69ed, 0x8, 0x0, 0x7, 0x5, 0x6}, {0x6, 0x101, 0x2, 0x7, 0x4, 0x6fc4f952}, {0x6c, 0x101, 0x3, 0x4, 0x101, 0x4}, {0x3, 0x6e, 0x1f, 0x5, 0xa8b, 0xc1}, {0x78c, 0x814, 0xf, 0xfffffffc, 0x7ff, 0x3}, {0x8001, 0xd, 0x5, 0x80000000, 0x7, 0xb}, {0x2, 0x9, 0xa8d6, 0x9, 0x61, 0x7ff}, {0x80000000, 0x8, 0x5, 0x7, 0x1}, {0x3, 0xfffff801, 0x6, 0x9e0, 0x6, 0x8}, {0x1, 0x6, 0x0, 0xa, 0x2, 0x4}, {0x401, 0x4, 0x8, 0x2, 0x40, 0x5}, {0x1, 0xc1, 0x511, 0x2, 0x6, 0x9}, {0x1, 0x8, 0x7a83, 0xfffffff8, 0x7, 0xffffffff}, {0xa9db, 0x9, 0xc, 0x3, 0xd3, 0x1}, {0xfffffff9, 0x10000, 0x52, 0x3, 0x1, 0x1ff}, {0xff, 0xa47a, 0xb, 0x5, 0x1, 0x2}, {0x2, 0xfffffff7, 0x8, 0x6, 0xe2, 0x8}, {0x3, 0x9, 0x13, 0x3, 0x0, 0x4}, {0x2, 0x5fef936e, 0x8, 0x8, 0x86c7, 0x6}, {0xfff, 0xb5e2, 0xb, 0xc088, 0x3, 0x96}, {0xb, 0x8b0, 0x101, 0x3, 0x0, 0x9}, {0x4, 0x7, 0x3, 0x7, 0x5, 0x1}, {0x3, 0x7, 0x2, 0x6a8982d2, 0x4a, 0x2}, {0x4, 0x1, 0x9, 0x4, 0x0, 0x7}, {0x0, 0x99fd, 0x3c0, 0x6, 0x0, 0x1}, {0x8, 0x4b, 0x8, 0x80, 0x3, 0x2}, {0x80, 0x3, 0xfffffffe, 0xfffffffd, 0x1, 0x6}, {0x4, 0x0, 0x1, 0x7, 0x1}, {0x3, 0x0, 0x2, 0xb, 0x6, 0x4ba3}, {0x0, 0x400, 0xb, 0x9af8, 0x3, 0x80000001}, {0x800, 0x5a39, 0xfffffffc, 0x1, 0x5, 0x8}, {0x9, 0x6, 0x2a57152a, 0x7, 0x6b34, 0x6}, {0x10001, 0x63, 0x6, 0x80000001, 0xb3, 0x3}, {0xee, 0x0, 0x21, 0x4, 0x6, 0xb5d4b5ee}, {0xfffffc40, 0x0, 0x3, 0x3, 0x7, 0x401}, {0x0, 0x8, 0xffff9ba6, 0xc8, 0x80000001, 0xe3}, {0x10000, 0x0, 0xff, 0xffffbbfe, 0x7, 0x6}, {0x7, 0x9, 0x1, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x8001, 0xa, 0x1, 0x7}, {0x9, 0x2, 0x8, 0x3, 0xf, 0xd4e3}, {0x8, 0xfff, 0xa29, 0x5, 0x7f, 0x2e}, {0x81, 0x9, 0xf4b9, 0x7fffffff, 0x8, 0xb}, {0x101, 0xfffffff7, 0xce1d, 0x3, 0x2, 0x8001}, {0x400, 0x3, 0x957, 0x2, 0x5210000, 0x1}, {0x8, 0x9, 0x4, 0x9, 0x423, 0x5c000000}, {0x3, 0x7, 0x7fffffff, 0x83, 0xe18, 0xffffffff}, {0x100, 0xb2, 0x0, 0x6e2e, 0x9, 0x6}, {0x0, 0xffffff80, 0xfffffff8, 0xa1, 0xff, 0x2}, {0x7, 0xfffffffb, 0x0, 0x5, 0x0, 0x53b53a65}, {0xb99, 0x8, 0x5, 0x1ccf, 0x3, 0x4}, {0x4, 0x6, 0x8, 0x0, 0x64c, 0x7093}, {0x5, 0x7, 0x7fff, 0x4, 0xb, 0x5}, {0x6, 0x0, 0x3, 0xf443, 0x7, 0x5}, {0xfffffff8, 0x40, 0x47e, 0xfffeffff, 0x7f7, 0x6}, {0x800, 0x6, 0x7b, 0x9, 0x7, 0x6}, {0x8, 0x2, 0x1, 0x8, 0x400, 0x3}, {0x10000, 0x779, 0x0, 0x1, 0x7f, 0xffff}, {0x9, 0x7, 0x100, 0x7, 0x6, 0x4}, {0x8000, 0x0, 0x5, 0x4, 0x5, 0x8}, {0xdc34, 0x5, 0x40, 0x5, 0x2}, {0xa, 0x600000, 0x0, 0x5, 0x2, 0x2}, {0x80000000, 0x401, 0x7, 0x9, 0x6, 0x6}, {0x8, 0x7fffffff, 0x3, 0x0, 0x100, 0x6}, {0x4ea, 0x40, 0xbb, 0xe049, 0x8001}, {0xfffffff5, 0x1, 0x9, 0x0, 0x3, 0x4}, {0x8, 0x1, 0x4, 0xc6, 0x2, 0x8}, {0x7, 0x3, 0x9, 0x5, 0x9, 0x7}, {0x8637, 0x5, 0x0, 0x6, 0x9, 0x44}, {0xfffffeff, 0xc7, 0x6, 0x6, 0x100, 0x1}, {0x1c, 0x6, 0x6, 0x6, 0x81, 0x5}, {0x4, 0x6, 0x1, 0x800, 0x5, 0x9}, {0x6, 0x934, 0x7, 0x5, 0x6, 0x1}, {0x3, 0x8, 0x4, 0x0, 0x8, 0x8e8e}, {0x7, 0xeb2, 0x8, 0x5, 0x7, 0x22}, {0x9, 0x9, 0xe, 0x5, 0x8000, 0x84}, {0x3, 0xc5b, 0xffffff67, 0x401, 0x7fffffff, 0x1}, {0xe, 0x3ff, 0x1, 0xfffffffc, 0x8000, 0x100}, {0x4b87, 0xe, 0x0, 0x200, 0x101, 0x6}, {0xd9d, 0x0, 0x5, 0xfffffffe, 0x1000, 0x2}, {0x4, 0x7, 0x4, 0x5, 0x2, 0x7}, {0x6, 0x3, 0xc42, 0x0, 0x400, 0x40}, {0xa28, 0x6, 0x2, 0x8, 0xd, 0x100}, {0x4c, 0x1, 0x100, 0x3ff, 0x401, 0x5}, {0x6, 0xff, 0xd0c, 0x0, 0x5, 0x10000}], [{0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x4, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x9efba641d060923c}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x3, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
setgid(0x0)

2.722122506s ago: executing program 7 (id=9191):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='cachefiles_write\x00', r0, 0x0, 0xb6a}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r2 = socket(0x18, 0x4, 0x0)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e)
sendfile(r2, r1, 0x0, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800003, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x380}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8a00000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000009ca8a9c73714962c7aaf81b4dfa2729dbebaa55ee18426e377d821ffc0ff43b81bf2a84edb9e59879df9491733cb92f85120d3", @ANYRES32=r3, @ANYBLOB="0000b705000008000800000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8006}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = dup3(r7, r6, 0x0)
recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)

2.721461086s ago: executing program 5 (id=9192):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x7, 0x10, 0x3ff, 0x1}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'})
r3 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x4000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="921ef0", 0x3, 0x40d0, &(0x7f0000001200)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2.625531667s ago: executing program 3 (id=9194):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setpriority(0x3, 0x0, 0xfffffffd)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

2.624858098s ago: executing program 5 (id=9195):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{r0}, &(0x7f0000001740), &(0x7f0000001780)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x807}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)

2.359971022s ago: executing program 5 (id=9196):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @random="010000201000"})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x50)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sync()
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x100000000}, 0x18)
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x83, 0x80, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x1, 0x8, {0x3, 0x25, 0x1, 0x81, 0xd, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x2, 0xf5, {0x7, 0x25, 0x1, 0x83, 0x3, 0x2}}}}}}}]}}, 0x0)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close(r4)

2.357531102s ago: executing program 1 (id=9197):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000240)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000280)='{.\x02^\xf9%[\x00', &(0x7f00000004c0)="0385", 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a03000000000000000000020000050c00024000000000000000010900010073797a3000"], 0x60}}, 0x0)

2.073352097s ago: executing program 7 (id=9200):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xf78ef285f8ab6d82, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001500)={[{@errors_remount}, {@bh}, {@data_err_abort}, {@dioread_nolock}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r4 = socket(0x28, 0x5, 0x0)
r5 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x800}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7fffffffffffffff, 0xe34f}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff0}, 0x94)
setsockopt$inet_int(r4, 0x0, 0x25, &(0x7f00000000c0)=0x65, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.026005007s ago: executing program 3 (id=9201):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
syncfs(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x40880)
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_tracing={0x1a, 0x15, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0xb, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000001680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x292aa, r5, 0x5, &(0x7f00000016c0)=[r0, r4, r3], &(0x7f0000001700)=[{0x4, 0x5, 0x3, 0x2}, {0x5, 0x4, 0xa, 0x9}, {0x1, 0x1, 0x9, 0xa}, {0x2, 0x5, 0x3}, {0x1, 0xa, 0xa, 0xa}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001940)={@fallback=r9, 0x0, 0x0, 0xf0, &(0x7f0000001840)=[0x0], 0x1, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001980)={@map=r0, r10, 0x38, 0x2005, 0xffffffffffffffff, @value=r0, @void, @void, @void, r11}, 0x20)

1.84080955s ago: executing program 4 (id=9202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x4c58, 0x10000, 0xc18f, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4)
close_range(r6, r6, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
getpeername(r7, &(0x7f00000000c0)=@can={0x1d, <r8=>0x0}, &(0x7f0000000140)=0x80)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], <r9=>0x0, 0x99, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18610000090000000000000005000000850000001e000000033c646b0a000000418d1e99c45aca724f1e596349cedec737adc4a8b925ff161ae26f1b50fb235b3d884f3b8fb1a2b7c1e9010a67ace15087e0e40a7dcfa48f7b7a2d2b1fce7d6de319c00155ff54736a05cdb184069cd83d9ac7a6744e2cec161e5c76dcb3757ff7fb9dbd3f462b9f71b9f11672c460802ddbc5243638eb897b32fcd986c86a69fc89f71914b5b06b8461a8216ebfe877dc8795b1311e56ce0e53679d59d03ad5741b11e3e33db78eff7918aea2e7"], &(0x7f0000000200)='GPL\x00', 0x4, 0x34, &(0x7f0000000240)=""/52, 0x40f00, 0x16, '\x00', r8, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x3}, 0x10, r9, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e080045"], 0x0)

1.790258261s ago: executing program 7 (id=9203):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1.789788601s ago: executing program 4 (id=9204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
clock_gettime(0x0, 0x0)

1.468320286s ago: executing program 4 (id=9205):
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200000000007, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x8}, 0x6e58, 0x5, 0x4, 0x4, 0x200000087, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup(r0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
syz_clone3(&(0x7f0000000340)={0x14000, &(0x7f0000000000), 0x0, 0x0, {0x2}, 0x0, 0x0, &(0x7f00000001c0)=""/252, &(0x7f00000002c0)}, 0x58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3b, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
sync()
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

1.430813987s ago: executing program 5 (id=9206):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789")
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)
unshare(0x2040400)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4)
unshare(0x26000400)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1.255340879s ago: executing program 4 (id=9207):
r0 = gettid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000020105000000000000000000050000004800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x49000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8)
r3 = dup(r2)
read$msr(r3, &(0x7f0000002c00)=""/4108, 0x100c)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001240)=<r5=>0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(0x0, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x2f, 0x1, @tid=r5}, &(0x7f0000000540))
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000bfce0dad37cf2d913b624c158d15167a082616b77f19d71e80a2e17a9397768fcbc8d91e01740d5e54b2efad9173c9fa9833c8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet_sctp(r4, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000101c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.113078261s ago: executing program 3 (id=9208):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{r0}, &(0x7f0000001740), &(0x7f0000001780)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x807}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)

1.035402003s ago: executing program 3 (id=9209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
set_tid_address(0x0)

997.249204ms ago: executing program 3 (id=9210):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x93}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110600", @ANYRES32=r5, @ANYRESDEC=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800)

897.218625ms ago: executing program 7 (id=9211):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=<r8=>0x0, &(0x7f00000003c0)=<r9=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0)
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMIWAIT(r12, 0x545c, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r11)

854.900466ms ago: executing program 1 (id=9212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x9)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
set_tid_address(0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

413.154643ms ago: executing program 1 (id=9213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000c00)={{r0}, "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"})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x20040080)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@sr0, r7, &(0x7f00000004c0)='./file0\x00')
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
creat(&(0x7f0000000000)='./file0\x00', 0x0)

361.218374ms ago: executing program 4 (id=9214):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$igmp6(0xa, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0xfffffe00}], 0x1, 0x141, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x4, 0x303, 0x100}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)

326.656854ms ago: executing program 4 (id=9215):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
unshare(0x26000400)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r3 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0)
mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt(r4, 0x200, 0xb4, &(0x7f0000000540)="3772f4081537150727472993c6f01c78447e48dfab726f28c9b17c11ab56efa8008bd44a41906b721c15c3a01e681cdf30af1d55cbb980c0317f43130ffe1b1681783fcf642f07ab74f7c4c9c2c4b24859a8735b49892ff57b938086702ac5b90419aa5bba143ac849636e13131658b22ea7b6f582af078af391320225e927a63628ab8c9907ce89848ed6c6f14f0749bdd9e0a80ec3f027fbe57889c4f048f05f664fb85820ab8210152dd2e7cdd712b426fda649bbe02049c1274b7ecd7e71a66c46fa7c575768c6e1808a3e5764a3d945b4763b5dffc37cfa5c71366c69265e43c11cc8cd447e6a298df3b54b3990b29dea", 0xf3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x18)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r6, 0x0, &(0x7f00000000c0)=@udp6}, 0x20)
r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r8, 0x0, 0x79)

320.897484ms ago: executing program 5 (id=9216):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x80800, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'G'}]}], {0x14}}, 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000040)=""/3, 0x1b, 0x3, 0x1, 0x3ff, 0x10000}, 0x28)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_ENABLE_SE(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
sendto$inet(r5, 0x0, 0x0, 0x24000080, 0x0, 0x0)

292.090064ms ago: executing program 1 (id=9217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$selinux_user(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7365b3696e75785f636f6e6669675f743a73302072"], 0x2b)
r3 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000200))
syz_io_uring_submit(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r6}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0xe8, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0xa2, 0x6, "ccaa53dc0a98b521c00e891c79121e0d52526912b4d0146119495c7e6c65cbbc050235d4ba5ddd0a3d6b198eb157e9548daf15a411203ba14c4b34203cfe6a6ca5deb3ae89ed3ae0b47976529268304189772b8fe14416577d63d18aab1a35310567d25e5a4af3207930a05ac3e5a58e3b7a355f7c4feec4b221274b152b0d45e76cafd6995a72ca373845a1d8847d5cbf164eba518a1094cda6f8540590"}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008054}, 0x0)

127.691907ms ago: executing program 3 (id=9218):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10)
write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4)
read$snapshot(r3, 0x0, 0xffffffbf)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8c55, &(0x7f0000000600))
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

0s ago: executing program 7 (id=9219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5, @ANYRES32=r0, @ANYRES16, @ANYRES32=r1, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESHEX=r3, @ANYRES64], 0x54}}, 0x40000000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x5})
getpid()
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==")
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r8, 0x2000009)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)

kernel console output (not intermixed with test programs):

][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.526642][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.534294][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.542769][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.550948][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.558426][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.565908][T32327] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  612.576073][T32327] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  612.670312][  T450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8428'.
[  612.682828][  T450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8428'.
[  612.750223][  T457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8431'.
[  612.780632][  T457] hsr_slave_0: left promiscuous mode
[  612.790600][  T457] hsr_slave_1: left promiscuous mode
[  612.997821][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  612.997846][   T29] audit: type=1326 audit(2000524773.470:52770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=474 comm="syz.3.8436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448f2ae9a9 code=0x0
[  613.128790][   T29] audit: type=1326 audit(2000524773.610:52771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=486 comm="syz.4.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  613.153931][   T29] audit: type=1326 audit(2000524773.610:52772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=486 comm="syz.4.8439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  613.475902][  T509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  613.883384][   T29] audit: type=1400 audit(2000524774.429:52773): avc:  denied  { watch } for  pid=526 comm="syz.3.8451" path="/file0" dev="ramfs" ino=88381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  613.912825][  T529] netlink: 'syz.4.8452': attribute type 29 has an invalid length.
[  613.922913][  T529] netlink: 'syz.4.8452': attribute type 29 has an invalid length.
[  614.184086][  T546] lo speed is unknown, defaulting to 1000
[  614.199345][  T546] dummy0 speed is unknown, defaulting to 1000
[  614.276266][  T559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8462'.
[  614.289291][  T546] lo speed is unknown, defaulting to 1000
[  614.540164][   T29] audit: type=1326 audit(2000524775.130:52774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.3.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  614.563772][   T29] audit: type=1326 audit(2000524775.130:52775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.3.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  614.587669][   T29] audit: type=1326 audit(2000524775.130:52776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.3.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  614.611237][   T29] audit: type=1326 audit(2000524775.130:52777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.3.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  614.634707][   T29] audit: type=1326 audit(2000524775.130:52778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.3.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  614.658314][   T29] audit: type=1326 audit(2000524775.130:52779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=586 comm="syz.3.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  614.742136][  T599] syzkaller0: entered promiscuous mode
[  614.747815][  T599] syzkaller0: entered allmulticast mode
[  614.755719][  T599] tipc: Resetting bearer <eth:syzkaller0>
[  614.875577][  T610] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8473'.
[  615.019178][  T619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8474'.
[  616.182501][  T689] serio: Serial port ptm0
[  616.507604][  T697] tipc: Started in network mode
[  616.512671][  T697] tipc: Node identity aab588a19504, cluster identity 4711
[  616.519909][  T697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  616.527837][  T696] tipc: Resetting bearer <eth:syzkaller0>
[  616.544130][  T701] xt_CT: You must specify a L4 protocol and not use inversions on it
[  616.557574][  T696] tipc: Disabling bearer <eth:syzkaller0>
[  616.584266][  T707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  616.593022][  T707] tipc: Resetting bearer <eth:syzkaller0>
[  616.600676][  T707] tipc: Resetting bearer <eth:syzkaller0>
[  617.624180][  T741] syzkaller0: entered promiscuous mode
[  617.629737][  T741] syzkaller0: entered allmulticast mode
[  617.898593][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  617.898606][   T29] audit: type=1400 audit(2000524778.750:52787): avc:  denied  { associate } for  pid=761 comm="syz.3.8525" name="rdma.current" dev="tmpfs" ino=10412 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":"
[  617.972114][  T773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8528'.
[  618.169483][  T780] loop4: detected capacity change from 0 to 8192
[  618.178966][  T780] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff00)
[  618.186966][  T780] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff00)
[  618.231376][  T785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8533'.
[  618.270168][  T789] vlan0: entered promiscuous mode
[  618.275501][  T789] vlan0: entered allmulticast mode
[  618.280629][  T789] hsr_slave_1: entered allmulticast mode
[  618.343111][  T799] netlink: 'syz.4.8535': attribute type 4 has an invalid length.
[  618.355524][  T799] netlink: 'syz.4.8535': attribute type 4 has an invalid length.
[  618.392091][  T804] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  618.419015][  T806] wg2: entered promiscuous mode
[  618.423996][  T806] wg2: entered allmulticast mode
[  618.438264][  T808] syzkaller0: left promiscuous mode
[  618.445173][  T808] syzkaller0: left allmulticast mode
[  618.457460][  T808] tipc: Resetting bearer <eth:syzkaller0>
[  618.469824][  T812] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8541'.
[  618.575289][  T829] loop7: detected capacity change from 0 to 512
[  618.575921][  T825] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8543'.
[  618.605855][  T829] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  618.605970][  T829] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  618.605991][  T829] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8544: Corrupt directory, running e2fsck is recommended
[  618.618242][  T829] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  618.629002][  T829] EXT4-fs error (device loop7): ext4_iget_extra_inode:5030: inode #15: comm syz.7.8544: corrupted in-inode xattr: invalid ea_ino
[  618.634029][  T829] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.8544: couldn't read orphan inode 15 (err -117)
[  618.679326][   T29] audit: type=1400 audit(2000524779.547:52788): avc:  denied  { unlink } for  pid=3307 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=10412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  618.737364][  T829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.776318][   T29] audit: type=1400 audit(2000524779.708:52789): avc:  denied  { bind } for  pid=845 comm="syz.1.8546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  618.890454][  T866] netlink: 'syz.1.8554': attribute type 1 has an invalid length.
[  618.901329][  T866] 8021q: adding VLAN 0 to HW filter on device bond2
[  618.978685][  T866] bond2: (slave veth1): Enslaving as an active interface with a down link
[  618.979961][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.008136][  T866] vlan2: entered allmulticast mode
[  619.008155][  T866] veth1: entered allmulticast mode
[  619.008900][  T866] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  619.263549][  T927] rdma_op ffff888116f41580 conn xmit_rdma 0000000000000000
[  619.272438][  T927] netlink: 'syz.4.8558': attribute type 13 has an invalid length.
[  619.357389][  T927] tipc: Resetting bearer <eth:syzkaller0>
[  619.407791][  T927] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.417371][  T927] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.425819][  T927] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.434185][  T927] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.572519][  T937] netlink: 154020 bytes leftover after parsing attributes in process `syz.7.8560'.
[  619.577057][  T939] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8561'.
[  619.755242][  T943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=943 comm=syz.1.8573
[  619.783266][  T943] netlink: 'syz.1.8573': attribute type 11 has an invalid length.
[  619.791206][  T943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8573'.
[  619.862651][  T951] delete_channel: no stack
[  619.941863][  T960] loop5: detected capacity change from 0 to 512
[  619.958616][  T960] EXT4-fs: Ignoring removed mblk_io_submit option
[  619.974138][  T960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  619.993648][  T960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[  620.010198][  T960] System zones: 1-12
[  620.015040][  T960] EXT4-fs (loop5): 1 truncate cleaned up
[  620.024230][  T960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.347352][  T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.368452][  T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.434519][  T982] loop7: detected capacity change from 0 to 8192
[  620.478096][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.071902][ T1014] loop7: detected capacity change from 0 to 1024
[  621.090031][ T1014] ext4: Unknown parameter 'euid>00000000000000000000'
[  621.090738][ T1016] netlink: 'syz.1.8582': attribute type 4 has an invalid length.
[  621.164879][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  621.178218][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  621.195215][ T1023] team0 (unregistering): Port device dummy0 removed
[  621.225430][T32294] dummy0 speed is unknown, defaulting to 1000
[  621.231650][T32294] syz2: Port: 1 Link DOWN
[  621.249863][ T1065] pim6reg1: entered promiscuous mode
[  621.256698][ T1065] pim6reg1: entered allmulticast mode
[  621.264247][ T1037] pim6reg1: entered promiscuous mode
[  621.269624][ T1037] pim6reg1: entered allmulticast mode
[  621.300085][ T1071] netlink: 'syz.1.8588': attribute type 13 has an invalid length.
[  621.339635][ T1071] tipc: Resetting bearer <eth:syzkaller0>
[  621.404342][ T1082] loop7: detected capacity change from 0 to 512
[  621.413098][ T1085] syzkaller0: entered promiscuous mode
[  621.418681][ T1085] syzkaller0: entered allmulticast mode
[  621.424608][ T1085] tipc: Resetting bearer <eth:syzkaller0>
[  621.431743][ T1082] Quota error (device loop7): v2_read_file_info: Free block number 58381 out of range (1, 6).
[  621.447763][ T1082] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  621.478608][ T1082] EXT4-fs (loop7): mount failed
[  621.484623][   T29] audit: type=1400 audit(2000524782.617:52790): avc:  denied  { setopt } for  pid=1092 comm="syz.1.8594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  621.622919][   T29] audit: type=1400 audit(2000524782.767:52791): avc:  denied  { write } for  pid=1076 comm="syz.3.8589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  622.260067][   T29] audit: type=1326 audit(2000524783.457:52792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  622.295358][   T29] audit: type=1326 audit(2000524783.489:52793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  622.320477][   T29] audit: type=1326 audit(2000524783.489:52794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  622.345582][   T29] audit: type=1326 audit(2000524783.489:52795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  622.391590][ T1103] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  622.401329][ T1103] tipc: Enabled bearer <udp:syz0>, priority 10
[  622.459147][ T1111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8599'.
[  622.482403][ T1113] netlink: 'syz.1.8600': attribute type 4 has an invalid length.
[  622.544726][T15995] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  622.562553][ T1136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8603'.
[  622.604934][ T1143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8604'.
[  623.026895][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  623.026913][   T29] audit: type=1400 audit(2000524784.275:52827): avc:  denied  { unmount } for  pid=1153 comm="syz.3.8609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  623.186396][ T1158] loop4: detected capacity change from 0 to 512
[  623.243287][ T1158] EXT4-fs (loop4): orphan cleanup on readonly fs
[  623.250799][ T1158] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8607: bg 0: block 248: padding at end of block bitmap is not set
[  623.265790][ T1158] Quota error (device loop4): write_blk: dquota write failed
[  623.273357][ T1158] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  623.283295][ T1158] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8607: Failed to acquire dquot type 1
[  623.295444][ T1158] EXT4-fs (loop4): 1 truncate cleaned up
[  623.302703][ T1158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  623.497261][ T1164] loop7: detected capacity change from 0 to 512
[  623.549236][ T1164] EXT4-fs (loop7): orphan cleanup on readonly fs
[  623.579774][T32326] tipc: Node number set to 1068599457
[  623.589289][ T1164] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.8610: bad orphan inode 13
[  623.600655][ T1164] ext4_test_bit(bit=12, block=18) = 1
[  623.606095][ T1164] is_bad_inode(inode)=0
[  623.610344][ T1164] NEXT_ORPHAN(inode)=2130706432
[  623.615379][ T1164] max_ino=32
[  623.618592][ T1164] i_nlink=1
[  623.623310][ T1164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  623.649965][ T1164] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  623.669226][ T1164] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8610: bg 0: block 248: padding at end of block bitmap is not set
[  623.684506][ T1164] Quota error (device loop7): write_blk: dquota write failed
[  623.693382][ T1164] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  623.703392][ T1164] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8610: Failed to acquire dquot type 1
[  623.806624][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.815545][ T1164] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  623.873980][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.934285][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.954146][ T1192] lo speed is unknown, defaulting to 1000
[  623.961635][ T1192] dummy0 speed is unknown, defaulting to 1000
[  623.973832][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.027086][ T1192] lo speed is unknown, defaulting to 1000
[  624.178845][   T29] audit: type=1400 audit(2000524785.513:52828): avc:  denied  { map } for  pid=1206 comm="syz.1.8621" path="socket:[89766]" dev="sockfs" ino=89766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  624.453360][ T1243] lo speed is unknown, defaulting to 1000
[  624.461002][ T1243] dummy0 speed is unknown, defaulting to 1000
[  624.506389][ T1250] loop5: detected capacity change from 0 to 512
[  624.512067][ T1243] lo speed is unknown, defaulting to 1000
[  624.542936][ T1250] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.8624: corrupted inode contents
[  624.566004][ T1250] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #16: comm syz.5.8624: mark_inode_dirty error
[  624.592004][ T1250] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.8624: corrupted inode contents
[  624.622702][ T1282] program syz.7.8625 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  624.632554][   T29] audit: type=1326 audit(2000524785.998:52829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.7.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  624.657630][   T29] audit: type=1326 audit(2000524785.998:52830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.7.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  624.682631][   T29] audit: type=1326 audit(2000524785.998:52831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.7.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  624.706180][   T29] audit: type=1326 audit(2000524785.998:52832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.7.8625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  624.737077][ T1282] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  624.738807][ T1250] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8624: mark_inode_dirty error
[  624.769599][ T1286] loop4: detected capacity change from 0 to 512
[  624.792259][ T1286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  624.806462][ T1250] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.8624: corrupted inode contents
[  624.819241][ T1286] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.8626: casefold flag without casefold feature
[  624.841140][ T1250] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  624.880548][ T1250] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.8624: corrupted inode contents
[  624.896795][ T1286] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.8626: couldn't read orphan inode 15 (err -117)
[  624.943539][ T1250] EXT4-fs error (device loop5): ext4_truncate:4592: inode #16: comm syz.5.8624: mark_inode_dirty error
[  624.972480][ T1286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.987643][ T1250] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  625.002667][ T1250] EXT4-fs (loop5): 1 truncate cleaned up
[  625.016082][ T1250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.032765][T15969] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:35: Failed to release dquot type 1
[  625.039443][ T1250] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  625.048203][ T1308] loop7: detected capacity change from 0 to 512
[  625.063121][ T1312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8626'.
[  625.096322][ T1308] EXT4-fs (loop7): 1 orphan inode deleted
[  625.109075][T15948] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1
[  625.113433][ T1308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.135969][ T1308] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  625.147990][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.262128][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.291689][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.551972][T32325] page_pool_release_retry() stalled pool shutdown: id 119, 51 inflight 242 sec
[  625.912773][ T1353] loop7: detected capacity change from 0 to 512
[  626.501615][ T1367] program syz.4.8647 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  626.521796][ T1369] loop5: detected capacity change from 0 to 512
[  626.553749][ T1369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  626.566798][ T1367] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  626.614272][ T1369] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.8646: casefold flag without casefold feature
[  626.675539][ T1369] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.8646: couldn't read orphan inode 15 (err -117)
[  626.727658][ T1369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.784723][ T1369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8646'.
[  626.853383][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.938304][ T1379] loop5: detected capacity change from 0 to 1024
[  626.960934][ T1379] EXT4-fs: Ignoring removed orlov option
[  626.966690][ T1379] EXT4-fs: Ignoring removed nomblk_io_submit option
[  627.011935][ T1379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.089378][ T1391] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  627.097772][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.141512][ T1398] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.275428][ T1398] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.310779][ T1398] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.376449][ T1408] loop7: detected capacity change from 0 to 512
[  627.384338][ T1408] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  627.469969][ T1408] EXT4-fs (loop7): 1 truncate cleaned up
[  627.476907][ T1408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.313528][ T1398] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  628.349908][ T1421] loop4: detected capacity change from 0 to 1024
[  628.375628][ T1398] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  628.379670][ T1421] EXT4-fs: Ignoring removed orlov option
[  628.389459][ T1398] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  628.400939][ T1398] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  628.480228][ T1421] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  628.563639][ T1421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.618615][   T29] kauditd_printk_skb: 80 callbacks suppressed
[  628.618634][   T29] audit: type=1326 audit(2000524790.272:52911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.648413][   T29] audit: type=1326 audit(2000524790.272:52912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.672050][   T29] audit: type=1326 audit(2000524790.272:52913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.695777][   T29] audit: type=1326 audit(2000524790.272:52914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.719433][   T29] audit: type=1326 audit(2000524790.272:52915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.743164][   T29] audit: type=1326 audit(2000524790.272:52916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.766838][   T29] audit: type=1326 audit(2000524790.272:52917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.790656][   T29] audit: type=1326 audit(2000524790.272:52918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.814231][   T29] audit: type=1326 audit(2000524790.272:52919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  628.837743][   T29] audit: type=1326 audit(2000524790.272:52920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  629.007967][ T1398] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  629.023160][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.045161][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.060993][ T1439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.080319][ T1439] syzkaller0: entered promiscuous mode
[  629.085972][ T1439] syzkaller0: entered allmulticast mode
[  629.099372][ T1448] netlink: 'syz.4.8660': attribute type 4 has an invalid length.
[  629.108354][ T1448] netlink: 'syz.4.8660': attribute type 4 has an invalid length.
[  629.118135][ T1439] tipc: Resetting bearer <eth:syzkaller0>
[  629.146248][ T1452] SELinux:  policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c
[  629.157329][ T1438] tipc: Resetting bearer <eth:syzkaller0>
[  629.163239][ T1452] SELinux: failed to load policy
[  629.176950][ T1438] tipc: Disabling bearer <eth:syzkaller0>
[  629.201249][ T1456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8664'.
[  629.223424][ T1456] bridge0: port 2(team0) entered disabled state
[  629.231792][T32326] page_pool_release_retry() stalled pool shutdown: id 159, 1 inflight 60 sec
[  629.243407][ T1456] bond0: left promiscuous mode
[  629.248466][ T1456] bridge0: port 1(bond0) entered disabled state
[  629.249247][ T1460] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  629.648182][ T1481] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  630.085611][ T1495] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  630.210271][ T1499] loop7: detected capacity change from 0 to 512
[  630.246472][ T1499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  630.284400][ T1499] EXT4-fs (loop7): orphan cleanup on readonly fs
[  630.312377][ T1499] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8676: Failed to acquire dquot type 1
[  630.348368][ T1507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  630.357823][ T1505] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  630.368016][ T1499] EXT4-fs (loop7): 1 truncate cleaned up
[  630.397611][ T1499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  630.450818][ T1507] tipc: Resetting bearer <eth:syzkaller0>
[  630.473055][ T1507] tipc: Resetting bearer <eth:syzkaller0>
[  630.504989][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8682'.
[  630.514013][ T1512] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8682'.
[  630.577769][T32294] IPVS: starting estimator thread 0...
[  630.604149][ T1521] loop4: detected capacity change from 0 to 1024
[  630.656335][ T1521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.689807][ T1519] IPVS: using max 1920 ests per chain, 96000 per kthread
[  630.824690][ T1527] loop5: detected capacity change from 0 to 8192
[  630.880695][ T1527]  loop5: p2 p3 p4
[  630.887451][ T1527] loop5: p2 start 65535 is beyond EOD, truncated
[  630.893908][ T1527] loop5: p3 start 3137798144 is beyond EOD, truncated
[  631.014691][ T1549] program syz.5.8689 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  631.040377][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8689'.
[  631.113314][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.127196][ T1558] netlink: 272 bytes leftover after parsing attributes in process `syz.5.8691'.
[  631.148770][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8691'.
[  631.157840][ T1558] netlink: 'syz.5.8691': attribute type 30 has an invalid length.
[  631.247545][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8691'.
[  631.256575][ T1558] netlink: 'syz.5.8691': attribute type 30 has an invalid length.
[  631.326652][ T1575] syz!: rxe_newlink: already configured on team_slave_0
[  631.382906][ T1577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.407932][ T1577] syzkaller0: entered promiscuous mode
[  631.413631][ T1577] syzkaller0: entered allmulticast mode
[  631.423369][ T1581] loop4: detected capacity change from 0 to 512
[  631.454328][ T1577] tipc: Resetting bearer <eth:syzkaller0>
[  631.475350][ T1576] tipc: Resetting bearer <eth:syzkaller0>
[  631.484111][ T1581] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.8695: corrupted inode contents
[  631.512334][ T1576] tipc: Disabling bearer <eth:syzkaller0>
[  631.537450][ T1581] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #16: comm syz.4.8695: mark_inode_dirty error
[  631.573185][ T1581] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.8695: corrupted inode contents
[  631.586385][ T1581] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.8695: mark_inode_dirty error
[  631.617063][ T1581] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.8695: corrupted inode contents
[  631.652150][ T1581] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  631.670623][ T1590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.678124][ T1581] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.8695: corrupted inode contents
[  631.691874][ T1590] syzkaller0: entered promiscuous mode
[  631.697493][ T1590] syzkaller0: entered allmulticast mode
[  631.703967][ T1581] EXT4-fs error (device loop4): ext4_truncate:4592: inode #16: comm syz.4.8695: mark_inode_dirty error
[  631.798056][ T1581] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  631.827819][ T1590] tipc: Resetting bearer <eth:syzkaller0>
[  631.845514][ T1589] tipc: Resetting bearer <eth:syzkaller0>
[  631.853946][ T1581] EXT4-fs (loop4): 1 truncate cleaned up
[  631.885455][ T1589] tipc: Disabling bearer <eth:syzkaller0>
[  631.910355][ T1581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.012478][ T1581] ext4 filesystem being mounted at /1737/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  632.140376][T15995] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 1
[  632.197591][ T1603] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  632.206485][ T1603] tipc: Resetting bearer <eth:syzkaller0>
[  632.217641][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.264475][ T1609] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  632.444311][ T1613] loop4: detected capacity change from 0 to 1024
[  632.466156][ T1613] EXT4-fs: Ignoring removed orlov option
[  632.471963][ T1613] EXT4-fs: Ignoring removed nomblk_io_submit option
[  632.515187][ T1613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.576649][ T1634] netlink: 'syz.3.8708': attribute type 10 has an invalid length.
[  632.584616][ T1634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8708'.
[  632.599195][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.608663][ T1634] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.617084][ T1634] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.652109][ T1634] geneve1: entered promiscuous mode
[  632.671348][ T1634] team0: Port device geneve1 added
[  632.683712][ T1640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8709'.
[  632.699064][ T1629] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.764026][ T1629] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.826296][ T1629] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.839413][ T1629] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.870840][ T1629] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  632.897907][ T1629] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.121977][ T1663] loop5: detected capacity change from 0 to 128
[  633.268055][   T29] kauditd_printk_skb: 201 callbacks suppressed
[  633.268079][   T29] audit: type=1326 audit(2000524795.310:53119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.458437][ T1672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1672 comm=syz.3.8716
[  633.548313][   T29] audit: type=1326 audit(2000524795.331:53120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.571965][   T29] audit: type=1326 audit(2000524795.331:53121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.595546][   T29] audit: type=1326 audit(2000524795.331:53122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.619055][   T29] audit: type=1326 audit(2000524795.331:53123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.642589][   T29] audit: type=1326 audit(2000524795.331:53124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.666062][   T29] audit: type=1326 audit(2000524795.331:53125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.689703][   T29] audit: type=1326 audit(2000524795.331:53126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.3.8714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  633.872070][ T1678] loop4: detected capacity change from 0 to 512
[  635.542529][ T1678] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.8718: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  635.585081][ T1678] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.8718: Bad quota inode: 3, type: 0
[  635.615520][ T1678] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  635.650033][ T1678] EXT4-fs (loop4): mount failed
[  635.676910][   T29] audit: type=1326 audit(2000524797.893:53127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.4.8718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  635.723137][   T29] audit: type=1326 audit(2000524797.925:53128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.4.8718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  635.780120][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.818954][ T1707] loop7: detected capacity change from 0 to 512
[  635.826664][ T1707] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  635.841325][ T1707] EXT4-fs (loop7): 1 truncate cleaned up
[  635.848295][ T1707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.872201][ T1707] netlink: 'syz.7.8723': attribute type 10 has an invalid length.
[  635.880205][ T1707] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8723'.
[  635.901703][ T1707] team0: Port device geneve1 added
[  635.926740][ T1715] random: crng reseeded on system resumption
[  635.946387][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.980359][ T1721] tipc: New replicast peer: 255.255.255.83
[  635.986311][ T1721] tipc: Enabled bearer <udp:�>, priority 10
[  636.013200][ T1712] lo speed is unknown, defaulting to 1000
[  636.029267][ T1712] dummy0 speed is unknown, defaulting to 1000
[  636.081123][ T1729] tipc: New replicast peer: 255.255.217.230
[  636.087115][ T1729] tipc: Enabled bearer <udp:syz2>, priority 10
[  636.156895][ T1712] lo speed is unknown, defaulting to 1000
[  636.160922][ T1731] loop7: detected capacity change from 0 to 1024
[  636.195308][ T1731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.235285][ T1731] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.8732: inode #233089398: comm syz.7.8732: iget: illegal inode #
[  636.269267][ T1733] SELinux: failed to load policy
[  636.286122][ T1731] EXT4-fs (loop7): Remounting filesystem read-only
[  636.306422][ T1731] EXT4-fs warning (device loop7): ext4_xattr_block_set:2190: inode #19: comm syz.7.8732: dec ref error=-30
[  636.350832][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.366836][ T1759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8734'.
[  636.389692][ T1758] hub 6-0:1.0: USB hub found
[  636.394483][ T1758] hub 6-0:1.0: 8 ports detected
[  636.415390][ T1759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8734'.
[  636.450618][ T1767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  636.461943][ T1765] hub 6-0:1.0: USB hub found
[  636.469364][ T1765] hub 6-0:1.0: 8 ports detected
[  636.474691][ T1767] syzkaller0: entered promiscuous mode
[  636.480436][ T1767] syzkaller0: entered allmulticast mode
[  636.516029][ T1767] tipc: Resetting bearer <eth:syzkaller0>
[  636.539133][ T1773] loop4: detected capacity change from 0 to 1024
[  636.545971][ T1766] tipc: Resetting bearer <eth:syzkaller0>
[  636.573015][ T1766] tipc: Disabling bearer <eth:syzkaller0>
[  636.636811][ T1773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.728700][ T1773] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.8738: Allocating blocks 449-513 which overlap fs metadata
[  636.745610][ T1772] EXT4-fs (loop4): pa ffff8881069ddd90: logic 48, phys. 177, len 21
[  636.753771][ T1772] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  636.809796][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.882108][ T1798] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  636.894958][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8740'.
[  636.904744][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8740'.
[  636.915468][ T1801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1801 comm=syz.4.8742
[  636.928127][ T1801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1801 comm=syz.4.8742
[  637.191569][ T1815] loop7: detected capacity change from 0 to 2048
[  637.242740][ T1815] Alternate GPT is invalid, using primary GPT.
[  637.243690][ T1818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  637.249219][ T1815]  loop7: p1 p2 p3
[  637.359231][ T1840] tipc: Resetting bearer <eth:syzkaller0>
[  637.368759][ T1839] tipc: Resetting bearer <eth:syzkaller0>
[  637.398864][T32299] tipc: Node number set to 412412201
[  637.702143][ T1863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.710963][ T1863] syzkaller0: entered promiscuous mode
[  637.716491][ T1863] syzkaller0: entered allmulticast mode
[  637.729477][ T1861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8760'.
[  637.739931][ T1861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8760'.
[  637.749058][ T1861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8760'.
[  637.759834][ T1861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8760'.
[  637.770358][ T1861] netlink: 'syz.4.8760': attribute type 6 has an invalid length.
[  637.781383][ T1863] tipc: Resetting bearer <eth:syzkaller0>
[  637.789040][ T1862] tipc: Resetting bearer <eth:syzkaller0>
[  637.816873][ T1862] tipc: Disabling bearer <eth:syzkaller0>
[  637.895130][ T1873] loop7: detected capacity change from 0 to 128
[  637.996365][   T29] kauditd_printk_skb: 51 callbacks suppressed
[  637.996383][   T29] audit: type=1326 audit(2000524800.400:53180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.028876][   T29] audit: type=1326 audit(2000524800.432:53181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.035304][ T1876] lo speed is unknown, defaulting to 1000
[  638.054137][   T29] audit: type=1326 audit(2000524800.432:53182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.083133][   T29] audit: type=1326 audit(2000524800.432:53183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.086111][ T1884] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8764'.
[  638.108977][ T1876] dummy0 speed is unknown, defaulting to 1000
[  638.170988][   T29] audit: type=1326 audit(2000524800.529:53184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.196023][   T29] audit: type=1326 audit(2000524800.529:53185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.220850][   T29] audit: type=1326 audit(2000524800.529:53186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.7.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e9a9 code=0x7ffc0000
[  638.235081][ T1876] lo speed is unknown, defaulting to 1000
[  638.573543][ T1927] lo speed is unknown, defaulting to 1000
[  638.579935][ T1927] dummy0 speed is unknown, defaulting to 1000
[  638.640737][ T1927] lo speed is unknown, defaulting to 1000
[  638.749934][ T1928] lo speed is unknown, defaulting to 1000
[  638.756352][ T1928] dummy0 speed is unknown, defaulting to 1000
[  638.813313][ T1928] lo speed is unknown, defaulting to 1000
[  638.963984][   T29] audit: type=1326 audit(2000524800.949:53187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1925 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  638.987549][   T29] audit: type=1326 audit(2000524800.949:53188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1925 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  639.011245][   T29] audit: type=1326 audit(2000524800.949:53189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1925 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  639.270858][ T1989] loop4: detected capacity change from 0 to 164
[  639.281743][ T1989] rock: directory entry would overflow storage
[  639.288115][ T1989] rock: sig=0x4543, size=28, remaining=18
[  640.035045][ T2013] loop5: detected capacity change from 0 to 512
[  640.042454][ T2013] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  640.051384][ T2013] EXT4-fs (loop5): orphan cleanup on readonly fs
[  640.064765][ T2013] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.8781: bad orphan inode 15
[  640.076668][ T2013] ext4_test_bit(bit=14, block=18) = 1
[  640.082092][ T2013] is_bad_inode(inode)=0
[  640.087632][ T2013] NEXT_ORPHAN(inode)=1023
[  640.091983][ T2013] max_ino=32
[  640.095247][ T2013] i_nlink=0
[  640.099469][ T2013] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.8781: corrupted xattr block 19: e_value size too large
[  640.116102][ T2013] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  640.125600][ T2013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  640.627926][ T2041] loop4: detected capacity change from 0 to 8192
[  640.638669][ T2041] syz.4.8789: attempt to access beyond end of device
[  640.638669][ T2041] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  640.653545][ T2041] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  640.661391][ T2041] FAT-fs (loop4): Filesystem has been set read-only
[  640.668472][ T2041] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  640.677639][ T2041] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  640.689768][ T2041] netlink: 'syz.4.8789': attribute type 4 has an invalid length.
[  640.914074][ T2050] lo speed is unknown, defaulting to 1000
[  640.920247][ T2050] dummy0 speed is unknown, defaulting to 1000
[  640.957555][ T2050] lo speed is unknown, defaulting to 1000
[  641.079344][ T2050] loop4: detected capacity change from 0 to 1024
[  641.086115][ T2050] EXT4-fs: Ignoring removed orlov option
[  641.091866][ T2050] EXT4-fs: Ignoring removed nomblk_io_submit option
[  641.158512][ T2050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.171490][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.196032][ T2084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  641.203431][ T2084] syzkaller0: entered promiscuous mode
[  641.208971][ T2084] syzkaller0: entered allmulticast mode
[  641.218670][ T2084] tipc: Resetting bearer <eth:syzkaller0>
[  641.226041][ T2083] tipc: Resetting bearer <eth:syzkaller0>
[  641.234612][ T2083] tipc: Disabling bearer <eth:syzkaller0>
[  641.305753][ T2080] sit0: entered allmulticast mode
[  641.369748][ T2079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.392286][ T2079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.429804][ T2102] __nla_validate_parse: 2 callbacks suppressed
[  641.429819][ T2102] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8796'.
[  641.445279][ T2100] xt_CT: No such helper "pptp"
[  641.450285][ T2102] C: renamed from team_slave_0
[  641.558709][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.585714][ T2110] geneve1: left promiscuous mode
[  641.593749][ T2110] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  641.602295][ T2110] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  641.610770][ T2110] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  641.619310][ T2110] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  641.652716][ T2110] team0: Port device geneve1 removed
[  642.080485][ T2134] loop5: detected capacity change from 0 to 764
[  642.159108][ T2143] Symlink component flag not implemented
[  642.164814][ T2143] Symlink component flag not implemented
[  642.187525][ T2143] Symlink component flag not implemented (129)
[  642.193747][ T2143] Symlink component flag not implemented (6)
[  642.342538][ T2150] netlink: 'syz.7.8811': attribute type 4 has an invalid length.
[  642.540985][ T2163] loop7: detected capacity change from 0 to 2048
[  642.581952][ T2163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  642.638273][ T2170] lo speed is unknown, defaulting to 1000
[  642.662753][ T2170] dummy0 speed is unknown, defaulting to 1000
[  642.706808][ T2172] lo speed is unknown, defaulting to 1000
[  642.754279][ T2172] dummy0 speed is unknown, defaulting to 1000
[  642.824938][ T2172] lo speed is unknown, defaulting to 1000
[  642.996529][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.090642][   T29] kauditd_printk_skb: 332 callbacks suppressed
[  643.090662][   T29] audit: type=1400 audit(2000524805.876:53522): avc:  denied  { write } for  pid=2198 comm="syz.5.8818" name="file0" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  643.119764][ T2170] lo speed is unknown, defaulting to 1000
[  643.146101][ T2203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.154835][ T2203] syzkaller0: entered promiscuous mode
[  643.156998][   T29] audit: type=1400 audit(2000524805.876:53523): avc:  denied  { open } for  pid=2198 comm="syz.5.8818" path="/377/file0" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  643.160385][ T2203] syzkaller0: entered allmulticast mode
[  643.183256][   T29] audit: type=1400 audit(2000524805.876:53524): avc:  denied  { ioctl } for  pid=2198 comm="syz.5.8818" path="/377/file0" dev="tmpfs" ino=1981 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  643.334310][ T2227] hub 9-0:1.0: USB hub found
[  643.339030][ T2227] hub 9-0:1.0: 8 ports detected
[  643.419503][ T2203] tipc: Resetting bearer <eth:syzkaller0>
[  643.427867][ T2202] tipc: Resetting bearer <eth:syzkaller0>
[  643.452630][ T2202] tipc: Disabling bearer <eth:syzkaller0>
[  643.506923][   T29] audit: type=1326 audit(2000524806.317:53525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.531858][   T29] audit: type=1326 audit(2000524806.317:53526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.556938][   T29] audit: type=1326 audit(2000524806.317:53527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.581764][   T29] audit: type=1326 audit(2000524806.317:53528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.605342][   T29] audit: type=1326 audit(2000524806.317:53529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.630116][   T29] audit: type=1326 audit(2000524806.317:53530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.653710][   T29] audit: type=1326 audit(2000524806.328:53531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  643.783864][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8822'.
[  643.793214][ T2244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8822'.
[  643.802617][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8822'.
[  643.855478][ T2244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8822'.
[  643.864495][ T2244] netlink: 'syz.3.8822': attribute type 6 has an invalid length.
[  643.878357][ T2252] program syz.7.8823 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  643.983630][ T2258] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8828'.
[  644.183430][ T2262] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8830'.
[  644.224647][ T2265] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8828'.
[  644.246000][ T2262] C: renamed from team_slave_0
[  644.405491][ T2268] loop4: detected capacity change from 0 to 1024
[  644.429633][ T2268] EXT4-fs: Ignoring removed bh option
[  644.436884][ T2268] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  644.465802][ T2268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.495526][ T2268] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  644.518560][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.557334][ T2281] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8835'.
[  644.695760][ T2288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  644.704017][ T2289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8839'.
[  644.713182][ T2289] netlink: 'syz.1.8839': attribute type 6 has an invalid length.
[  644.723974][ T2288] syzkaller0: entered promiscuous mode
[  644.729631][ T2288] syzkaller0: entered allmulticast mode
[  644.761698][ T2288] tipc: Resetting bearer <eth:syzkaller0>
[  644.790587][ T2286] tipc: Resetting bearer <eth:syzkaller0>
[  644.819692][ T2286] tipc: Disabling bearer <eth:syzkaller0>
[  644.933197][ T2279] loop4: detected capacity change from 0 to 512
[  644.942523][ T2279] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  644.971408][ T2318] netlink: 'syz.5.8845': attribute type 10 has an invalid length.
[  644.981837][ T2318] dummy0: entered promiscuous mode
[  644.987219][ T2318] dummy0: entered allmulticast mode
[  644.992891][ T2318] team0: Port device dummy0 added
[  645.004743][ T2318] futex_wake_op: syz.5.8845 tries to shift op by -1; fix this program
[  645.017080][ T2318] netlink: 'syz.5.8845': attribute type 10 has an invalid length.
[  645.026500][ T2318] dummy0: left promiscuous mode
[  645.031688][ T2318] dummy0: left allmulticast mode
[  645.038058][ T2318] team0: Port device dummy0 removed
[  645.096420][ T2318] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  645.114606][ T2329] xt_TPROXY: Can be used only with -p tcp or -p udp
[  645.777031][ T2345] netlink: 'syz.7.8851': attribute type 6 has an invalid length.
[  645.808657][ T2346] loop4: detected capacity change from 0 to 1024
[  645.823304][ T2349] loop7: detected capacity change from 0 to 764
[  645.832529][ T2349] rock: directory entry would overflow storage
[  645.838718][ T2349] rock: sig=0x4654, size=5, remaining=4
[  645.848164][ T2346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.869085][ T2349] rock: directory entry would overflow storage
[  645.869342][ T2356] block device autoloading is deprecated and will be removed.
[  645.875366][ T2349] rock: sig=0x4f50, size=4, remaining=3
[  645.888502][ T2349] iso9660: Corrupted directory entry in block 4 of inode 1792
[  645.944905][ T2346] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.8855: Allocating blocks 449-513 which overlap fs metadata
[  645.964343][ T2341] EXT4-fs (loop4): pa ffff888106ab9c40: logic 48, phys. 177, len 21
[  645.973735][ T2341] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  646.013001][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.152595][ T2376] loop4: detected capacity change from 0 to 512
[  646.166992][ T2376] EXT4-fs (loop4): orphan cleanup on readonly fs
[  646.208099][ T2376] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.8862: bad orphan inode 13
[  646.223220][ T2376] ext4_test_bit(bit=12, block=18) = 1
[  646.228645][ T2376] is_bad_inode(inode)=0
[  646.234255][ T2376] NEXT_ORPHAN(inode)=2130706432
[  646.239128][ T2376] max_ino=32
[  646.242368][ T2376] i_nlink=1
[  646.246736][ T2376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  646.320771][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.647167][ T2395] __nla_validate_parse: 10 callbacks suppressed
[  646.647185][ T2395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8865'.
[  646.671472][ T2395] random: crng reseeded on system resumption
[  646.744850][ T2402] loop7: detected capacity change from 0 to 128
[  646.766210][ T2402] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  646.813985][ T2402] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  646.900210][ T2400] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  646.911771][ T2413] netlink: 'syz.3.8870': attribute type 39 has an invalid length.
[  647.019162][T32325] lo speed is unknown, defaulting to 1000
[  647.025110][T32325] s
z1: Port: 1 Link DOWN
[  647.047633][ T2409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.056621][T32327] lo speed is unknown, defaulting to 1000
[  647.057335][ T2409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.115723][ T2428] loop5: detected capacity change from 0 to 1024
[  647.123474][ T2428] EXT4-fs: Ignoring removed orlov option
[  647.126169][ T2424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8873'.
[  647.144451][ T2428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.258741][ T2436] netlink: 'syz.4.8875': attribute type 10 has an invalid length.
[  647.268481][ T2436] netlink: 'syz.4.8875': attribute type 10 has an invalid length.
[  647.369881][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.423358][ T2447] loop5: detected capacity change from 0 to 1024
[  647.430510][ T2447] ext4: Unknown parameter 'uid<00000000000000000000'
[  647.490866][ T2459] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8882'.
[  647.501410][ T2459] C: renamed from team_slave_0
[  647.502890][T31145] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  647.585937][ T2466] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  647.706998][ T2469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8883'.
[  648.078071][ T2474] loop4: detected capacity change from 0 to 2048
[  648.097397][ T2475] lo speed is unknown, defaulting to 1000
[  648.103703][ T2475] dummy0 speed is unknown, defaulting to 1000
[  648.143749][ T2475] lo speed is unknown, defaulting to 1000
[  648.233353][ T2474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  648.263577][ T2474] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  648.280866][ T2474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  648.293206][ T2474] EXT4-fs (loop4): This should not happen!! Data will be lost
[  648.293206][ T2474] 
[  648.302901][ T2474] EXT4-fs (loop4): Total free blocks count 0
[  648.308894][ T2474] EXT4-fs (loop4): Free/Dirty block details
[  648.316279][ T2474] EXT4-fs (loop4): free_blocks=2415919104
[  648.322074][ T2474] EXT4-fs (loop4): dirty_blocks=16
[  648.327208][ T2474] EXT4-fs (loop4): Block reservation details
[  648.333322][ T2474] EXT4-fs (loop4): i_reserved_data_blocks=1
[  648.346683][ T2507] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  648.373343][ T2506] netlink: 14 bytes leftover after parsing attributes in process `+}[@'.
[  648.383548][ T2506] hsr_slave_0: left promiscuous mode
[  648.492578][ T2516] loop4: detected capacity change from 0 to 8192
[  648.522689][ T2518] loop5: detected capacity change from 0 to 2048
[  648.531418][ T2518] EXT4-fs: Ignoring removed nobh option
[  648.548845][ T2518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  648.566446][ T2526] loop4: detected capacity change from 0 to 512
[  648.584383][ T2526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.610542][ T2526] ext4 filesystem being mounted at /1776/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  648.658865][   T29] kauditd_printk_skb: 208 callbacks suppressed
[  648.658883][   T29] audit: type=1400 audit(2000524811.867:53740): avc:  denied  { getopt } for  pid=2530 comm="syz.1.8892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  648.688751][ T2531] SELinux:  policydb version 0 does not match my version range 15-35
[  648.715582][ T2531] SELinux: failed to load policy
[  648.754016][ T2526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8891'.
[  648.802305][   T29] audit: type=1326 audit(2000524812.018:53741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.825902][   T29] audit: type=1326 audit(2000524812.018:53742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.850336][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.861857][   T29] audit: type=1326 audit(2000524812.082:53743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.866622][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.885470][   T29] audit: type=1326 audit(2000524812.082:53744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.917871][   T29] audit: type=1326 audit(2000524812.082:53745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.948499][   T29] audit: type=1326 audit(2000524812.168:53746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.972165][   T29] audit: type=1326 audit(2000524812.168:53747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  648.995780][   T29] audit: type=1326 audit(2000524812.168:53748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  649.019398][   T29] audit: type=1326 audit(2000524812.179:53749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98587dab89 code=0x7ffc0000
[  649.128376][ T2543] lo speed is unknown, defaulting to 1000
[  649.134763][ T2543] dummy0 speed is unknown, defaulting to 1000
[  649.167718][ T2554] loop5: detected capacity change from 0 to 512
[  649.179847][ T2554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  649.200646][ T2543] lo speed is unknown, defaulting to 1000
[  649.221199][ T2554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.236692][ T2554] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  649.332077][ T2554] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.8894: corrupted xattr block 19: overlapping e_value 
[  649.362724][ T2554] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  649.422067][ T2554] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.8894: corrupted xattr block 19: overlapping e_value 
[  649.448563][ T2554] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  649.467242][ T2584] netlink: 'syz.4.8898': attribute type 10 has an invalid length.
[  649.488287][ T2554] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.8894: corrupted xattr block 19: overlapping e_value 
[  649.549486][ T2618] xt_CT: You must specify a L4 protocol and not use inversions on it
[  649.559266][ T2618] 9pnet_fd: Insufficient options for proto=fd
[  649.606969][ T2622] loop4: detected capacity change from 0 to 2048
[  649.616307][ T2622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.848533][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.992142][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.878832][ T2656] bond0: (slave dummy0): Releasing backup interface
[  651.954703][ T2658] bond2: entered promiscuous mode
[  651.961535][ T2658] bond2: entered allmulticast mode
[  652.034633][ T2658] 8021q: adding VLAN 0 to HW filter on device bond2
[  652.063074][ T2658] bond2 (unregistering): Released all slaves
[  652.094520][ T2681] team0: Mode changed to "activebackup"
[  652.104327][ T2656] tipc: Enabled bearer <eth:team0>, priority 0
[  652.112237][ T2697] vlan0: left allmulticast mode
[  652.117844][ T2697] hsr_slave_1: left allmulticast mode
[  652.156201][ T2697] vlan0: entered allmulticast mode
[  652.161422][ T2697] hsr_slave_1: entered allmulticast mode
[  652.203560][ T2697] team0: Port device vlan0 added
[  652.312998][ T2740] loop5: detected capacity change from 0 to 1764
[  652.320607][ T2740] ISOFS: Bad logical zone size 2051
[  652.378538][ T2731] loop4: detected capacity change from 0 to 8192
[  652.564634][ T2757] loop7: detected capacity change from 0 to 1024
[  652.638539][ T2738] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8913'.
[  652.652662][ T2757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.668202][ T2757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.975225][ T2766] loop5: detected capacity change from 0 to 8192
[  653.020381][ T2786] netlink: 'syz.4.8922': attribute type 10 has an invalid length.
[  653.028411][ T2786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8922'.
[  653.050732][ T2786] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  653.327831][   T29] kauditd_printk_skb: 143 callbacks suppressed
[  653.327849][   T29] audit: type=1400 audit(2000524816.889:53893): avc:  denied  { getopt } for  pid=2807 comm="syz.4.8925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  653.418675][ T2823] netem: incorrect gi model size
[  653.423757][ T2823] netem: change failed
[  653.435839][ T2823] netlink: 'syz.5.8929': attribute type 26 has an invalid length.
[  653.466911][ T2826] loop5: detected capacity change from 0 to 128
[  653.607396][   T29] audit: type=1326 audit(2000524817.190:53894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.631061][   T29] audit: type=1326 audit(2000524817.190:53895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.654627][   T29] audit: type=1326 audit(2000524817.190:53896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.678259][   T29] audit: type=1326 audit(2000524817.190:53897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.740763][   T29] audit: type=1326 audit(2000524817.190:53898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.764438][   T29] audit: type=1326 audit(2000524817.190:53899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.788102][   T29] audit: type=1326 audit(2000524817.190:53900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.811691][   T29] audit: type=1326 audit(2000524817.190:53901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.835274][   T29] audit: type=1326 audit(2000524817.190:53902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  653.875549][T32326] IPVS: starting estimator thread 0...
[  653.911804][ T2838] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  653.968304][ T2836] IPVS: using max 2208 ests per chain, 110400 per kthread
[  654.025793][ T2842] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.048707][ T2845] netlink: 'syz.7.8936': attribute type 10 has an invalid length.
[  654.056742][ T2845] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8936'.
[  654.105145][ T2842] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.175411][ T2847] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  654.196783][ T2842] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.238810][ T2855] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  654.259393][ T2842] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.329016][ T2842] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.350836][ T2842] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.376239][ T2842] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.386810][ T2878] program syz.5.8940 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  654.400501][ T2878] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  654.409918][ T2842] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.658962][ T2919] loop5: detected capacity change from 0 to 512
[  654.672264][ T2923] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8945'.
[  654.710531][ T2919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  654.724137][ T2919] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  654.753748][ T2929] lo speed is unknown, defaulting to 1000
[  654.761451][ T2929] dummy0 speed is unknown, defaulting to 1000
[  654.828339][ T2929] lo speed is unknown, defaulting to 1000
[  655.073414][ T2919] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  655.382023][ T2991] rdma_rxe: rxe_newlink: failed to add bridge0
[  655.395309][ T2991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8948'.
[  655.406523][ T2996] futex_wake_op: syz.7.8949 tries to shift op by -1; fix this program
[  655.616503][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.675129][ T3015] loop7: detected capacity change from 0 to 256
[  655.690669][ T3015] FAT-fs (loop7): Directory bread(block 64) failed
[  655.698883][ T3015] FAT-fs (loop7): Directory bread(block 65) failed
[  655.705625][ T3015] FAT-fs (loop7): Directory bread(block 66) failed
[  655.712910][ T3015] FAT-fs (loop7): Directory bread(block 67) failed
[  655.720217][ T3015] FAT-fs (loop7): Directory bread(block 68) failed
[  655.728701][ T3015] FAT-fs (loop7): Directory bread(block 69) failed
[  655.735407][ T3015] FAT-fs (loop7): Directory bread(block 70) failed
[  655.742037][ T3015] FAT-fs (loop7): Directory bread(block 71) failed
[  655.748961][ T3015] FAT-fs (loop7): Directory bread(block 72) failed
[  655.757036][ T3015] FAT-fs (loop7): Directory bread(block 73) failed
[  656.074614][ T3035] $H�: (slave bond_slave_0): Releasing backup interface
[  656.075116][ T3035] bond_slave_0: left promiscuous mode
[  656.076172][ T3035] $H�: (slave bond_slave_1): Releasing backup interface
[  656.076571][ T3035] bond_slave_1: left promiscuous mode
[  656.077122][ T3035] tipc: Resetting bearer <eth:syzkaller0>
[  656.077287][ T3035] bond0: left allmulticast mode
[  656.077874][ T3035] bond0: left promiscuous mode
[  656.078067][ T3035] bridge0: port 1(bond0) entered disabled state
[  656.095137][ T3035] bond2: (slave veth1): Releasing active interface
[  656.252564][ T3034] loop7: detected capacity change from 0 to 512
[  656.283994][ T3034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.284142][ T3034] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  656.290273][ T3034] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  656.290342][ T3034] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  656.290411][ T3034] EXT4-fs (loop7): This should not happen!! Data will be lost
[  656.290411][ T3034] 
[  656.290424][ T3034] EXT4-fs (loop7): Total free blocks count 0
[  656.290436][ T3034] EXT4-fs (loop7): Free/Dirty block details
[  656.290447][ T3034] EXT4-fs (loop7): free_blocks=65280
[  656.290478][ T3034] EXT4-fs (loop7): dirty_blocks=33
[  656.290490][ T3034] EXT4-fs (loop7): Block reservation details
[  656.290500][ T3034] EXT4-fs (loop7): i_reserved_data_blocks=33
[  656.522146][ T3047] loop5: detected capacity change from 0 to 764
[  656.546651][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.614341][ T3054] loop7: detected capacity change from 0 to 512
[  656.625960][ T3054] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  656.639026][ T3054] loop7: detected capacity change from 0 to 128
[  656.668789][ T3054] syz.7.8959: attempt to access beyond end of device
[  656.668789][ T3054] loop7: rw=0, sector=121, nr_sectors = 120 limit=128
[  656.734686][   T12] kworker/u8:0: attempt to access beyond end of device
[  656.734686][   T12] loop7: rw=1, sector=241, nr_sectors = 800 limit=128
[  656.968386][ T3069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.992865][ T3069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.041262][ T3069] loop7: detected capacity change from 0 to 8192
[  657.524768][ T3107] tipc: Resetting bearer <eth:syzkaller0>
[  657.584625][ T3113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.602778][ T3113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.623127][ T3122] netem: incorrect gi model size
[  657.628192][ T3122] netem: change failed
[  657.639795][ T3122] netlink: 'syz.7.8972': attribute type 26 has an invalid length.
[  657.652446][ T3107] vlan0: entered promiscuous mode
[  657.660029][ T3107] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  657.732671][ T3129] hub 9-0:1.0: USB hub found
[  657.737639][ T3129] hub 9-0:1.0: 8 ports detected
[  657.778100][ T3128] loop7: detected capacity change from 0 to 8192
[  657.861910][ T3133] netlink: 'syz.3.8975': attribute type 39 has an invalid length.
[  658.053164][ T3145] lo speed is unknown, defaulting to 1000
[  658.061547][ T3145] dummy0 speed is unknown, defaulting to 1000
[  658.148035][ T3145] lo speed is unknown, defaulting to 1000
[  658.667483][   T29] kauditd_printk_skb: 526 callbacks suppressed
[  658.667501][   T29] audit: type=1326 audit(2000524822.620:54429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.713718][ T3188] pim6reg: entered allmulticast mode
[  658.761486][   T29] audit: type=1326 audit(2000524822.620:54430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.785214][   T29] audit: type=1326 audit(2000524822.620:54431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.808869][   T29] audit: type=1326 audit(2000524822.620:54432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.832637][   T29] audit: type=1326 audit(2000524822.620:54433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.856349][   T29] audit: type=1326 audit(2000524822.620:54434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.880186][   T29] audit: type=1326 audit(2000524822.620:54435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.903772][   T29] audit: type=1326 audit(2000524822.620:54436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.927383][   T29] audit: type=1326 audit(2000524822.620:54437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.950993][   T29] audit: type=1326 audit(2000524822.620:54438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.4.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  658.975568][ T3199] netlink: 'syz.7.8984': attribute type 10 has an invalid length.
[  659.012017][ T3199] team0 (unregistering): Port device team_slave_0 removed
[  659.027548][ T3199] team0 (unregistering): Port device team_slave_1 removed
[  659.036325][ T3199] team0 (unregistering): Port device geneve1 removed
[  659.074911][ T3202] pim6reg: entered allmulticast mode
[  659.082711][ T3203] pim6reg: left allmulticast mode
[  659.203795][ T3252] netlink: 'syz.1.8999': attribute type 10 has an invalid length.
[  659.239578][ T3254] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  659.292199][ T3256] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8988'.
[  659.551281][ T3270] loop5: detected capacity change from 0 to 1024
[  659.598293][ T3270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.720706][ T3293] xt_connbytes: Forcing CT accounting to be enabled
[  659.729669][ T3293] set match dimension is over the limit!
[  659.742665][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.764157][ T3293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3293 comm=syz.4.9000
[  659.776789][ T3293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3293 comm=syz.4.9000
[  659.814282][ T3304] netlink: 'syz.5.9001': attribute type 10 has an invalid length.
[  659.838387][ T3304] tipc: Disabling bearer <eth:team0>
[  659.847586][ T3304] vlan0: left allmulticast mode
[  659.852523][ T3304] hsr_slave_1: left allmulticast mode
[  659.862098][ T3304] team0 (unregistering): Port device vlan0 removed
[  659.915052][ T3284] lo speed is unknown, defaulting to 1000
[  659.933391][ T3284] dummy0 speed is unknown, defaulting to 1000
[  660.007848][ T3345] loop5: detected capacity change from 0 to 512
[  660.034998][ T3345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  660.048301][ T3345] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  660.090434][ T3345] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9005: Failed to acquire dquot type 0
[  660.154826][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.200210][ T3357] random: crng reseeded on system resumption
[  660.305991][ T3358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9004'.
[  660.463611][ T3284] lo speed is unknown, defaulting to 1000
[  660.989961][ T3388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.018388][ T3388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  661.123107][ T3388] loop4: detected capacity change from 0 to 8192
[  661.201822][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.209253][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.302042][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.506712][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.771795][ T3423] loop4: detected capacity change from 0 to 512
[  661.809707][ T3423] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.9014: iget: bad extended attribute block 1
[  661.867996][ T3423] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.9014: couldn't read orphan inode 15 (err -117)
[  661.911491][ T3402] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.920739][ T3402] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.929190][ T3402] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.932011][ T3423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  661.937572][ T3402] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  662.010950][ T3423] xt_CT: You must specify a L4 protocol and not use inversions on it
[  662.085365][ T3429] veth0_to_team: entered promiscuous mode
[  662.091222][ T3429] veth0_to_team: entered allmulticast mode
[  662.091649][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.126903][ T3432] bond1: entered promiscuous mode
[  662.132029][ T3432] bond1: entered allmulticast mode
[  662.138280][ T3432] 8021q: adding VLAN 0 to HW filter on device bond1
[  662.156879][ T3432] bond1 (unregistering): Released all slaves
[  662.185948][ T3470] loop9: detected capacity change from 0 to 7
[  662.205656][ T3470] Buffer I/O error on dev loop9, logical block 0, async page read
[  662.214987][ T3470] Buffer I/O error on dev loop9, logical block 0, async page read
[  662.223529][ T3470]  loop9: unable to read partition table
[  662.230393][ T3470] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  662.230393][ T3470] 
) failed (rc=-5)
[  662.351409][ T3507] SELinux: failed to load policy
[  662.368832][ T3528] loop5: detected capacity change from 0 to 512
[  662.383539][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9019'.
[  662.400071][ T3528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  662.432010][ T3528] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  662.447648][ T3538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9023'.
[  662.500627][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.514120][ T3544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9025'.
[  662.656159][ T3550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9027'.
[  662.665264][ T3550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9027'.
[  662.686422][ T3550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9027'.
[  662.695473][ T3550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9027'.
[  662.738622][ T3550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9027'.
[  662.789124][ T3559] rdma_rxe: rxe_newlink: failed to add bridge0
[  663.162920][ T3573] lo speed is unknown, defaulting to 1000
[  663.169663][ T3573] dummy0 speed is unknown, defaulting to 1000
[  663.246584][ T3573] lo speed is unknown, defaulting to 1000
[  663.636772][   T29] kauditd_printk_skb: 328 callbacks suppressed
[  663.636789][   T29] audit: type=1400 audit(2000524827.962:54765): avc:  denied  { connect } for  pid=3596 comm="syz.7.9032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  663.688151][ T3599] bond2: entered promiscuous mode
[  663.693325][ T3599] bond2: entered allmulticast mode
[  663.700470][ T3599] 8021q: adding VLAN 0 to HW filter on device bond2
[  663.709849][ T3599] bond2 (unregistering): Released all slaves
[  663.737415][ T3668] loop9: detected capacity change from 0 to 7
[  663.760171][ T3668] Buffer I/O error on dev loop9, logical block 0, async page read
[  663.795014][ T3668] Buffer I/O error on dev loop9, logical block 0, async page read
[  663.803031][ T3668]  loop9: unable to read partition table
[  663.809733][ T3668] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  663.809733][ T3668] 
) failed (rc=-5)
[  663.824804][   T29] audit: type=1326 audit(2000524828.167:54766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  663.849485][ T3673] sd 0:0:1:0: device reset
[  663.874546][   T29] audit: type=1326 audit(2000524828.199:54767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985883d310 code=0x7ffc0000
[  663.898175][   T29] audit: type=1326 audit(2000524828.199:54768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  663.921748][   T29] audit: type=1326 audit(2000524828.199:54769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  663.945288][   T29] audit: type=1326 audit(2000524828.210:54770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  663.968889][   T29] audit: type=1326 audit(2000524828.210:54771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  663.992484][   T29] audit: type=1326 audit(2000524828.210:54772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  664.016004][   T29] audit: type=1326 audit(2000524828.210:54773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  664.039624][   T29] audit: type=1326 audit(2000524828.210:54774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.1.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  664.068221][ T3673] lo speed is unknown, defaulting to 1000
[  664.075876][ T3673] dummy0 speed is unknown, defaulting to 1000
[  664.166815][ T3689] loop4: detected capacity change from 0 to 512
[  664.174105][ T3689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  664.188840][ T3692] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  664.191381][ T3684] __nla_validate_parse: 5 callbacks suppressed
[  664.191489][ T3684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9047'.
[  664.206501][ T3673] lo speed is unknown, defaulting to 1000
[  664.259764][ T3689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  664.273326][ T3689] ext4 filesystem being mounted at /1802/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  664.288369][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9040'.
[  664.310968][ T3689] lo speed is unknown, defaulting to 1000
[  664.317237][ T3689] dummy0 speed is unknown, defaulting to 1000
[  664.344438][ T3753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9039'.
[  664.419032][ T3689] lo speed is unknown, defaulting to 1000
[  664.486045][ T3758] xt_hashlimit: size too large, truncated to 1048576
[  664.908143][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.052533][ T3793] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  665.068466][ T3793] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  665.210997][ T3806] lo speed is unknown, defaulting to 1000
[  665.217697][ T3806] dummy0 speed is unknown, defaulting to 1000
[  665.277999][ T3806] lo speed is unknown, defaulting to 1000
[  665.673619][ T3809] loop4: detected capacity change from 0 to 8192
[  665.870646][ T3843] loop5: detected capacity change from 0 to 512
[  665.880841][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  665.896061][ T3843] EXT4-fs: Ignoring removed bh option
[  665.908115][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  665.929033][ T3843] EXT4-fs: Mount option(s) incompatible with ext3
[  666.027383][ T3849] netlink: 16278 bytes leftover after parsing attributes in process `syz.5.9054'.
[  666.093700][ T3849] loop5: detected capacity change from 0 to 1024
[  666.138581][ T3849] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  666.150324][ T3849] EXT4-fs (loop5): group descriptors corrupted!
[  666.206064][ T3863] random: crng reseeded on system resumption
[  666.219099][ T3849] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  666.326270][ T3858] s
z1: rxe_newlink: already configured on lo
[  666.339296][ T3865] loop7: detected capacity change from 0 to 8192
[  666.369487][ T3872] loop5: detected capacity change from 0 to 2048
[  666.376825][ T3865] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  666.385449][ T3865] FAT-fs (loop7): Filesystem has been set read-only
[  666.394516][ T3872] EXT4-fs: Ignoring removed mblk_io_submit option
[  666.411543][ T3872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  666.417514][ T3865] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9058'.
[  666.504352][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9059'.
[  666.702357][ T3885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9061'.
[  666.736541][ T3885] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9061'.
[  666.767363][T32281] IPVS: starting estimator thread 0...
[  666.805776][ T3885] netlink: zone id is out of range
[  666.833302][ T3898] loop4: detected capacity change from 0 to 512
[  666.841770][ T3900] futex_wake_op: syz.1.9063 tries to shift op by -1; fix this program
[  666.851438][ T3897] IPVS: using max 2256 ests per chain, 112800 per kthread
[  666.861288][ T3898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  666.870725][ T3885] netlink: zone id is out of range
[  666.876850][ T3885] netlink: zone id is out of range
[  666.900710][ T3898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.915246][ T3885] netlink: zone id is out of range
[  666.920443][ T3885] netlink: zone id is out of range
[  666.926252][ T3885] netlink: zone id is out of range
[  666.931406][ T3885] netlink: zone id is out of range
[  666.937203][ T3885] netlink: zone id is out of range
[  666.942323][ T3885] netlink: zone id is out of range
[  666.947533][ T3885] netlink: zone id is out of range
[  666.991938][ T3898] ext4 filesystem being mounted at /1808/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  667.068019][ T3898] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.9062: corrupted xattr block 19: overlapping e_value 
[  667.090976][ T3906] Cannot find set identified by id 0 to match
[  667.107470][ T3906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3906 comm=syz.1.9064
[  667.120001][ T3906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3906 comm=syz.1.9064
[  667.140421][ T3898] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  667.161816][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.171233][ T3898] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.9062: corrupted xattr block 19: overlapping e_value 
[  667.186118][ T3898] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  667.202934][ T3898] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.9062: corrupted xattr block 19: overlapping e_value 
[  667.229118][ T3911] set match dimension is over the limit!
[  667.245472][ T3911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3911 comm=syz.5.9075
[  667.258117][ T3911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3911 comm=syz.5.9075
[  667.273405][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9065'.
[  667.485912][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.653469][ T3934] loop5: detected capacity change from 0 to 8192
[  667.745330][ T3934] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  667.753998][ T3934] FAT-fs (loop5): Filesystem has been set read-only
[  667.794427][T32300] kernel write not supported for file /462/attr/exec (pid: 32300 comm: kworker/0:13)
[  667.827555][ T3934] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9071'.
[  667.923023][ T3955] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  668.025535][ T3987] bond_slave_1: entered promiscuous mode
[  668.089931][ T3955] bond_slave_1 (unregistering): left promiscuous mode
[  668.090025][ T3994] loop7: detected capacity change from 0 to 128
[  668.154716][ T3994] FAT-fs (loop7): Directory bread(block 162) failed
[  668.161390][ T3994] FAT-fs (loop7): Directory bread(block 163) failed
[  668.199777][ T3994] FAT-fs (loop7): Directory bread(block 164) failed
[  668.206870][ T3994] FAT-fs (loop7): Directory bread(block 165) failed
[  668.232921][ T3994] FAT-fs (loop7): Directory bread(block 166) failed
[  668.385198][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  668.385217][   T29] audit: type=1326 audit(2000524833.046:54955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.415138][   T29] audit: type=1326 audit(2000524833.046:54956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.438877][   T29] audit: type=1326 audit(2000524833.046:54957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.462472][   T29] audit: type=1326 audit(2000524833.046:54958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.486082][   T29] audit: type=1326 audit(2000524833.046:54959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.509818][   T29] audit: type=1326 audit(2000524833.046:54960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.533354][   T29] audit: type=1326 audit(2000524833.046:54961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.556967][   T29] audit: type=1326 audit(2000524833.046:54962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.580566][   T29] audit: type=1326 audit(2000524833.046:54963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.604087][   T29] audit: type=1326 audit(2000524833.046:54964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.3.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f448f2ae9a9 code=0x7ffc0000
[  668.605016][ T3994] FAT-fs (loop7): Directory bread(block 167) failed
[  668.664942][ T3994] FAT-fs (loop7): Directory bread(block 168) failed
[  668.672939][ T4004] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  668.681006][ T3994] FAT-fs (loop7): Directory bread(block 169) failed
[  668.715567][ T3994] FAT-fs (loop7): Directory bread(block 162) failed
[  668.722514][ T3994] FAT-fs (loop7): Directory bread(block 163) failed
[  668.730507][ T3994] syz.7.9077: attempt to access beyond end of device
[  668.730507][ T3994] loop7: rw=3, sector=226, nr_sectors = 6 limit=128
[  668.764747][ T3994] syz.7.9077: attempt to access beyond end of device
[  668.764747][ T3994] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128
[  668.962527][ T4008] loop4: detected capacity change from 0 to 512
[  668.969326][ T4008] EXT4-fs: Ignoring removed mblk_io_submit option
[  668.988428][ T4008] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  669.032940][ T4019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.050067][ T4019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.067824][ T4008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[  669.083206][ T4008] System zones: 1-12
[  669.101978][ T4008] EXT4-fs (loop4): 1 truncate cleaned up
[  669.125980][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.251369][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.411139][ T4028] __nla_validate_parse: 8 callbacks suppressed
[  669.411159][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9082'.
[  669.537023][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9083'.
[  669.714571][ T4038] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9087'.
[  669.772204][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9098'.
[  669.952180][ T4049] loop4: detected capacity change from 0 to 2048
[  669.976633][ T4049] EXT4-fs: Ignoring removed mblk_io_submit option
[  670.070670][ T4049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  670.192847][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9090'.
[  670.269165][ T4060] lo speed is unknown, defaulting to 1000
[  670.276996][ T4060] dummy0 speed is unknown, defaulting to 1000
[  670.401741][ T4060] lo speed is unknown, defaulting to 1000
[  670.698168][ T4083] syzkaller0: entered allmulticast mode
[  670.716359][ T4083] syzkaller0: entered promiscuous mode
[  670.801434][ T4091] random: crng reseeded on system resumption
[  670.835446][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.851203][ T4083] Restarting kernel threads ...
[  670.863563][ T4083] Done restarting kernel threads.
[  670.871772][ T4093] bond1: entered promiscuous mode
[  670.876869][ T4093] bond1: entered allmulticast mode
[  670.883043][ T4093] 8021q: adding VLAN 0 to HW filter on device bond1
[  670.893823][ T4093] bond1 (unregistering): Released all slaves
[  670.909650][ T4131] loop9: detected capacity change from 0 to 7
[  670.924427][ T4083] syzkaller0 (unregistering): left allmulticast mode
[  670.931217][ T4083] syzkaller0 (unregistering): left promiscuous mode
[  670.939064][ T4169] loop4: detected capacity change from 0 to 128
[  670.939130][ T4131] Buffer I/O error on dev loop9, logical block 0, async page read
[  670.953819][ T4131] Buffer I/O error on dev loop9, logical block 0, async page read
[  670.955539][ T4169] EXT4-fs: Ignoring removed nobh option
[  670.961673][ T4131]  loop9: unable to read partition table
[  670.975005][ T4131] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  670.975005][ T4131] 
) failed (rc=-5)
[  671.003537][ T4169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  671.058105][ T4169] ext4 filesystem being mounted at /1813/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  671.119061][ T4169] tipc: Resetting bearer <eth:syzkaller0>
[  671.718613][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  671.806003][ T4196] pim6reg: entered allmulticast mode
[  671.873140][ T4202] tipc: Resetting bearer <eth:syzkaller0>
[  671.886010][ T4187] pim6reg: left allmulticast mode
[  671.891408][ T4198] loop4: detected capacity change from 0 to 8192
[  671.906129][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.910712][ T4198] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  671.923158][ T4198] FAT-fs (loop4): Filesystem has been set read-only
[  671.929700][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.957144][ T4198] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9099'.
[  671.969850][ T4196] loop5: detected capacity change from 0 to 512
[  671.986271][ T4196] EXT4-fs: Ignoring removed bh option
[  671.992773][ T4196] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  672.077435][ T4213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9102'.
[  672.088051][ T4213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9102'.
[  672.124026][ T4213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9102'.
[  672.133224][ T4213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9102'.
[  672.514713][ T4229] lo speed is unknown, defaulting to 1000
[  672.521179][ T4229] dummy0 speed is unknown, defaulting to 1000
[  672.595594][ T4229] lo speed is unknown, defaulting to 1000
[  673.442518][ T4266] loop5: detected capacity change from 0 to 128
[  673.479450][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  673.479468][   T29] audit: type=1400 audit(2000524838.549:54984): avc:  denied  { write } for  pid=4263 comm="syz.4.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  673.528320][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.539828][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.550393][ T4275] loop7: detected capacity change from 0 to 2048
[  673.559913][ T4278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.579154][ T4278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.642494][ T4275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  673.669605][ T4275] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:169: inode #12: comm syz.7.9114: inline data xattr refers to an external xattr inode
[  673.724667][ T4275] EXT4-fs (loop7): Remounting filesystem read-only
[  673.769838][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.838758][   T29] audit: type=1326 audit(2000524838.936:54985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  673.907270][   T29] audit: type=1326 audit(2000524838.957:54986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  673.932370][   T29] audit: type=1326 audit(2000524838.957:54987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  673.955941][   T29] audit: type=1326 audit(2000524838.957:54988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  673.980825][   T29] audit: type=1326 audit(2000524838.957:54989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  674.004436][   T29] audit: type=1326 audit(2000524838.957:54990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  674.029418][   T29] audit: type=1326 audit(2000524839.011:54991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  674.054266][   T29] audit: type=1326 audit(2000524839.011:54992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  674.054303][   T29] audit: type=1326 audit(2000524839.011:54993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985883e9a9 code=0x7ffc0000
[  674.196088][ T4264] net_ratelimit: 21 callbacks suppressed
[  674.196175][ T4264] Set syz1 is full, maxelem 65536 reached
[  674.202231][ T4268] netlink: 'syz.3.9113': attribute type 13 has an invalid length.
[  674.216912][ T4268] __nla_validate_parse: 2 callbacks suppressed
[  674.216925][ T4268] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9113'.
[  674.241161][ T4268] erspan0: refused to change device tx_queue_len
[  674.247551][ T4268] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  674.298842][ T4300] futex_wake_op: syz.5.9116 tries to shift op by -1; fix this program
[  674.327717][ T4302] futex_wake_op: syz.5.9117 tries to shift op by -1; fix this program
[  674.439811][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9119'.
[  674.448982][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9119'.
[  674.469428][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9119'.
[  674.473638][ T4311] loop5: detected capacity change from 0 to 1024
[  674.478480][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9119'.
[  674.486697][ T4311] EXT4-fs: Ignoring removed nobh option
[  674.502743][ T4311] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  674.513824][ T4311] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  674.524727][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9119'.
[  674.524733][ T4311] JBD2: no valid journal superblock found
[  674.524759][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9119'.
[  674.533812][ T4311] EXT4-fs (loop5): Could not load journal inode
[  675.014749][ T4334] lo speed is unknown, defaulting to 1000
[  675.023134][ T4334] dummy0 speed is unknown, defaulting to 1000
[  675.082445][ T4334] lo speed is unknown, defaulting to 1000
[  675.321974][ T4357] tipc: Resetting bearer <eth:syzkaller0>
[  675.404289][ T4326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.452911][ T4326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  675.848151][ T4363] loop5: detected capacity change from 0 to 128
[  675.939027][ T4377] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9126'.
[  675.970672][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9126'.
[  676.277374][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9135'.
[  676.923486][ T4421] loop5: detected capacity change from 0 to 512
[  676.993602][ T4421] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.9137: bad orphan inode 13
[  677.024747][ T4421] ext4_test_bit(bit=12, block=4) = 1
[  677.030140][ T4421] is_bad_inode(inode)=0
[  677.034335][ T4421] NEXT_ORPHAN(inode)=0
[  677.038488][ T4421] max_ino=32
[  677.041745][ T4421] i_nlink=1
[  677.045754][ T4421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  677.109278][ T4421] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.9137: Unrecognised inode hash code 20
[  677.120782][ T4421] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.9137: Corrupt directory, running e2fsck is recommended
[  677.134026][ T4421] EXT4-fs error (device loop5): ext4_iget_extra_inode:5030: inode #15: comm syz.5.9137: corrupted in-inode xattr: e_value out of bounds
[  677.136529][ T4433] cgroup: No subsys list or none specified
[  677.152380][ T4434] futex_wake_op: syz.4.9139 tries to shift op by -1; fix this program
[  677.181859][ T4421] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.9137: Unrecognised inode hash code 20
[  677.193351][ T4421] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.9137: Corrupt directory, running e2fsck is recommended
[  677.417325][ T4452] SET target dimension over the limit!
[  677.555603][ T4459] lo speed is unknown, defaulting to 1000
[  677.562334][ T4459] dummy0 speed is unknown, defaulting to 1000
[  677.621962][ T4459] lo speed is unknown, defaulting to 1000
[  677.919011][ T4483] netlink: 'syz.1.9147': attribute type 10 has an invalid length.
[  677.942785][T23896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.449213][ T4524] IPVS: Error connecting to the multicast addr
[  679.372759][ T4533] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  680.113288][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.206253][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.921817][ T4555] netlink: zone id is out of range
[  680.927071][ T4555] netlink: zone id is out of range
[  680.965529][ T4563] SET target dimension over the limit!
[  680.994328][ T4555] netlink: zone id is out of range
[  681.040441][ T4555] netlink: zone id is out of range
[  681.045937][ T4555] netlink: zone id is out of range
[  681.051245][ T4555] netlink: zone id is out of range
[  681.056502][ T4555] netlink: zone id is out of range
[  681.062654][ T4555] netlink: zone id is out of range
[  681.067907][ T4555] netlink: zone id is out of range
[  681.073171][ T4555] netlink: zone id is out of range
[  681.288645][ T4576] netlink: 'syz.1.9166': attribute type 4 has an invalid length.
[  681.338977][ T4579] block device autoloading is deprecated and will be removed.
[  681.351210][T32326] page_pool_release_retry() stalled pool shutdown: id 119, 51 inflight 303 sec
[  681.433302][ T4589] __nla_validate_parse: 6 callbacks suppressed
[  681.433320][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9164'.
[  681.480594][   T29] kauditd_printk_skb: 145 callbacks suppressed
[  681.480610][   T29] audit: type=1326 audit(2000524847.145:55139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.489563][ T4593] loop7: detected capacity change from 0 to 128
[  681.550569][   T29] audit: type=1326 audit(2000524847.177:55140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.574975][   T29] audit: type=1326 audit(2000524847.177:55141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.597963][   T29] audit: type=1326 audit(2000524847.177:55142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.622462][   T29] audit: type=1326 audit(2000524847.177:55143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.645568][   T29] audit: type=1326 audit(2000524847.177:55144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.670039][   T29] audit: type=1326 audit(2000524847.177:55145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.694644][   T29] audit: type=1326 audit(2000524847.177:55146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.717806][   T29] audit: type=1326 audit(2000524847.177:55147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.742263][   T29] audit: type=1326 audit(2000524847.177:55148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d667de9a9 code=0x7ffc0000
[  681.884773][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9174'.
[  681.893919][ T4607] netlink: 212 bytes leftover after parsing attributes in process `syz.5.9174'.
[  682.072186][ T4619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.096991][ T4619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.298885][ T4628] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  682.319069][ T4630] netlink: 'syz.4.9178': attribute type 4 has an invalid length.
[  682.400791][ T4639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9179'.
[  682.409959][ T4639] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9179'.
[  682.418961][ T4639] netlink: 'syz.1.9179': attribute type 5 has an invalid length.
[  682.426724][ T4639] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9179'.
[  682.439421][ T4633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9179'.
[  682.507248][ T4645] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.9182'.
[  682.539662][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.558433][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.648516][ T4650] loop7: detected capacity change from 0 to 512
[  682.694378][ T4650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.709084][ T4660] futex_wake_op: syz.3.9185 tries to shift op by -1; fix this program
[  682.727954][ T4650] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  682.850558][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.906886][ T4672] futex_wake_op: syz.3.9189 tries to shift op by -1; fix this program
[  683.049161][ T4676] netlink: 'syz.5.9192': attribute type 4 has an invalid length.
[  683.059033][ T4678] futex_wake_op: syz.3.9193 tries to shift op by -1; fix this program
[  683.195126][ T4682] lo speed is unknown, defaulting to 1000
[  683.239409][ T4682] dummy0 speed is unknown, defaulting to 1000
[  683.387774][ T4682] lo speed is unknown, defaulting to 1000
[  683.497545][ T4704] futex_wake_op: syz.4.9198 tries to shift op by -1; fix this program
[  683.536886][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.566265][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.694357][ T4735] loop7: detected capacity change from 0 to 512
[  683.709318][ T4735] EXT4-fs: Ignoring removed bh option
[  683.721528][ T4735] EXT4-fs: Mount option(s) incompatible with ext3
[  683.825114][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9197'.
[  684.116994][ T4754] futex_wake_op: syz.4.9204 tries to shift op by -1; fix this program
[  684.127902][ T4753] loop7: detected capacity change from 0 to 512
[  684.150419][ T4753] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  684.161517][ T4753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  684.170163][ T4753] EXT4-fs error (device loop7): ext4_iget_extra_inode:5030: inode #15: comm syz.7.9203: corrupted in-inode xattr: e_value size too large
[  684.223515][ T4753] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.9203: couldn't read orphan inode 15 (err -117)
[  684.248817][ T4753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  684.714161][ T4776] futex_wake_op: syz.3.9209 tries to shift op by -1; fix this program
[  684.783411][T31145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.865487][ T4783] netlink: 'syz.7.9211': attribute type 1 has an invalid length.
[  684.916897][ T4785] futex_wake_op: syz.1.9212 tries to shift op by -1; fix this program
[  684.996720][ T4786] lo speed is unknown, defaulting to 1000
[  685.003709][ T4786] dummy0 speed is unknown, defaulting to 1000
[  685.067682][ T4786] lo speed is unknown, defaulting to 1000
[  685.367168][ T4789] futex_wake_op: syz.1.9213 tries to shift op by -1; fix this program
[  685.502889][ T4823] SELinux: syz.1.9217 (4823) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  685.890912][ T4831] loop7: detected capacity change from 0 to 8192
[  686.032802][ T4834] ==================================================================
[  686.040943][ T4834] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  686.048070][ T4834] 
[  686.050422][ T4834] write to 0xffff88810aa864e0 of 2 bytes by task 4831 on cpu 1:
[  686.058071][ T4834]  fat16_ent_put+0x28/0x60
[  686.062501][ T4834]  fat_alloc_clusters+0x4d1/0xa80
[  686.067540][ T4834]  fat_get_block+0x258/0x5e0
[  686.072163][ T4834]  __block_write_begin_int+0x400/0xf90
[  686.077638][ T4834]  cont_write_begin+0x5fc/0x970
[  686.082512][ T4834]  fat_write_begin+0x4f/0xe0
[  686.087151][ T4834]  cont_write_begin+0x1b0/0x970
[  686.092021][ T4834]  fat_write_begin+0x4f/0xe0
[  686.096636][ T4834]  generic_cont_expand_simple+0xad/0x150
[  686.102288][ T4834]  fat_cont_expand+0x3e/0x170
[  686.106990][ T4834]  fat_setattr+0x2a5/0x8a0
[  686.111444][ T4834]  notify_change+0x806/0x890
[  686.116048][ T4834]  do_ftruncate+0x34b/0x450
[  686.120556][ T4834]  __x64_sys_ftruncate+0x68/0xc0
[  686.125498][ T4834]  x64_sys_call+0x2d52/0x2ff0
[  686.130185][ T4834]  do_syscall_64+0xd2/0x200
[  686.134701][ T4834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.140601][ T4834] 
[  686.142928][ T4834] read to 0xffff88810aa86400 of 512 bytes by task 4834 on cpu 0:
[  686.150647][ T4834]  fat_mirror_bhs+0x1df/0x320
[  686.155333][ T4834]  fat_alloc_clusters+0x98b/0xa80
[  686.160367][ T4834]  fat_get_block+0x258/0x5e0
[  686.164970][ T4834]  __block_write_begin_int+0x400/0xf90
[  686.170433][ T4834]  cont_write_begin+0x5fc/0x970
[  686.175311][ T4834]  fat_write_begin+0x4f/0xe0
[  686.179938][ T4834]  generic_perform_write+0x181/0x490
[  686.185267][ T4834]  __generic_file_write_iter+0x9e/0x120
[  686.190852][ T4834]  generic_file_write_iter+0x8d/0x2f0
[  686.196230][ T4834]  do_iter_readv_writev+0x41e/0x4c0
[  686.201442][ T4834]  vfs_writev+0x2df/0x8b0
[  686.205791][ T4834]  __se_sys_pwritev2+0xfc/0x1c0
[  686.210659][ T4834]  __x64_sys_pwritev2+0x67/0x80
[  686.215587][ T4834]  x64_sys_call+0x2c55/0x2ff0
[  686.220297][ T4834]  do_syscall_64+0xd2/0x200
[  686.224826][ T4834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.230738][ T4834] 
[  686.233067][ T4834] Reported by Kernel Concurrency Sanitizer on:
[  686.239240][ T4834] CPU: 0 UID: 0 PID: 4834 Comm: syz.7.9219 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) 
[  686.251326][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  686.261398][ T4834] ==================================================================