last executing test programs:

1m4.723480597s ago: executing program 2 (id=399):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x20000040)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
write(0xffffffffffffffff, &(0x7f00000009c0)=';', 0x1)

1m2.98871566s ago: executing program 2 (id=409):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x1003})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x68af, 0x10)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1m2.793423744s ago: executing program 2 (id=411):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0x4)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7dffeffc)
close(r3)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRES16=r1], 0x119)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
close(r5)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000f098945c0d02df000067d16658e5d2ddd5b1ead353af3d811e6b7638a2ab93078a0d436c3dcf0449bada333d69422c4b9aa92215593f005695626d470d5d0b4ac9f620802e431b9eab7b17e09e23f150290bf624ea1ec6c40243047ea4b5d4650f81c15e2767b1c3bdd850e2e4d0a801f213b4c6a19d80ef83beac594eec34a5ebfe3ac7c9ee20a220bd7afda4b0ce21549aab147297838b092698"], 0xeb)
close_range(r0, 0xffffffffffffffff, 0x0)

1m2.728802035s ago: executing program 2 (id=413):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003400)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4ff, &(0x7f0000002f00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='errors=remount-ro')
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x14}, 0x18)
getdents64(r3, 0x0, 0x0)

1m2.170110156s ago: executing program 2 (id=418):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
ptrace(0x10, 0x0)
ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000080))
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1118)
unshare(0x22020600)
fallocate(0xffffffffffffffff, 0x41, 0x0, 0x3fe)

1m1.994261849s ago: executing program 2 (id=421):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e)

1m1.9355399s ago: executing program 32 (id=421):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e)

5.204627991s ago: executing program 1 (id=848):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000480)=0x401)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080))
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
capset(0x0, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x7d, 0xffffffff})
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)

5.000637855s ago: executing program 0 (id=838):
socket(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
personality(0x8405426f9cfb8a42)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)

4.437072656s ago: executing program 0 (id=842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={&(0x7f0000000380)="dc031548fa881c10c51f40c0ac9945877502136fb190d85c6661dd6fee47c1b25f8670fa799fa4e2fe9d12c6e422b9f8334ddb3e5a9f2c20e2077f10a375cda7bd95dfc7e227610a9c096be3a7b793f7045ffce0a091227fd85b36ea88a6464a19107a8490bcbe4e6e7588d02990d541319fabe610ca0536da56bc81b19919e564ed84afe79d9baa4274a77e83f9ed8e20c91a1337b1c23d4ff59a700c26b5152ba9ba47072790ab670c32d5b0f62ba3526cee803555968a7e878a479a1ad64138c0276027637529503ce83fc2d89fe140e8ae866295a55ae1cfb895b271afcbe17b164c531822c6", &(0x7f00000000c0)=""/122, &(0x7f00000005c0), &(0x7f00000001c0)="97a9112449e02003d13f6667ce9560ccc6d03ad4f4b2ecc4c85843090d10d7bd81bb56e26fec60f05c6eb0104b30179f3396384015a94fb06f975dd9638ee2cf2ff6960d", 0x6}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448e3, 0x0)
r9 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=<r10=>0x0)
timer_settime(r10, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r11, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.287151358s ago: executing program 1 (id=843):
r0 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getrlimit(0x3, &(0x7f0000000300))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x33, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x7, 0x9)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb}, 0x11000)
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)

3.364735546s ago: executing program 1 (id=846):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffbffffffaaaaaab4aabb0800451000280000000000019078ac1e0101e00000012a00907800008000000000000000007f00000000"], 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000008000000000000e000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
fallocate(r2, 0x0, 0xbf5, 0x2000402)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_usbip_server_init(0x5)

3.364439576s ago: executing program 5 (id=847):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1aad67693582ffa23bc1b88ae3c49b539c193b442b", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x24008081)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0xb86, &(0x7f00000017c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x2)
rmdir(&(0x7f0000000b80)='./file0\x00')
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r2, 0x0, 0x0, 0x1001f0)
fallocate(r2, 0x8, 0x0, 0x10000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1c8f)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, 0x0, 0x404c080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = accept4$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f00000003c0)=0xe, 0x80400)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000400), 0x0)

3.363803936s ago: executing program 0 (id=857):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_read_part_table(0x593, &(0x7f00000005c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000012)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004fcd2467f73a0909ada99ef59a24e4b51c57c9c511101fe18f14771b92f0809d6a48d7f1fff92e7a56d629c64429b17b971a283a32cd1ebcd0c65a73f5a0cef0ad5ad6487bba49c31b262167bffa124a8d422bc445d00c30ce44da"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x7fffffff, 0x0)
write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="4d0c00c00067000001029078ac1414bb7f000001441ce27000000800000000040000ffff0000000200000002000000099404010013029078ac1414aadb7bb6dd56d377cf14601f238f1d91e129230d85f9d48b0417debbaa65e7c85912ccd7704e5761511cc5e1c1170e65772b2d30923bc55ea0a539e0ab0c334304bb56ccab0f5258573eee7929579b7bef54696510292a86d9fc1a9f868d29e7eab233e514b49a0bbfa42bac3ee7a7e3ae947b9dd3bd5bcfc16cf00900000000000000d176"], 0xc0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)="97c65da1452017fe4c04e3dfe2b5a7a598cee422bf41cef0b17e06db9cb11a214b31fc0d1a313c", 0x27)
fchdir(0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xae}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
socketpair(0x1, 0x2, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000c80)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRES64, @ANYRESHEX], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)

2.892305035s ago: executing program 0 (id=851):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x34583000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680)=ANY=[@ANYBLOB="7472616ebc3d756e69782c00"])
pivot_root(&(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00')
mmap(&(0x7f0000390000/0x4000)=nil, 0x4000, 0xa, 0x2010, r1, 0xe5d50000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="010300000000000000b21671ec9a6b1cc546", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b78000000000000095"], &(0x7f0000000080)='GPL\x00', 0x400000, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="15000000"], &(0x7f00000003c0), 0x1200)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
syz_read_part_table(0x5eb, &(0x7f0000000f00)="$eJzs2zFo1FccB/DfxRwHSnFxclIHKcVFcfQoKnenohBOsxQpBhQRbzpBOOlBig56FMUbxG4uVrhF7ZTLDZkSEsjUIYQMKYEMWVqSJZClV+7yCm1KSq8kBeHz4eDHe//f/33fO976Dz5pQ/Frt9vNRET3p4gDA7492ioULx8bOV++EZGJmxHx9fef/9B7kkkd3dx2PZHGy2n89s3BzrONS9nW0vXNk7emG0N/LDne/8Whd+3RPTge++x9fubw4yfV0vNa/t5iqb76dGH+2of1Qrl9tdH8eCV78Xbqm011ONUHUYtHcT/GYji+jTtR3WX97wbMf91aOZ09WmpN3D23Vey8mDrT7xr0Xv97vfz+hY2IXv7D4y+/atYvnPrxyKuztcm58lqKruR2vjm2b3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/y8bM4cdPqqXntfy9xVJ99enC/LUP64Vy+2qj+fFK9uLt1Deb6nCqD6IWj+J+jEUlKnEnqrsmfPbnQW7n0/f5v+a/bq2c/u1oqTVx99xWsfNi6kzqG9mj8/5DfreX//D4yy+b9Qunckdena1NzpXXDmz3Vf628+j/ewAAAAAAAAAAAAAAAAAAALAXCsXLx0bOl29EZOJmRHzxyzdDvflu+t49k/pOpLqc5t++Odh5tnEp21q6vnny1nTj5zQ/HpkYj4hD79qj//thGNjvAQAA//8Pi5HU")

2.241627607s ago: executing program 5 (id=853):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x4}]}, @var={0x6, 0x0, 0x0, 0xe, 0x3}, @union={0x3, 0x3, 0x0, 0x5, 0x1, 0xa9af, [{0xd, 0x2, 0x2}, {0x7, 0x0, 0x6}, {0x5, 0x1, 0x80}]}, @fwd={0x5}]}, {0x0, [0x30, 0x2e, 0x61, 0x2e, 0x61]}}, &(0x7f00000006c0)=""/252, 0x8b, 0xfc, 0x1, 0x3}, 0x28)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000380)=""/125, 0x8000, 0x800, 0x7, 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
getcwd(0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

2.186596448s ago: executing program 5 (id=854):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
r0 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
r2 = socket(0x2, 0x80805, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x989}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10)
brk(0x55555ede6001)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000080), &(0x7f0000000080)=@buf="06"}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
ioprio_get$pid(0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r8, 0x25, 0x0, @val=@perf_event}, 0x18)
syz_emit_ethernet(0x16, &(0x7f0000000280)=ANY=[], 0x0)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000004c0)}}], 0x2, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8)

2.11827252s ago: executing program 5 (id=855):
setreuid(0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r1 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x8}}}}}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
munlockall()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x1000)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000180), 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c2000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
ioctl$EVIOCGBITSW(r5, 0x80404525, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getcwd(0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

2.117925869s ago: executing program 3 (id=856):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000001030000dbe937a14efcf4b8ad4000000007000005"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xf, &(0x7f0000000bc0)=ANY=[@ANYRES64=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2000000000000}, 0x18)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
fsmount(0xffffffffffffffff, 0x0, 0x85)
r5 = epoll_create1(0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r6, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000))

2.029628301s ago: executing program 0 (id=858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount(0x0, &(0x7f0000003c40)='.\x00', 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18)
open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8)
sendfile(r6, r6, 0x0, 0x101)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

1.875261114s ago: executing program 3 (id=860):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)}, {&(0x7f0000000900)="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", 0x173}], 0x2}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f00000006c0)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
r5 = accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000380)=0x60, 0x0)
ioctl$sock_ifreq(r5, 0x8927, &(0x7f00000003c0)={'virt_wifi0\x00', @ifru_hwaddr=@random="1f7961572456"})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}, {&(0x7f00000004c0)="62f6b6cde573b0fa60a5049399f7a573a4a520b0c25e487cbb0259a68fb2be8af395558202d84b0cb5b4dd2d2534353c0f65c4034297ae788d8e4bde1cffab91cf0398feebbf53d5dcc38c5aa35f6574a5fb", 0x52}], 0x2}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x18)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.873971554s ago: executing program 4 (id=861):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad}, &(0x7f0000000440), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x400)
bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r7=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f)
capget(&(0x7f0000000040)={0x20080522}, 0x0)

1.814510215s ago: executing program 3 (id=862):
r0 = socket(0x1d, 0x6, 0x7)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x100, 0x2, 0x6, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000014)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2, 0x0, @private1, @private1={0xfc, 0x1, '\x00', 0x8}}}}}}}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x2, @none, 0x0, 0x1}, 0x58)
connect$bt_l2cap(r5, 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3})
close(r6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18)

1.720938667s ago: executing program 1 (id=863):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
read(r1, &(0x7f0000000100)=""/34, 0x22)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4077, 0xfed}], 0x1, 0x3ab3, 0x3)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000af36f654e000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000ef3b0000001e0a0501000000000000000007009c7340a97b6901c47a31000000000900010073797a3000000000100003800c00008008000180040001002a000004234c31000000000000000000a668000a"], 0xc0}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x18)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYRES16=r6], 0x88}}, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r8, 0x0, 0x6}, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r9, 0x0)

1.485309132s ago: executing program 4 (id=864):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000940)=0x60)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc8014}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
symlink(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, 0x0, r3, 0x0, 0x406f413, 0x0)

1.458253052s ago: executing program 1 (id=865):
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4)
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000810}, 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000100), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38)

1.359377494s ago: executing program 4 (id=866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH")
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18)
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00')
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})

1.328776605s ago: executing program 3 (id=867):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x1, 0x4)
vmsplice(r5, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02", 0x2}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
write(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0x1000}}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400000001141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000024000e800c0002800500010093000000140001"], 0x138}}, 0x0)
close(r7)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x4c3, &(0x7f00000001c0)={[{@nobh}, {@grpjquota}, {@journal_async_commit}, {@dioread_nolock}]}, 0xff, 0x5d8, &(0x7f0000000c00)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

1.165156838s ago: executing program 5 (id=868):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x1, 0x0)
readv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/174, 0xae}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}})
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f00000003c0)={'wg2\x00', 0x3})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
r5 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sched_getattr(r5, &(0x7f0000000100)={0x38}, 0x38, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
sched_setscheduler(r5, 0x3, &(0x7f0000000300)=0x30f90815)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
setreuid(0xee01, 0x0)

1.01386726s ago: executing program 4 (id=869):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x55}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x8, 0x1)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='mm_compaction_try_to_compact_pages\x00', r5, 0x0, 0xaa8}, 0x18)
unshare(0x62040200)
fgetxattr(r5, &(0x7f0000000300)=@known='user.incfs.id\x00', &(0x7f00000004c0)=""/39, 0x27)

804.684565ms ago: executing program 1 (id=870):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x82, 0x0, 0x4}, 0x18)
pipe2(&(0x7f0000000c40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
fcntl$setpipe(r2, 0x407, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x4ca6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmmsg$inet(r1, &(0x7f0000001840)=[{{&(0x7f00000000c0)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f0000000640)}}, {{&(0x7f0000000840)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="8b", 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x6e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001740)}}], 0x3, 0x200040d0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r3, 0x0, 0xffffffff80000001}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
msgget$private(0x0, 0x790)
r4 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@errors_continue}, {@jqfmt_vfsv0}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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")
fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000)

542.11442ms ago: executing program 3 (id=871):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x8}, 0x10)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)="001ca73e", 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r3}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000004}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xf, 0xc}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x1c, 0xc}}}, 0x24}}, 0x44050)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x4d8}, 0x1, 0x0, 0x0, 0x20040010}, 0x54)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0x10}}}, 0x24}}, 0x20000004)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r6 = memfd_secret(0x80000)
fchownat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000)

541.262359ms ago: executing program 5 (id=872):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00'}, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
writev(r1, &(0x7f0000000740)=[{&(0x7f0000000180)="697bd0e093a7bcb9dfb5b83ede8622f2b90be41937", 0x15}, {&(0x7f0000000580)="b922149eefdc15e0e6911da210c7f6fe9f530b651b894931cf6bcd8d0c5688a7847d0cc743e3af43e3b9fde2cc5a73453b4bb95bcac473e51c51cad628ffffea431325cef94ef6e3d4ba7d16e944f290d0ab803431180d1efd983f612bff758d1aa9470c714dbd3e0ca825e9a674959a7f76b79869cd1e22062c66439c8139e3495fcac3a588f86f35fb85a088b724a6489b563f2aff8b0772c860fdce986bf8dc34883aeee27c9dca96376929487fecc507ec180ab96f1148781d8dd76356fa8334a20c694afb37da8dd971760adac58a2b926d3dbadd4750e9b6b81171815def38e896fe2ecd27dd9e771168d4", 0xee}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcccf}, 0x94)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000100)="3f031c000302140006001e008900", 0xe, 0x48005, &(0x7f0000000540)={0xc9, 0x8100, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', r6, 0x4, 0x0, 0x8, 0x8000000, 0x41, @remote, @loopback, 0x8, 0x40, 0x3, 0x27}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

522.17047ms ago: executing program 0 (id=873):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
inotify_init1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
clock_gettime(0x0, &(0x7f0000000540))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0)
read$ptp(r5, &(0x7f0000000280)=""/176, 0xb0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
ioctl$TIOCEXCL(r1, 0x540c)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x118, 0x3, 0x3, 0x8, 0x7, @broadcast}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000004c0)="de15c93e96d1a62575928b318271969d8a91c303c4def3ff2dd667a446b2dc7e75cd60a82ee22603aec5503703a34f4a7bb31724d6c10cf60a40068d6ff0a78c7793a4ef731b32e4ae8f12ff7d55c31a265faa17eace1bf863c91d", 0x5b}, {&(0x7f0000000680)="f2730acc922af2a2d6842b12dcc96fad936a9520709ec38002bab94d041bfa96775700939869c36954c11c60de826b1988f9930bc442ba4d4ca7d81fd03ff876e7c323be2fa2c8be0a75ffdbdaffd24932e7db409a3be3175ba2f4338b", 0x5d}, {&(0x7f0000000700)="1eec26cae28eb52152b0e5ffb866985f47d67a5587c620c667fcadf1eba8a104b986a9433633de020017ddb32c04faefb502881874c2d02add57ff41077302f1bf6a41e93694bdac5fb535d345ad394ef663735ead7661b6ba8d066b55d85e15068cb3fdc975ca7daeaec19da56d8f8fb665534e07ab253673e8b69d3f8f37a6987d68ff87eb94855b3d7e490e9b4e3b08c09aab6907069a2538941791ac7525349c35a0998c8ee0a00fb72cf8e5f3a088847cc3df9183038956b95b196e3d01356200dfffec65b6514b6588d8960afa582af058", 0xd4}, {&(0x7f00000001c0)="abc465549a6aee02226abe6757e155a562ed1d1d14e6c1828f8d9662020f090b014a52258006099b4de228", 0x2b}, {&(0x7f0000000800)="095127223b334e905141fc9c3dd7514ba78b0b91f9be2c769013af0a9c813b10773c0cd68bafeaa50cc7f447f35c1dffe0f21c6e40f340ef33cdaa6f0fca1be54376c2fd1e0a0a4ea0f920ec4318e8b322f6f840e2559170328b685f90608fcdbbb9a457330f8f50a657789a9e37a6fc42f832d660fff3c99c94836c58729fa6", 0x80}, {&(0x7f0000001200)="31d19d6a2b21611f4513cdd5951a3dd58e465709b727185597e6d563ea00d8adc09bca1f49141d0cc3be2ef9a35d6b81dfcee51ed03e97cf1ffe52dd6c0e73a906381b09921c118d4bb1161704d6ad72ad5b8c6c154787b286cfbd944783665d9072f56699e743c63c901d116fcb24c05a50e73ae58f1f75039862f52d01ace1867564024a76b72fb87749158b448954e1db88376a8be7b9549dd070bb0e11e0ccae5a9dafe2aa9ba99ea8467ecac488b4aeaa80299d82afb86bb28bbfc79ffc916e1cce3fc17d00914b506456c85bd165f25195401075170c120dfa77694349a826e20df80992d23ed9e6e856ee8120a10525fa37f2ab10ff43e26edadb45f84ab3132cf8c38b4985f571e66176e6a8393113a5dd2e12218986fc036953c69d8ac4199db7f0760eb90b4582da4cb6923ac7071ff8a72a249876bcf86f6edb1930a16c8b8c60cd4e35724c5a889144e791bdd55a99c9c3aa0bb4b09d02985b09b02ca49a0763838f72207b279c4e1d8c95258a86120e0d77627230b79dfdacc5d0117ddf20d82fa7fa7f5c4286b00536373fd07e708877ec92b8564902f1fbdaa0476360cd748540e345f5e0bbe6bad6452148c48bb105145a11f5899b232db1a6d1c39142ac2d10451a6ec195cac8e94fb7ee22d7db0f5f283638d16da8ef7d0c9840e2e6820d1155e46458a20274d5426652599d0cb99c6fc015f65f92fa57ac51f0ca07ffe6f3045c61e14fccf7b3383df3025fc56dfb595010562ad839e4c7433c6246d74eff64a16fb026604b077fdf5689cf4259d59f1a9a133d93f10ec6495658c64f20c4c3d01cb83b67a0b1793094352720e339a7a711f216547376b82f28017cfbe908bdd88946b73f6dea4f08355cc220b91b764884662875fbdd275f44d39b301ad036916cd414087f8c93b6304d1db8a84ea64d5dc850fa590c6e5349639a8115c29da8cf5a1fb063a8352db379a855260c0fa1da3c6321434a493b87e1abcf7742a577226555c0e487028d0ca820612230a8a7109bc341ac4e5fb4b939988e0bc7d6714bc315f6fcd15995cfaa6ece3b62af26541f67b4e341839c04013b47a8633b170694c1231baf0656d1196789ae9f5eb6e720a9eec98821540b33c4ddc6ff47a9b5671f85a99ed719d97c72bbee5b11719ce71969a9f32d62ed4f92611598af8602f001bfb49213ec448d4a71602008a53ff693805fea648d5c8df9b36a682e188e7369fcfdaca8cbd4052f8e1c728fbadcf3997edcf8af69a5ec4d392e7226bccb5eb2de0836a42f7f3d7bc555b347f28adb42ef22b02d0041bdaeeb06ddc1f3a7e65a95e1ebc944ade22c5d2b20774e46d2f37bb914d4dac8bbdd2ce4992d8bc9768a81add96fd3c19af0b947dab5d62ec0630185b4997f6d2d804f091cb004ea964bc877e38e2f3229c1107b9d7f2dbb4db511d19c18bcf59d1ff30f1ea7a4060f05218a2862cc608fb3405c027430a1a2b7efd4c181cae713c69599f4b9cd787deb72d818401077e30fd33cee357f7a22100f03b63718fbc0fe80cd443f76ca3ee98d3fec5a80bb8b5b4cfe8458c57d6183fc1760e303b64b8d3165647c69878ec38b3398285890bb5367aec3b93f6fb84ba3e1c4f0e42d1bdc7e8e8114fe6a0253e4855cd806f2752fa60fce8cc1d009f2a3eccf80fb87468c9c8a188363abc542e3a19ce0c23668dd9124ad84d3e6bd3acd0c9a1af1452ade1566e9f80094fe116065091c0a378adb96485be1b1f1f1eb865fd538b4a75dcb0a8a7d6c21aa43c9e38e196acacd8ae5289eaf690dcd3b91a5d4e637d792cdabd6d318464f88dafe19b907cacc369ef246001ec082e16a31496cd363e9ae0c5f2a8201799796f6639c76d64f8e720874e8c5429cc9683bbe98c137ccf94910721a9a1360804390190de05c4b07c36a8f39e27c6b949632f2cdcec3895e81f6d303af399c5f593f849eac1db7b41d1ed53cd0c31b648a307d8c1455ed348c54981966f66d6ea78e3ef541b9ddca61a0d6cbd99ff2b1e5836cfcd8b3bfc55585d6443fbe548fb1d1c8a63600bbc589d1b8ecbd93bec35a3f45a2ce06293c4f301b48fa53c612464fba377ab465eff775b9fa88f5a3d4f32d7cee581472c1f684c30a096f17ac10a4d0f4bd0404b8f1232320bdd16ff6fced33eb93bb1aac877b76ec065fa211f327d072919e2ae5babf2bd7f74a678c217b55b72d8ee1928713cbd7e02daa89f86cebdf23dca725849fc6a60537d7a857f9f8e9511056bcbbf3587d0475478660b404367c4f66fe230a20edb81a401bcef8a1ebaaf91941a4e35e9e588a2172a49c537df53090eaee34372f06236a3d02112e595f2de79fc7e3b36e308a9094e176a355a5546664179c27d5079b75e790b79e42ab78d1d98a6020a3101916bdefcf10abe933337a51b1d1d5c99883d2f034cedf071903721116031d5139fd45511dca793af65eb9f8a297ca0bb39335cb92f29cfc6b99930ad4f3477b9df40dd64712024a311a6536262bd2d89630e7b50248bcc33dff8bfe7ebfae3841351bbc3ed1d488737d5014650c9b9a8a3288ce2ef5dc0cac90700f98d591c0ef4bfb8a33dbbbc04998181c63aa1432c1df9c7be4f34ab45c914e834fa95123715882eb21dd8602bcdb2347a01cf62c6e8314c1f159d91db327f9cccee1f306fe6ac8f6cc125bf274c54fe097295ebd180c02dcd5e5c050591a3ef64d5fb9317fba013465ada530afbc5aa73ccc79b1cc54f9cfa00e648c714daf758ab7c2e8681cb978aac47e9ef68095441a9a031f7badacefe29cdf6f7291b57124b5800f65f7dc1175d27bfdbece2090e652d3e16d9d8876cfaadecf282aeb0d90bbfec078213ac409873455da35fb33e1a0cde76e4eda914344ebb509f670eb0d6b6a912d26e2b97ea97ebc7e03885db66b7c41f6048f5a02e19fdab1afcd8030ad06ee609d79d889667091729b88e6c8935e8764c43f29072134d0330b8f9de06db483496eef404bd8b04fb9148372a66f6722936854701f0d70421c68639ebd8d2256cf7f773c9264eb774898e2b9f7a5d83e6d8b8b434c843fe9d4064c63ac6f098b67a2056fc8b4089cf87f9fddbdf465f0092812fa2c4ffeb5866b774effb9d0eff853b4add3d78ab4f37071ba95776fdd2984eab219956e77b8382578a2b8f28d41ed524843609210ff5c80eaa854bba479a3faee3fce32a9e55d96044455835e72017ffe19244f33358d42873566c3993660b2f2624b32ad27b4c05b5384b0e6fd2c3eaaa1ee2d1ee9844721bde3340215ff1616885db197c0f0149f61d4bdb63f3c56ad247b1b95396ba76f18fab9b98295680bcb2663dc2a05a65cda0f0ffb7b719b863c096c65eb9842b5c8b3464bb43124f288089bee4e4513013154a8a958af249342f395e3c06d7cc8aa5827ad89574ea6326e719708b9a77b8f8966c8896815be1f08448982ed23af0ec0a1cb6b031dea621269652d4703ee870e18d6498c1433d8b351ba91a9b2186af6e63f720d14a607acf43ddbed3c3f9b897e6e47f17ab7c47488e23d0818bca200760b9a43ca272e04b0ec2a3e53ce4961853b5f7bd7609be4ffe1653f05d2d0be074fb26bd11f0d7db1c180e402cc3ef84f2bb6efd85cb6e1ea292dbcf8dbf557a42c94a91c2146805d9fb09ef56cd63ef29afaf2108be9035b6f66e181fbf234b52a54c8b22557034a44bf2479382b16ba32dabd5a7293ff7b3d12253887fda7f67e495503deca27bf765c5b834f213245737196eaa29c06c41af1d7a3ca6dae969fade7092674e1ce47938deead76b147874a022fd80ca300e332909f700eed10ca8dc8921ce053d87794118a031dc244eb3a5a4469c213622379b0b9a95eef31ac3f9efd334048f66e23f44770a58d4db6bfea4aa60af2243dd6bea634e474c8ebf9d235c73b035e5ce9896bc42bab8cddad9fb392dc37a0a96cc91c10c2af528e63717604af9a9a854ddc8d058ca1adffa36719a5f69731a532f19f9844aed578afa1a1f2f22559a26152349a93e8e4e51ae7f16081d9915dfb30889ec092e26c3df4e0505a1cac40cdfce5c6507592272cd3c6cb4aa73680d102acaf9eeeb0f0928cafbcbdc6ada3f1d2818c0bae8ef4aa87ffa4cdf845a8faa47d403255355a7388ad72004d9e850a0676049e2a64d5dc04952ea2907607b23bfd06a72f6ac91db30efafe6f7f2ae8d9ed79801ee88b3b294fce264cb9c310d6c752b7630ef81c5f4dcc715e01b0698cb2eafe0799895b64323f27d62cb6dca0bdf2c8cc3ad60d0e907c157b8a2df67e3935bd4a3d51540e9154cf808de04a0c397984cd77f8e1cb8915a5469ccef06fb8a41fdb859c1b78a44eb801552b2ffff5f8fc73e1200db70d2051ebd50d926f313b21c21c1c6a2a5866667b0896aa7a0fd79b09f37f29e40e206432c6bb9b4fffd20045cd41e715557c3559fe127fd3cfb68457c54592fdf2d449fb68b764d3ceeba7ed1966e06be9669ea8f0db5feaad76e3b0da239dc7a846252b97f546f010547f25f02f4d841497755bbd04668c0169395354b89d8e29ed32edd4362c2b73281d626145867725a2fa7aad91502160ea21769c31e13f0719f5e5c2151f9426e885fdd7808e0602ead33679f3870c571f9994a74771658ba620f51dc044ca4d33a30f5485d93de69d1f155fbcbd95ee4823ce14ca1ae72b71a8a8f821f1d410563cc8b8b25226344c28076a157fa91917935087c53a18abe596ae6f7820776f9a854929a00b575e18137628abcb39a316afe9ae15ef9ff2946ac4d8f120163e3b8228e7a11edc77eb5705db3385b75fc18153d431b35d1a0416cfdf4bee0dd85b57315768acaca2e96c7aa09aa9046b12997c66c907815ddc8cf74b512d9484415fc895f50a8f272920b6889326cf8ed0e661912e242dd46eb4229c8a014c5252dfcb7a808c645a7494686da538d8da1216cd53f4d23634e368a81d9e64d2ad6c99b06b47b9e1e3d5113b8ebdba9dd5593eba574a083c78033772bb83f9fe10f549fe6a834b06932d3797fdd0fb41d1f5620ed97238e838e40c9e404796ab0f6e660b5a50f369b552be626c09f8b927c7ba4bc1d511a0f3a6ab2ab8d3a23194171e2dd9e2296c57d3bcc3644c19dd693867c02037ae9bd474949da31e29056f6160ed3b022481f4c115f7a522fe5990c309fa20c96ca8f11c32f3d4cba23e5b7e9c07efefa957abd2066cfb0e4be405d5cf38526420bacdf4d54188330ada3f8dd5b699d0f35fe7c457948df6cc3d6b204b5247bed919af8c5be67224e225a18f16b3a3784379a90ac8b2341b5ed002d7aaa4110d7e7f39a36ffd20d27907c482003033335fbc9cd28b58837c891149911d73d3080e61280901a931d4adcaf1547e2ee9a4cf1cd3ee5ff4772210fb6849499eb6081275f3c51b0cce29fc6f69ee57c45460e95e8a335eba309168f79631e5023d3b8ffb82ab3880788b9d1fa2acc591cb50db148ac6dc241d3fdff9512eacc6744b47b41378c8d983a81666100d48bc45fa749539f389f35a61b4184d922f75b755e950f39c690d1997f60eb0cd8cc1ad73efa1f41a249c095375bc55efcf24cc2a08553d428076e51c85bb7e8b1ff8d95dbc7fd2e06afded546cadf0ef7783cb886fe6f452892f86ae0c0a78ee4933f3669a510507923719f8db42e722e2eae456d55d7ec0daa7fe2328362c5a09010dbdb92068a51e1098c9d6e51a5dfe67f93ab5bd9828c9d6aab1110e53a859b268de98358b48c08a3c57a33c9ad8b50f5c0ed2a48b8711fb7f796e", 0x1000}], 0x6)
sendfile(r1, r0, 0x0, 0x7ffff000)

392.588902ms ago: executing program 3 (id=874):
r0 = inotify_init()
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10)
ioperm(0x0, 0x1fb, 0x4)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
prctl$PR_MCE_KILL(0x35, 0x0, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r5, 0x0, 0x24002de8)

158.891547ms ago: executing program 4 (id=875):
socket(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
personality(0x8405426f9cfb8a42)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=876):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
acct(0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x89901)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000040)=0x3b3)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

kernel console output (not intermixed with test programs):

 detected capacity change from 0 to 1024
[   68.504366][ T4751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.419'.
[   68.513721][ T4748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.527190][    C1] I/O error, dev loop2, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   68.536925][    C1] I/O error, dev loop2, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   68.546638][    C1] I/O error, dev loop2, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[   68.562222][  T145] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #18: block 35: comm kworker/u8:5: unable to read itable block
[   68.604688][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.647773][ T4753] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.697117][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.775036][ T4761] loop0: detected capacity change from 0 to 2048
[   68.871839][ T4761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.873189][ T4759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.424'.
[   68.953756][ T4772] loop1: detected capacity change from 0 to 512
[   69.019149][ T4772] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.435: casefold flag without casefold feature
[   69.033261][ T3446] bond0 (unregistering): Released all slaves
[   69.053521][ T4772] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.435: couldn't read orphan inode 15 (err -117)
[   69.060263][ T3446] bond1 (unregistering): Released all slaves
[   69.067585][ T4772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.072520][ T4778] netlink: 'syz.0.423': attribute type 10 has an invalid length.
[   69.144364][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[   69.157378][ T3446] IPVS: stopping master sync thread 4249 ...
[   69.258244][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.326769][ T4778] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   69.528719][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.581472][ T3446] hsr_slave_0: left promiscuous mode
[   69.632521][ T3446] hsr_slave_1: left promiscuous mode
[   69.823410][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.955281][ T4774] lo speed is unknown, defaulting to 1000
[   70.049787][ T4764] lo speed is unknown, defaulting to 1000
[   70.081243][ T4818] netlink: 'syz.4.430': attribute type 1 has an invalid length.
[   70.089007][ T4818] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.430'.
[   70.162670][ T4825] netlink: 'syz.3.431': attribute type 10 has an invalid length.
[   70.186297][ T4828] netlink: 'syz.1.434': attribute type 10 has an invalid length.
[   70.199394][ T4825] loop3: detected capacity change from 0 to 512
[   70.199740][ T4828] team0: Port device syz_tun added
[   70.278032][ T4825] EXT4-fs (loop3): 1 orphan inode deleted
[   70.293451][  T145] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 1
[   70.344587][ T4764] chnl_net:caif_netlink_parms(): no params data found
[   70.355380][ T4825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.393568][ T4825] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.499501][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.515109][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.522270][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.533346][ T4764] bridge_slave_0: entered allmulticast mode
[   70.539948][ T4764] bridge_slave_0: entered promiscuous mode
[   70.550744][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.557855][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.565057][ T4764] bridge_slave_1: entered allmulticast mode
[   70.571781][ T4764] bridge_slave_1: entered promiscuous mode
[   70.702098][ T4847] lo speed is unknown, defaulting to 1000
[   70.742499][ T4764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.790041][ T4764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.857508][ T4764] team0: Port device team_slave_0 added
[   70.873824][ T4764] team0: Port device team_slave_1 added
[   70.929372][ T4857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4857 comm=syz.3.436
[   70.964496][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.971559][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.997509][ T4764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.078782][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.085912][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.111981][ T4764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.130161][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[   71.184469][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'.
[   71.414057][ T4764] hsr_slave_0: entered promiscuous mode
[   71.424978][ T4764] hsr_slave_1: entered promiscuous mode
[   71.454776][ T4764] debugfs: 'hsr0' already exists in 'hsr'
[   71.460573][ T4764] Cannot create hsr debugfs directory
[   71.631718][ T4874] lo speed is unknown, defaulting to 1000
[   72.017893][ T4857] lo speed is unknown, defaulting to 1000
[   72.140738][ T4889] tls_set_device_offload: netdev not found
[   72.189904][ T4896] net_ratelimit: 40 callbacks suppressed
[   72.189921][ T4896] openvswitch: netlink: Message has 6 unknown bytes.
[   72.268476][ T4900] team0: Port device syz_tun removed
[   72.290567][ T4900] bridge_slave_0: left allmulticast mode
[   72.296395][ T4900] bridge_slave_0: left promiscuous mode
[   72.296630][ T4903] loop1: detected capacity change from 0 to 164
[   72.302265][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.318727][ T4900] bridge_slave_1: left allmulticast mode
[   72.324505][ T4900] bridge_slave_1: left promiscuous mode
[   72.330239][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.339696][ T4900] $Hÿ: (slave bond_slave_0): Releasing backup interface
[   72.348061][ T4900] bond_slave_0: left promiscuous mode
[   72.355753][ T4900] $Hÿ: (slave bond_slave_1): Releasing backup interface
[   72.364489][ T4900] bond_slave_1: left promiscuous mode
[   72.378444][ T4900] team0: Failed to send options change via netlink (err -105)
[   72.387294][ T4900] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   72.397076][ T4900] team0: Port device team_slave_0 removed
[   72.406479][ T4900] team0: Failed to send options change via netlink (err -105)
[   72.414234][ T4900] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   72.424027][ T4900] team0: Port device team_slave_1 removed
[   72.448579][ T4900] bond0: (slave ip6gretap1): Releasing backup interface
[   72.466119][ T4896] syz_tun: refused to change device tx_queue_len
[   72.472605][   T36] lo speed is unknown, defaulting to 1000
[   72.495433][ T4903] team0: Failed to send options change via netlink (err -105)
[   72.503012][ T4903] team0: Mode changed to "activebackup"
[   72.554368][ T4764] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   72.567954][ T4764] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   72.586031][ T4764] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   72.641724][ T4764] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   72.732099][ T4764] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.749713][ T4928] loop3: detected capacity change from 0 to 512
[   72.755252][ T4764] 8021q: adding VLAN 0 to HW filter on device team0
[   72.777442][ T4928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.795268][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.802480][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.813925][ T4928] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.828297][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.835409][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.890206][ T4933] 
: renamed from bond0 (while UP)
[   72.950543][ T4928] SELinux: failed to load policy
[   72.994907][ T4764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.007665][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.069243][   T29] kauditd_printk_skb: 154 callbacks suppressed
[   73.069335][   T29] audit: type=1400 audit(1757937280.260:1209): avc:  denied  { kexec_image_load } for  pid=4946 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   73.116299][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.123777][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.131209][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.138655][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.146104][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.153615][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.161029][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.167129][ T4894] lo speed is unknown, defaulting to 1000
[   73.168477][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.181668][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.189132][ T3397] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0
[   73.213551][   T29] audit: type=1400 audit(1757937280.310:1210): avc:  denied  { read write } for  pid=4952 comm="syz.3.453" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   73.237028][   T29] audit: type=1400 audit(1757937280.310:1211): avc:  denied  { open } for  pid=4952 comm="syz.3.453" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   73.302395][ T4958] netlink: 'syz.4.454': attribute type 3 has an invalid length.
[   73.436361][ T3397] hid-generic 0000:0000:0002.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   73.521922][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'.
[   73.543554][ T4915] lo speed is unknown, defaulting to 1000
[   73.594308][ T4764] veth0_vlan: entered promiscuous mode
[   73.610625][ T4764] veth1_vlan: entered promiscuous mode
[   73.645202][ T4764] veth0_macvtap: entered promiscuous mode
[   73.655908][ T4764] veth1_macvtap: entered promiscuous mode
[   73.669252][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.679418][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.709856][   T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.723847][   T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.739096][   T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.803492][  T271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.816514][   T29] audit: type=1400 audit(1757937281.000:1212): avc:  denied  { mounton } for  pid=4764 comm="syz-executor" path="/root/syzkaller.sfSqmg/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   73.840957][   T29] audit: type=1400 audit(1757937281.000:1213): avc:  denied  { mount } for  pid=4764 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   73.863179][   T29] audit: type=1400 audit(1757937281.010:1214): avc:  denied  { mount } for  pid=4764 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   73.885260][   T29] audit: type=1400 audit(1757937281.010:1215): avc:  denied  { mounton } for  pid=4764 comm="syz-executor" path="/root/syzkaller.sfSqmg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   73.908534][ T4983] netlink: 'syz.0.460': attribute type 4 has an invalid length.
[   73.912128][   T29] audit: type=1400 audit(1757937281.010:1216): avc:  denied  { mounton } for  pid=4764 comm="syz-executor" path="/root/syzkaller.sfSqmg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   74.004993][   T29] audit: type=1400 audit(1757937281.140:1217): avc:  denied  { mounton } for  pid=4764 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   74.027966][   T29] audit: type=1400 audit(1757937281.140:1218): avc:  denied  { mount } for  pid=4764 comm="syz-executor" name="/" dev="gadgetfs" ino=3702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   74.068890][ T4991] loop0: detected capacity change from 0 to 1024
[   74.076136][ T4989] loop1: detected capacity change from 0 to 512
[   74.135111][ T4989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.148962][ T4991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.192766][ T4989] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.294324][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.357873][ T4989] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.461: iget: bad i_size value: 2533274857506816
[   74.514904][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.782559][ T5012] lo speed is unknown, defaulting to 1000
[   76.563736][ T5027] lo speed is unknown, defaulting to 1000
[   77.063365][ T5034] lo speed is unknown, defaulting to 1000
[   77.362934][ T5053] loop3: detected capacity change from 0 to 512
[   77.386124][ T5052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.473'.
[   77.434120][ T5053] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.476: casefold flag without casefold feature
[   77.562378][ T5053] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.476: couldn't read orphan inode 15 (err -117)
[   77.664235][ T5053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.690660][ T5049] loop1: detected capacity change from 0 to 2048
[   77.821137][ T5049]  loop1: unable to read partition table
[   77.827452][ T5049] loop1: partition table beyond EOD, truncated
[   77.833668][ T5049] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[   77.901349][ T2994]  loop1: unable to read partition table
[   77.910975][ T2994] loop1: partition table beyond EOD, truncated
[   78.088286][   T29] kauditd_printk_skb: 102 callbacks suppressed
[   78.088334][   T29] audit: type=1326 audit(1757937285.280:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.130030][ T5076] netlink: 'syz.4.478': attribute type 10 has an invalid length.
[   78.177452][   T29] audit: type=1326 audit(1757937285.310:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.200971][   T29] audit: type=1326 audit(1757937285.330:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.224404][   T29] audit: type=1326 audit(1757937285.340:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.247720][   T29] audit: type=1326 audit(1757937285.350:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.271040][   T29] audit: type=1326 audit(1757937285.360:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.300501][ T5079] netlink: 48 bytes leftover after parsing attributes in process `syz.5.477'.
[   78.322391][   T29] audit: type=1326 audit(1757937285.490:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.345968][   T29] audit: type=1326 audit(1757937285.510:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.369807][   T29] audit: type=1326 audit(1757937285.560:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.465147][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.530450][ T5090] netlink: 'syz.0.479': attribute type 3 has an invalid length.
[   78.561307][ T5095] loop5: detected capacity change from 0 to 1024
[   78.615593][ T5099] loop3: detected capacity change from 0 to 1024
[   78.624384][ T5099] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   78.635359][ T5099] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   78.651636][ T5099] JBD2: no valid journal superblock found
[   78.657473][ T5099] EXT4-fs (loop3): Could not load journal inode
[   78.678630][   T29] audit: type=1326 audit(1757937285.860:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   78.808790][ T5095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.908553][ T5095] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.008083][ T5112] loop3: detected capacity change from 0 to 256
[   79.055842][ T5112] vfat: Unknown parameter 'u_xlate'
[   79.161938][ T5112] loop3: detected capacity change from 0 to 1024
[   79.189158][ T5112] EXT4-fs: Ignoring removed bh option
[   79.194733][ T5112] EXT4-fs: Ignoring removed nomblk_io_submit option
[   79.244551][ T3446] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set
[   79.248072][ T5112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.272427][ T3446] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117
[   79.285142][ T3446] EXT4-fs (loop5): This should not happen!! Data will be lost
[   79.285142][ T3446] 
[   79.336627][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.461834][ T3480] lo speed is unknown, defaulting to 1000
[   79.467694][ T3480] syz0: Port: 1 Link DOWN
[   79.474490][ T5123] loop5: detected capacity change from 0 to 512
[   79.476794][ T5121] netlink: '+}[@': attribute type 4 has an invalid length.
[   79.503506][ T5123] EXT4-fs: Ignoring removed nobh option
[   79.535060][ T5123] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.486: iget: bad i_size value: 38620345925642
[   79.548231][ T5123] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.486: couldn't read orphan inode 15 (err -117)
[   79.561007][ T5123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.613197][ T5129] netlink: 'syz.1.490': attribute type 27 has an invalid length.
[   79.674885][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'.
[   79.725586][ T5129] $Hÿ: left promiscuous mode
[   79.977712][   T51] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[   79.991850][   T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   80.004588][   T51] EXT4-fs (loop5): This should not happen!! Data will be lost
[   80.004588][   T51] 
[   80.014382][   T51] EXT4-fs (loop5): Total free blocks count 0
[   80.020368][   T51] EXT4-fs (loop5): Free/Dirty block details
[   80.026418][   T51] EXT4-fs (loop5): free_blocks=0
[   80.031357][   T51] EXT4-fs (loop5): dirty_blocks=16016
[   80.036937][   T51] EXT4-fs (loop5): Block reservation details
[   80.043131][   T51] EXT4-fs (loop5): i_reserved_data_blocks=16016
[   80.053015][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.077336][  T145] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   80.104071][ T3446] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.113130][ T3446] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.131781][ T3446] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.140784][ T3446] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.174529][ T5140] loop3: detected capacity change from 0 to 512
[   80.204588][ T3446] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.213641][ T3446] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.238601][ T3446] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.247606][ T3446] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.292543][ T5140] EXT4-fs (loop3): too many log groups per flexible block group
[   80.300342][ T5140] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   80.338903][ T5140] EXT4-fs (loop3): mount failed
[   80.545531][ T5213] netlink: 'syz.5.493': attribute type 3 has an invalid length.
[   80.699417][ T5151] loop1: detected capacity change from 0 to 32768
[   81.162321][ T1044] IPVS: starting estimator thread 0...
[   81.347643][ T5232] IPVS: using max 2112 ests per chain, 105600 per kthread
[   81.486297][ T5235] lo speed is unknown, defaulting to 1000
[   82.822062][ T5147] syz.0.503 (5147) used greatest stack depth: 7480 bytes left
[   83.382431][   T29] kauditd_printk_skb: 279 callbacks suppressed
[   83.382449][   T29] audit: type=1400 audit(1757937290.567:1610): avc:  denied  { wake_alarm } for  pid=5266 comm="syz.3.508" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   83.869274][ T5292] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2
[   84.166370][   T29] audit: type=1326 audit(1757937291.357:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.189785][   T29] audit: type=1326 audit(1757937291.357:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.269412][   T29] audit: type=1326 audit(1757937291.407:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.293018][   T29] audit: type=1326 audit(1757937291.407:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.316465][   T29] audit: type=1326 audit(1757937291.407:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.339848][   T29] audit: type=1326 audit(1757937291.407:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.363254][   T29] audit: type=1326 audit(1757937291.407:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.386587][   T29] audit: type=1326 audit(1757937291.407:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.409956][   T29] audit: type=1326 audit(1757937291.407:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9422b2eba9 code=0x7ffc0000
[   84.680647][ T5332] loop3: detected capacity change from 0 to 128
[   84.796419][ T5332] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   84.844835][ T5334] lo speed is unknown, defaulting to 1000
[   84.938368][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[   84.997472][ T5338] loop1: detected capacity change from 0 to 164
[   85.122854][ T5338] rock: directory entry would overflow storage
[   85.129093][ T5338] rock: sig=0x4f50, size=4, remaining=3
[   85.134724][ T5338] iso9660: Corrupted directory entry in block 5 of inode 1792
[   85.317052][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'.
[   85.376302][ T5340] bridge0: port 1(batadv0) entered blocking state
[   85.382906][ T5340] bridge0: port 1(batadv0) entered disabled state
[   85.389688][ T5340] batadv0: entered allmulticast mode
[   85.396107][ T5340] batadv0: entered promiscuous mode
[   85.569536][ T5356] loop1: detected capacity change from 0 to 512
[   85.580700][ T5160] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   85.583914][ T5356] /dev/loop1: Can't open blockdev
[   85.783701][ T5362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5362 comm=syz.3.525
[   85.885936][ T5160] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   85.895227][ T5160] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   86.113324][ T5367] SELinux:  policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c
[   86.313095][ T5367] SELinux: failed to load policy
[   86.715572][ T5375] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'.
[   86.763290][ T5375] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'.
[   86.978587][ T5385] loop0: detected capacity change from 0 to 512
[   87.043699][ T5385] EXT4-fs (loop0): orphan cleanup on readonly fs
[   87.071893][ T5385] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.529: Failed to acquire dquot type 1
[   87.181402][ T5385] EXT4-fs (loop0): 1 truncate cleaned up
[   87.189425][ T5385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.235531][ T5385] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   87.262103][ T5385] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[   87.301932][ T5393] lo speed is unknown, defaulting to 1000
[   87.318358][ T5393] lo speed is unknown, defaulting to 1000
[   87.346858][ T5393] lo speed is unknown, defaulting to 1000
[   87.365123][ T5393] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   87.379303][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.430978][ T5393] lo speed is unknown, defaulting to 1000
[   87.469609][ T5393] lo speed is unknown, defaulting to 1000
[   87.625833][ T5393] lo speed is unknown, defaulting to 1000
[   87.714197][ T5402] lo speed is unknown, defaulting to 1000
[   87.761505][ T5376] Set syz1 is full, maxelem 65536 reached
[   87.794674][ T5402] lo speed is unknown, defaulting to 1000
[   87.916780][ T5393] lo speed is unknown, defaulting to 1000
[   87.939471][ T5401] loop0: detected capacity change from 0 to 1024
[   87.987925][ T5393] lo speed is unknown, defaulting to 1000
[   88.121782][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'.
[   88.214349][ T5401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   88.226692][ T5401] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.270480][ T5414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5414 comm=syz.1.537
[   88.419972][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   88.459735][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.540'.
[   88.469960][   T29] kauditd_printk_skb: 126 callbacks suppressed
[   88.469976][   T29] audit: type=1400 audit(1757937295.657:1744): avc:  denied  { write } for  pid=5423 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   88.501041][ T5422] netlink: 'syz.5.540': attribute type 1 has an invalid length.
[   88.527402][ T5424] lo speed is unknown, defaulting to 1000
[   88.533651][ T5424] lo speed is unknown, defaulting to 1000
[   88.562022][ T5422] gretap1: entered promiscuous mode
[   88.584511][   T29] audit: type=1400 audit(1757937295.777:1745): avc:  denied  { create } for  pid=5428 comm="syz.4.542" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.601051][ T5429] bridge_slave_0: left allmulticast mode
[   88.608249][   T29] audit: type=1400 audit(1757937295.777:1746): avc:  denied  { write } for  pid=5428 comm="syz.4.542" name="file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.610862][ T5429] bridge_slave_0: left promiscuous mode
[   88.633230][   T29] audit: type=1400 audit(1757937295.777:1747): avc:  denied  { read } for  pid=5428 comm="syz.4.542" name="file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.633263][   T29] audit: type=1400 audit(1757937295.777:1748): avc:  denied  { open } for  pid=5428 comm="syz.4.542" path="/128/file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.633293][   T29] audit: type=1400 audit(1757937295.777:1749): avc:  denied  { ioctl } for  pid=5428 comm="syz.4.542" path="/128/file0" dev="tmpfs" ino=692 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.708483][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.721302][ T5429] bridge_slave_1: left allmulticast mode
[   88.727241][ T5429] bridge_slave_1: left promiscuous mode
[   88.732975][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.742502][ T5429] 
: (slave bond_slave_0): Releasing backup interface
[   88.752181][ T5429] 
: (slave bond_slave_1): Releasing backup interface
[   88.762601][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.770277][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.779314][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.786801][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.802355][ T3382] lo speed is unknown, defaulting to 1000
[   88.853539][   T29] audit: type=1400 audit(1757937296.037:1750): avc:  denied  { unlink } for  pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.951630][   T29] audit: type=1326 audit(1757937296.137:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72357eba9 code=0x7ffc0000
[   89.074729][   T29] audit: type=1400 audit(1757937296.187:1752): avc:  denied  { append } for  pid=5432 comm="syz.5.543" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.098169][   T29] audit: type=1326 audit(1757937296.267:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa72357eba9 code=0x7ffc0000
[   89.322895][ T5442] netlink: '+}[@': attribute type 13 has an invalid length.
[   89.581529][ T5442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.603984][ T5442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.622589][ T5442] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   89.969910][   T10] syz1: Port: 1 Link DOWN
[   89.972394][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'.
[   89.990092][ T5199] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.056019][ T5199] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.070730][ T5463] bridge1: entered promiscuous mode
[   90.092294][ T5199] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.114612][ T5199] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.239668][ T5474] loop3: detected capacity change from 0 to 1024
[   90.257623][ T5474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.391714][ T5474] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.554: Allocating blocks 497-513 which overlap fs metadata
[   90.407346][ T5474] EXT4-fs (loop3): pa ffff8881072694d0: logic 256, phys. 369, len 9
[   90.415740][ T5474] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   90.461458][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.621078][ T5487] lo speed is unknown, defaulting to 1000
[   90.627482][ T5487] lo speed is unknown, defaulting to 1000
[   91.445179][ T5493] loop0: detected capacity change from 0 to 1024
[   91.483921][ T5493] EXT4-fs: Ignoring removed oldalloc option
[   91.489997][ T5493] EXT4-fs: Ignoring removed bh option
[   91.535588][ T5496] blkio.reset_stats is deprecated
[   91.579715][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.563'.
[   91.590687][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'.
[   91.629440][ T5505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.564'.
[   91.645269][ T5493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.658767][ T3382] hid_parser_main: 16 callbacks suppressed
[   91.658786][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.672062][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.679487][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.687007][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.694427][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.701812][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.709265][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.716720][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.724132][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.731739][ T3382] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[   91.739328][ T5502] loop3: detected capacity change from 0 to 2048
[   91.778924][ T5503] loop1: detected capacity change from 0 to 2048
[   91.788797][ T5493] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   91.808822][ T3295]  loop3: p1 < > p4
[   91.813791][ T5503] EXT4-fs: Ignoring removed i_version option
[   91.833806][ T3295] loop3: p4 size 8388608 extends beyond EOD, truncated
[   91.871234][ T5502]  loop3: p1 < > p4
[   91.910285][ T5508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   91.916842][ T5508] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   91.924517][ T5508] vhci_hcd vhci_hcd.0: Device attached
[   91.951577][ T5503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.987775][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.004797][ T5503] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.015754][ T5502] loop3: p4 size 8388608 extends beyond EOD, truncated
[   92.064842][ T3382] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   92.173434][ T5133] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[   92.336997][ T5510] usb 7-1: recv xbuf, 0
[   92.341758][ T5184] vhci_hcd: stop threads
[   92.346085][ T5184] vhci_hcd: release socket
[   92.350512][ T5184] vhci_hcd: disconnect device
[   92.355742][ T5133] usb 7-1: enqueue for inactive port 0
[   92.361272][ T5133] usb 7-1: enqueue for inactive port 0
[   92.430744][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.440004][ T5133] vhci_hcd: vhci_device speed not set
[   92.609692][ T5522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.567'.
[   92.630414][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'.
[   92.661923][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'.
[   92.681633][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'.
[   92.742601][ T5527] netlink: 96 bytes leftover after parsing attributes in process `syz.0.569'.
[   92.792050][ T5531] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649
[   92.820845][ T5533] loop1: detected capacity change from 0 to 1024
[   92.836951][ T5533] EXT4-fs: Ignoring removed orlov option
[   92.873876][ T5533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.944944][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.088342][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'.
[   93.132961][ T5555] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.138736][ T5563] netlink: 'syz.5.582': attribute type 2 has an invalid length.
[   93.147467][ T5563] netlink: 'syz.5.582': attribute type 1 has an invalid length.
[   93.480701][   T29] kauditd_printk_skb: 487 callbacks suppressed
[   93.480716][   T29] audit: type=1326 audit(1757937300.667:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feff3085b67 code=0x7ffc0000
[   93.514094][   T29] audit: type=1326 audit(1757937300.697:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feff302ada9 code=0x7ffc0000
[   93.537456][   T29] audit: type=1326 audit(1757937300.707:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feff3085b67 code=0x7ffc0000
[   93.560785][   T29] audit: type=1326 audit(1757937300.707:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feff302ada9 code=0x7ffc0000
[   93.584072][   T29] audit: type=1326 audit(1757937300.707:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[   93.607424][   T29] audit: type=1326 audit(1757937300.707:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe93a545b67 code=0x7ffc0000
[   93.630716][   T29] audit: type=1326 audit(1757937300.707:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe93a4eada9 code=0x7ffc0000
[   93.654098][   T29] audit: type=1326 audit(1757937300.707:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[   93.677627][   T29] audit: type=1326 audit(1757937300.747:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feff3085b67 code=0x7ffc0000
[   93.700984][   T29] audit: type=1326 audit(1757937300.747:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feff302ada9 code=0x7ffc0000
[   94.062297][ T5592] netlink: 'syz.1.591': attribute type 10 has an invalid length.
[   94.072672][ T5592] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[   94.257198][ T5599] loop1: detected capacity change from 0 to 512
[   94.329231][ T5597] lo speed is unknown, defaulting to 1000
[   94.335343][ T5597] lo speed is unknown, defaulting to 1000
[   94.469734][ T5599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.778339][ T5599] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.983542][ T5621] __nla_validate_parse: 6 callbacks suppressed
[   94.983560][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   94.998646][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.007584][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.017127][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'.
[   95.053702][ T5622] loop0: detected capacity change from 0 to 2048
[   95.107470][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.116424][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.125996][ T5622] EXT4-fs: Ignoring removed i_version option
[   95.174354][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.189742][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.215507][ T5622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.231940][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.240872][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.262604][ T5622] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.282797][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'.
[   95.301766][ T5645] loop3: detected capacity change from 0 to 512
[   95.338337][ T5643] loop1: detected capacity change from 0 to 512
[   95.346208][ T5643] EXT4-fs: test_dummy_encryption option not supported
[   95.359446][ T5643] hsr_slave_0: left promiscuous mode
[   95.366010][ T5643] hsr_slave_1: left promiscuous mode
[   95.399418][ T5645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.568001][ T5653] lo speed is unknown, defaulting to 1000
[   95.574713][ T5653] lo speed is unknown, defaulting to 1000
[   96.236591][ T5664] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   96.237698][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.259637][ T5664] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[   96.302027][ T5652] lo speed is unknown, defaulting to 1000
[   96.315040][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.320634][ T5652] lo speed is unknown, defaulting to 1000
[   96.373047][ T5670] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   96.708178][ T5698] 9pnet_fd: Insufficient options for proto=fd
[   96.740449][ T5698] loop1: detected capacity change from 0 to 764
[   96.836869][ T5689] Symlink component flag not implemented
[   96.891582][ T5702] random: crng reseeded on system resumption
[   96.901961][ T5704] bond0: (slave bond_slave_0): Releasing backup interface
[   96.932163][ T5704] bond0: (slave bond_slave_1): Releasing backup interface
[   96.952209][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.954299][ T5705] netlink: 'syz.3.619': attribute type 39 has an invalid length.
[   96.994697][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.007259][ T5704] batman_adv: batadv0: Removing interface: veth1_vlan
[   97.052957][ T5709] loop1: detected capacity change from 0 to 1024
[   97.065848][ T5707] loop0: detected capacity change from 0 to 512
[   97.076243][ T5707] EXT4-fs (loop0): orphan cleanup on readonly fs
[   97.096729][ T5709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.098076][ T5707] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.620: EA inode hash validation failed
[   97.121687][ T5707] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   97.143720][ T5707] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.620: corrupted inode contents
[   97.191417][ T5709] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[   97.209782][ T5707] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.620: mark_inode_dirty error
[   97.222915][ T5707] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.620: corrupted inode contents
[   97.240942][ T5707] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.620: mark_inode_dirty error
[   97.253406][ T5717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.277987][ T5707] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.620: mark inode dirty (error -117)
[   97.307686][ T5707] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   97.320688][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.324406][ T5707] EXT4-fs (loop0): 1 orphan inode deleted
[   97.354374][ T5707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   97.469146][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.482080][ T5723] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.587762][ T5730] loop1: detected capacity change from 0 to 512
[   97.638989][ T5730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.679437][ T5731] lo speed is unknown, defaulting to 1000
[   97.773668][ T5730] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.819913][ T5731] lo speed is unknown, defaulting to 1000
[   97.864500][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.961494][ T5740] lo speed is unknown, defaulting to 1000
[   97.967603][ T5740] lo speed is unknown, defaulting to 1000
[   98.404967][ T5132] hid_parser_main: 8 callbacks suppressed
[   98.404987][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.418359][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.471899][ T5751] lo speed is unknown, defaulting to 1000
[   98.478157][ T5751] lo speed is unknown, defaulting to 1000
[   98.537663][ T5751] loop3: detected capacity change from 0 to 1024
[   98.597708][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.605308][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.612767][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.620245][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.627743][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.635199][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.642608][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.650071][ T5132] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   98.667209][   T29] kauditd_printk_skb: 716 callbacks suppressed
[   98.667227][   T29] audit: type=1326 audit(1757937305.857:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.696965][   T29] audit: type=1326 audit(1757937305.857:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.720327][   T29] audit: type=1326 audit(1757937305.857:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.743700][   T29] audit: type=1326 audit(1757937305.857:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.767123][   T29] audit: type=1326 audit(1757937305.857:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.790577][   T29] audit: type=1326 audit(1757937305.857:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.814033][   T29] audit: type=1326 audit(1757937305.857:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.837390][   T29] audit: type=1326 audit(1757937305.857:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.860724][   T29] audit: type=1326 audit(1757937305.857:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.884089][   T29] audit: type=1326 audit(1757937305.857:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.5.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[   98.916440][ T5132] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   98.981149][ T5751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.995957][ T5756] fido_id[5756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   99.025753][ T5751] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.631: Allocating blocks 449-513 which overlap fs metadata
[   99.094260][ T5776] loop1: detected capacity change from 0 to 512
[   99.105837][ T5776] EXT4-fs (loop1): orphan cleanup on readonly fs
[   99.117012][ T5776] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.638: inode #218103808: comm syz.1.638: iget: illegal inode #
[   99.130991][ T5770] loop5: detected capacity change from 0 to 512
[   99.135868][ T5776] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.638: Bad quota inode: 218103808, type: 2
[   99.150818][ T5747] EXT4-fs (loop3): pa ffff8881071dfaf0: logic 48, phys. 177, len 21
[   99.158943][ T5747] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   99.170140][ T5776] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[   99.180033][ T5770] EXT4-fs (loop5): orphan cleanup on readonly fs
[   99.188408][ T5776] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   99.199317][ T5776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.245338][ T5770] EXT4-fs warning (device loop5): ext4_xattr_inode_get:556: inode #11: comm syz.5.636: EA inode hash validation failed
[   99.260483][ T5770] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.636: corrupted inode contents
[   99.273482][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.276908][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.297716][ T5765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5765 comm=syz.0.635
[   99.310333][ T5770] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.636: mark_inode_dirty error
[   99.328943][ T5770] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.636: corrupted inode contents
[   99.342594][ T5770] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.636: mark_inode_dirty error
[   99.387524][ T5770] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #15: comm syz.5.636: mark inode dirty (error -117)
[   99.467313][ T5770] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[   99.504675][ T5783] syz!: rxe_newlink: already configured on team_slave_0
[   99.508406][ T5770] EXT4-fs (loop5): 1 orphan inode deleted
[   99.523590][ T5770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   99.572188][ T5793] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5793 comm=syz.3.643
[   99.626230][ T5798] random: crng reseeded on system resumption
[   99.727913][ T5802] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526
[   99.782600][ T5806] loop3: detected capacity change from 0 to 128
[   99.791829][ T5806] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   99.829838][ T5806] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   99.883736][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.939350][ T5810] loop5: detected capacity change from 0 to 512
[   99.998606][ T5810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.033487][ T5810] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.179344][ T5815] syzkaller0: entered promiscuous mode
[  100.185089][ T5815] syzkaller0: entered allmulticast mode
[  100.226362][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.256111][ T5199] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  100.545593][ T5826] netlink: 'syz.0.657': attribute type 4 has an invalid length.
[  100.684676][ T5830] wireguard0: entered promiscuous mode
[  100.690208][ T5830] wireguard0: entered allmulticast mode
[  100.737081][ T5833] random: crng reseeded on system resumption
[  101.013944][ T5841] loop0: detected capacity change from 0 to 1024
[  101.022689][ T5841] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  101.044246][ T5841] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.662: Invalid block bitmap block 0 in block_group 0
[  101.058954][ T5841] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.662: Failed to acquire dquot type 0
[  101.070699][ T5841] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.662: Freeing blocks not in datazone - block = 0, count = 4096
[  101.084982][ T5841] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.662: Invalid inode bitmap blk 0 in block_group 0
[  101.098167][ T5841] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  101.107231][ T5841] EXT4-fs (loop0): 1 orphan inode deleted
[  101.107912][ T5199] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:54: Failed to release dquot type 0
[  101.113745][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.151117][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.228031][ T5846] vhci_hcd: invalid port number 96
[  101.233269][ T5846] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  101.317939][ T5853] loop0: detected capacity change from 0 to 128
[  101.332508][ T5853] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.351442][ T5847] loop1: detected capacity change from 0 to 2048
[  101.354202][ T5855] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  101.358433][ T5853] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.364332][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  101.364426][ T5855] vhci_hcd vhci_hcd.0: Device attached
[  101.408297][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  101.440894][ T5867] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  101.447550][ T5867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  101.455158][ T5867] vhci_hcd vhci_hcd.0: Device attached
[  101.491270][ T5855] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10)
[  101.497923][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  101.505544][ T5855] vhci_hcd vhci_hcd.0: Device attached
[  101.559724][ T5867] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16)
[  101.566368][ T5867] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  101.574232][ T5867] vhci_hcd vhci_hcd.0: Device attached
[  101.598517][ T5879] loop3: detected capacity change from 0 to 128
[  101.604920][   T10] IPVS: starting estimator thread 0...
[  101.640919][ T5855] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[  101.644461][ T5847] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, 
[  101.647572][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  101.647582][ T5847] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  101.653381][ T5847] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1518 with error 28
[  101.656003][ T5855] vhci_hcd vhci_hcd.0: Device attached
[  101.663587][ T5847] EXT4-fs (loop1): This should not happen!! Data will be lost
[  101.663587][ T5847] 
[  101.674666][ T5855] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  101.684808][ T5847] EXT4-fs (loop1): Total free blocks count 0
[  101.684844][ T5847] EXT4-fs (loop1): Free/Dirty block details
[  101.684889][ T5847] EXT4-fs (loop1): free_blocks=2415919104
[  101.692503][ T5855] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  101.700117][ T5847] EXT4-fs (loop1): dirty_blocks=1520
[  101.733411][ T5877] IPVS: using max 2016 ests per chain, 100800 per kthread
[  101.734100][ T5847] EXT4-fs (loop1): Block reservation details
[  101.752509][ T5847] EXT4-fs (loop1): i_reserved_data_blocks=95
[  101.760845][ T1044] usb 12-1: SetAddress Request (2) to port 0
[  101.766950][ T5867] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(28)
[  101.766973][ T1044] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  101.773573][ T5867] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  101.773670][ T5867] vhci_hcd vhci_hcd.0: Device attached
[  101.815114][ T5855] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(25)
[  101.821848][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  101.829431][ T5855] vhci_hcd vhci_hcd.0: Device attached
[  101.857226][ T5197] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[  101.869944][ T5887] vhci_hcd: connection closed
[  101.870067][ T5885] vhci_hcd: connection closed
[  101.873359][ T5199] vhci_hcd: stop threads
[  101.883915][ T5199] vhci_hcd: release socket
[  101.888344][ T5199] vhci_hcd: disconnect device
[  101.893312][ T5858] vhci_hcd: connection reset by peer
[  101.902427][ T5873] vhci_hcd: connection closed
[  101.905575][ T5871] vhci_hcd: connection closed
[  101.906915][ T5882] vhci_hcd: connection closed
[  101.910420][ T5869] vhci_hcd: connection closed
[  101.915767][ T5199] vhci_hcd: stop threads
[  101.928868][ T5199] vhci_hcd: release socket
[  101.933415][ T5199] vhci_hcd: disconnect device
[  101.938284][ T5199] vhci_hcd: stop threads
[  101.942563][ T5199] vhci_hcd: release socket
[  101.947174][ T5199] vhci_hcd: disconnect device
[  101.952078][ T5199] vhci_hcd: stop threads
[  101.956375][ T5199] vhci_hcd: release socket
[  101.960828][ T5199] vhci_hcd: disconnect device
[  101.965830][ T5199] vhci_hcd: stop threads
[  101.970080][ T5199] vhci_hcd: release socket
[  101.974560][ T5199] vhci_hcd: disconnect device
[  101.979574][ T5199] vhci_hcd: stop threads
[  101.983883][ T5199] vhci_hcd: release socket
[  101.988668][ T5199] vhci_hcd: disconnect device
[  101.994869][ T5199] vhci_hcd: stop threads
[  101.999135][ T5199] vhci_hcd: release socket
[  102.003673][ T5199] vhci_hcd: disconnect device
[  102.005258][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.026690][ T5899] __nla_validate_parse: 11 callbacks suppressed
[  102.026706][ T5899] netlink: 14 bytes leftover after parsing attributes in process `gtp'.
[  102.046677][ T5899] netlink: 12 bytes leftover after parsing attributes in process `gtp'.
[  102.080318][ T5905] loop0: detected capacity change from 0 to 2048
[  102.127919][ T5905]  loop0: p2 p3 p7
[  102.447733][ T5917] loop0: detected capacity change from 0 to 764
[  102.470005][ T5917] rock: directory entry would overflow storage
[  102.476300][ T5917] rock: sig=0x4f50, size=4, remaining=3
[  102.481880][ T5917] iso9660: Corrupted directory entry in block 6 of inode 1792
[  102.526567][ T5904] geneve2: entered promiscuous mode
[  102.531916][ T5904] geneve2: entered allmulticast mode
[  102.579642][ T5908] 
: renamed from bond0
[  103.096793][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  103.264817][ T5935] netlink: 'syz.3.683': attribute type 4 has an invalid length.
[  103.657738][ T5945] loop3: detected capacity change from 0 to 1024
[  103.683624][ T5945] EXT4-fs: inline encryption not supported
[  103.715006][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.920870][   T29] kauditd_printk_skb: 476 callbacks suppressed
[  103.920886][   T29] audit: type=1326 audit(1757937312.112:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9422b2eba9 code=0x0
[  104.003274][   T29] audit: type=1400 audit(1757937312.162:3451): avc:  denied  { ioctl } for  pid=5952 comm="syz.0.688" path="socket:[13070]" dev="sockfs" ino=13070 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  104.063422][   T29] audit: type=1400 audit(1757937312.222:3452): avc:  denied  { write } for  pid=5931 comm="syz.1.682" path="socket:[13044]" dev="sockfs" ino=13044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  104.148513][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.175421][   T29] audit: type=1326 audit(1757937312.372:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.198869][   T29] audit: type=1326 audit(1757937312.372:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.222880][   T29] audit: type=1326 audit(1757937312.372:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.246380][   T29] audit: type=1326 audit(1757937312.372:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.269911][   T29] audit: type=1326 audit(1757937312.422:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.293325][   T29] audit: type=1326 audit(1757937312.422:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.299050][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'.
[  104.316739][   T29] audit: type=1326 audit(1757937312.422:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  104.464879][ T5967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5967 comm=syz.5.690
[  104.514679][ T5969] loop1: detected capacity change from 0 to 512
[  104.537086][ T5969] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.691: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  104.560796][ T5969] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.691: Bad quota inode: 3, type: 0
[  104.572032][ T5969] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  104.586946][ T5969] EXT4-fs (loop1): mount failed
[  104.643813][ T5966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.691'.
[  104.653090][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'.
[  105.078256][ T5984] netlink: 154 bytes leftover after parsing attributes in process `syz.3.697'.
[  105.090575][ T5984] netlink: zone id is out of range
[  105.096012][ T5984] netlink: zone id is out of range
[  105.101193][ T5984] netlink: zone id is out of range
[  105.106371][ T5984] netlink: zone id is out of range
[  105.111653][ T5984] netlink: zone id is out of range
[  105.117311][ T5984] netlink: zone id is out of range
[  105.122438][ T5984] netlink: zone id is out of range
[  105.127596][ T5984] netlink: zone id is out of range
[  105.132743][ T5984] netlink: zone id is out of range
[  105.137898][ T5984] netlink: zone id is out of range
[  105.170326][ T5988] loop0: detected capacity change from 0 to 512
[  105.180548][ T5988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.200620][ T5989] syzkaller0: entered promiscuous mode
[  105.206282][ T5989] syzkaller0: entered allmulticast mode
[  105.216086][ T5988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.229758][ T5988] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.250627][ T5988] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.265015][ T5988] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.274217][ T5988] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.288134][ T5988] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.313346][ T5988] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.329543][ T5995] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.329775][ T5988] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.360242][ T5995] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.360272][ T5988] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.370827][ T5995] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.409976][ T5998] loop5: detected capacity change from 0 to 164
[  105.419531][ T5995] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.456499][ T5998] bio_check_eod: 19 callbacks suppressed
[  105.456514][ T5998] syz.5.701: attempt to access beyond end of device
[  105.456514][ T5998] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  105.482436][ T5995] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.507283][ T5988] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.522569][ T5988] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.533284][ T5998] syz.5.701: attempt to access beyond end of device
[  105.533284][ T5998] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  105.554715][ T5988] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  105.583457][ T5995] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.698: corrupted xattr block 19: overlapping e_value 
[  105.614994][ T5995] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  105.795963][ T5988] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  105.802522][ T5988] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  105.810259][ T5988] vhci_hcd vhci_hcd.0: Device attached
[  105.824064][ T6005] loop1: detected capacity change from 0 to 1024
[  105.834823][ T6011] vhci_hcd: connection closed
[  105.834940][ T6014] 9pnet_fd: Insufficient options for proto=fd
[  105.835859][ T6005] EXT4-fs: Ignoring removed nobh option
[  105.839829][ T5210] vhci_hcd: stop threads
[  105.845790][ T6005] EXT4-fs: Ignoring removed bh option
[  105.861262][ T5210] vhci_hcd: release socket
[  105.865727][ T5210] vhci_hcd: disconnect device
[  105.884253][ T6014] loop5: detected capacity change from 0 to 764
[  105.913698][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.934464][ T6014] Symlink component flag not implemented
[  105.991927][ T6005] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.703: Allocating blocks 385-513 which overlap fs metadata
[  106.079572][ T6004] EXT4-fs (loop1): pa ffff8881072695b0: logic 16, phys. 129, len 24
[  106.087687][ T6004] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  106.134491][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.354812][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.435567][ T6035] loop3: detected capacity change from 0 to 512
[  106.454817][ T6035] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  106.468439][ T6035] EXT4-fs (loop3): 1 truncate cleaned up
[  106.474567][ T6035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.506099][ T6036] loop5: detected capacity change from 0 to 1024
[  106.523493][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.669359][ T6046] loop5: detected capacity change from 0 to 512
[  106.676632][ T6046] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.891944][ T6051] lo speed is unknown, defaulting to 1000
[  106.898665][ T6051] lo speed is unknown, defaulting to 1000
[  107.155615][ T1044] usb 12-1: device descriptor read/8, error -110
[  107.263648][ T1044] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  107.283297][ T1044] usb 12-1: enqueue for inactive port 0
[  107.295706][ T1044] usb 12-1: enqueue for inactive port 0
[  107.303447][ T1044] usb 12-1: enqueue for inactive port 0
[  107.371333][ T6062] netlink: 14 bytes leftover after parsing attributes in process `syz.5.728'.
[  107.539909][ T6062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.586006][ T6062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.686676][ T6062] bond0 (unregistering): Released all slaves
[  107.800342][ T6064] lo speed is unknown, defaulting to 1000
[  107.806464][ T6064] lo speed is unknown, defaulting to 1000
[  107.814692][ T6070] 9pnet_fd: Insufficient options for proto=fd
[  107.867582][ T6070] loop3: detected capacity change from 0 to 764
[  107.942734][ T6070] Symlink component flag not implemented
[  108.051451][ T6069] netlink: 'syz.4.720': attribute type 1 has an invalid length.
[  108.071192][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.085261][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'.
[  108.182411][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.724'.
[  108.195276][ T6080] vhci_hcd: invalid port number 96
[  108.200444][ T6080] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  108.244776][ T6086] loop3: detected capacity change from 0 to 2048
[  108.404261][ T3295]  loop3: p1 < > p4
[  108.413315][ T3295] loop3: p4 start 42180 is beyond EOD, truncated
[  108.427623][ T6086]  loop3: p1 < > p4
[  108.434586][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.724'.
[  108.450864][ T6084] lo speed is unknown, defaulting to 1000
[  108.457381][ T6084] lo speed is unknown, defaulting to 1000
[  108.510443][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  108.604981][ T6086] loop3: p4 start 42180 is beyond EOD, truncated
[  109.298401][ T5132] hid_parser_main: 17 callbacks suppressed
[  109.298419][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1
[  109.311885][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.319354][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.326838][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.334352][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.341744][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.349282][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4
[  109.356753][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.364199][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.371619][ T5132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  109.398801][ T1044] usb usb12-port1: attempt power cycle
[  109.441602][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  109.517045][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  109.530584][ T6108] loop3: detected capacity change from 0 to 512
[  109.545856][   T29] kauditd_printk_skb: 566 callbacks suppressed
[  109.545875][   T29] audit: type=1400 audit(1757937317.702:4026): avc:  denied  { relabelfrom } for  pid=6107 comm="syz.3.732" name="NETLINK" dev="sockfs" ino=14373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  109.550755][ T3480] vhci_hcd: vhci_device speed not set
[  109.552100][   T29] audit: type=1400 audit(1757937317.702:4027): avc:  denied  { relabelto } for  pid=6107 comm="syz.3.732" name="NETLINK" dev="sockfs" ino=14373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1
[  109.654602][ T5132] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  109.664914][ T6108] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[  109.718298][ T6108] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  109.736786][ T6114] fido_id[6114]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  109.750513][ T6108] EXT4-fs (loop3): mount failed
[  109.816283][   T29] audit: type=1400 audit(1757937317.992:4028): avc:  denied  { append } for  pid=6115 comm="syz.0.735" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  109.856369][   T29] audit: type=1400 audit(1757937318.052:4029): avc:  denied  { create } for  pid=6117 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  109.903494][   T29] audit: type=1400 audit(1757937318.052:4030): avc:  denied  { read write } for  pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  109.927879][   T29] audit: type=1400 audit(1757937318.052:4031): avc:  denied  { open } for  pid=3309 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  109.952231][   T29] audit: type=1400 audit(1757937318.052:4032): avc:  denied  { ioctl } for  pid=3309 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  109.977927][   T29] audit: type=1400 audit(1757937318.092:4033): avc:  denied  { write } for  pid=6117 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  109.979498][ T6116] lo speed is unknown, defaulting to 1000
[  109.998578][   T29] audit: type=1400 audit(1757937318.092:4034): avc:  denied  { read } for  pid=6117 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  110.041948][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'.
[  110.056298][ T6122] macvtap0: entered promiscuous mode
[  110.061654][ T6122] batadv0: entered promiscuous mode
[  110.066445][ T6110] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  110.067010][ T6122] macvtap0: entered allmulticast mode
[  110.079993][ T6122] batadv0: entered allmulticast mode
[  110.085847][ T6122] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  110.094668][ T6116] lo speed is unknown, defaulting to 1000
[  110.107188][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.121071][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'.
[  110.130916][ T6123] batadv0: left allmulticast mode
[  110.136022][ T6123] batadv0: left promiscuous mode
[  110.431279][ T6134] random: crng reseeded on system resumption
[  110.446558][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'.
[  110.455571][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'.
[  110.485348][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[  110.816490][ T6155] loop0: detected capacity change from 0 to 512
[  111.047668][ T6155] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.744: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  111.137831][ T6155] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.744: Bad quota inode: 3, type: 0
[  111.179913][ T6155] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  111.226738][ T6155] EXT4-fs (loop0): mount failed
[  111.645834][ T6176] bridge0: entered allmulticast mode
[  111.652685][ T6173] net_ratelimit: 361 callbacks suppressed
[  111.652699][ T6173] netlink: zone id is out of range
[  111.781271][ T6173] netlink: zone id is out of range
[  111.786644][ T6173] netlink: zone id is out of range
[  111.791805][ T6173] netlink: zone id is out of range
[  111.825134][ T6177] loop1: detected capacity change from 0 to 512
[  111.889709][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.891341][ T6173] netlink: zone id is out of range
[  111.913578][ T6177] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.922676][ T6173] netlink: zone id is out of range
[  111.929095][ T6173] netlink: zone id is out of range
[  111.940396][ T6173] netlink: zone id is out of range
[  111.945645][ T6173] netlink: zone id is out of range
[  111.950799][ T6173] netlink: zone id is out of range
[  112.017527][ T6176] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.750: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  112.020002][ T6189] pim6reg: entered allmulticast mode
[  112.070526][ T6189] pim6reg: left allmulticast mode
[  112.089262][ T6176] batadv0: left allmulticast mode
[  112.094994][ T6176] batadv0: left promiscuous mode
[  112.100905][ T6176] bridge0: port 1(batadv0) entered disabled state
[  112.223698][ T1044] usb usb12-port1: unable to enumerate USB device
[  112.424900][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.597859][ T6201] __nla_validate_parse: 3 callbacks suppressed
[  112.597880][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'.
[  112.613174][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'.
[  113.343101][ T6203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  113.558849][ T6191] loop8: detected capacity change from 0 to 16384
[  113.939367][ T6213] loop5: detected capacity change from 0 to 512
[  114.078567][ T6213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.091338][ T6213] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.316510][ T6215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6215 comm=syz.3.760
[  114.503335][ T6219] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  114.607834][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.624113][ T6237] loop0: detected capacity change from 0 to 2048
[  114.650835][   T29] kauditd_printk_skb: 109 callbacks suppressed
[  114.650849][   T29] audit: type=1400 audit(1757937322.842:4144): avc:  denied  { write } for  pid=6240 comm="syz.5.766" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  114.700315][   T29] audit: type=1400 audit(1757937322.892:4145): avc:  denied  { name_bind } for  pid=6239 comm="syz.1.767" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  114.722046][   T29] audit: type=1400 audit(1757937322.892:4146): avc:  denied  { read } for  pid=6239 comm="syz.1.767" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  114.743285][   T29] audit: type=1400 audit(1757937322.892:4147): avc:  denied  { open } for  pid=6239 comm="syz.1.767" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  114.753101][ T3272]  loop0: p1 < > p4
[  114.754872][ T3272] loop0: p4 size 8388608 extends beyond EOD, truncated
[  114.786797][ T6237] loop_reread_partitions: partition scan of loop0 () failed (rc=-16)
[  114.801909][ T6237] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  114.802003][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.802047][ T6237] vhci_hcd vhci_hcd.0: Device attached
[  114.811256][   T29] audit: type=1326 audit(1757937323.002:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  114.811296][   T29] audit: type=1326 audit(1757937323.002:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  114.818004][   T29] audit: type=1326 audit(1757937323.002:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  114.818132][   T29] audit: type=1326 audit(1757937323.002:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  114.818166][   T29] audit: type=1326 audit(1757937323.002:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  114.818200][   T29] audit: type=1326 audit(1757937323.002:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  114.825734][ T6245] loop1: detected capacity change from 0 to 1024
[  114.826279][ T6245] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  114.834669][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'.
[  115.089313][ T6256] loop1: detected capacity change from 0 to 1024
[  115.089587][ T6256] ext4: Unknown parameter 'mask'
[  115.125271][ T6252] netlink: 14 bytes leftover after parsing attributes in process `gtp'.
[  115.182794][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'.
[  115.469925][ T6252] hsr_slave_0: left promiscuous mode
[  115.473460][ T6252] hsr_slave_1: left promiscuous mode
[  115.521546][ T6248] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  115.618928][ T5197] vhci_hcd: stop threads
[  115.623249][ T5197] vhci_hcd: release socket
[  115.627673][ T5197] vhci_hcd: disconnect device
[  116.014599][ T6280] usb usb8: usbfs: process 6280 (syz.5.774) did not claim interface 0 before use
[  116.675699][ T6286] loop3: detected capacity change from 0 to 512
[  116.709857][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.722432][ T6286] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.264513][ T6293] random: crng reseeded on system resumption
[  117.291220][ T6284] lo speed is unknown, defaulting to 1000
[  117.306709][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.307019][ T6284] lo speed is unknown, defaulting to 1000
[  117.735366][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'.
[  117.988291][ T6309] netlink: 2 bytes leftover after parsing attributes in process `syz.5.785'.
[  118.175383][ T6309] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  118.183659][ T6309] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  118.500804][ T6319] netlink: 'syz.5.787': attribute type 29 has an invalid length.
[  118.694228][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'.
[  118.952832][ T6340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.035534][ T6340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.176423][ T6353] wireguard0: entered promiscuous mode
[  119.181962][ T6353] wireguard0: entered allmulticast mode
[  119.341465][ T6340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.548284][ T6340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.693789][ T6358] net_ratelimit: 360 callbacks suppressed
[  119.693806][ T6358] Set syz1 is full, maxelem 65536 reached
[  119.705483][   T29] kauditd_printk_skb: 395 callbacks suppressed
[  119.705496][   T29] audit: type=1326 audit(1757937327.902:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  119.766325][   T29] audit: type=1326 audit(1757937327.932:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93a54eba9 code=0x7ffc0000
[  119.833565][ T5210] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.853143][ T4668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.862385][ T4668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.871332][ T4668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.959777][ T6368] loop3: detected capacity change from 0 to 4096
[  120.018047][   T29] audit: type=1400 audit(1757937328.132:4551): avc:  denied  { write } for  pid=6364 comm="syz.5.800" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  120.041425][   T29] audit: type=1400 audit(1757937328.142:4552): avc:  denied  { read } for  pid=6364 comm="syz.5.800" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  120.065504][   T29] audit: type=1400 audit(1757937328.142:4553): avc:  denied  { open } for  pid=6364 comm="syz.5.800" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  120.219114][ T6375] audit: audit_backlog=65 > audit_backlog_limit=64
[  120.225838][ T6375] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  120.233621][ T6375] audit: backlog limit exceeded
[  120.240806][ T6379] loop1: detected capacity change from 0 to 512
[  120.253997][ T6375] audit: audit_backlog=65 > audit_backlog_limit=64
[  120.260599][ T6375] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  120.281456][ T6368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.372691][ T6379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.414539][ T6379] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.428019][ T6368] EXT4-fs: Ignoring removed orlov option
[  120.435615][ T6368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.450857][ T6379] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.802: corrupted inode contents
[  120.594772][ T6379] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.802: mark_inode_dirty error
[  120.608748][ T6379] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.802: corrupted inode contents
[  120.622105][ T6368] EXT4-fs (loop3): can't enable nombcache during remount
[  120.652096][ T6379] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.802: mark_inode_dirty error
[  120.672345][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.684278][ T6379] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.802: Failed to acquire dquot type 1
[  120.730874][ T6389] loop3: detected capacity change from 0 to 512
[  120.734261][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.802: corrupted inode contents
[  120.749870][ T6389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.770327][ T6374] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.802: mark_inode_dirty error
[  120.782704][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.802: corrupted inode contents
[  120.796938][ T6374] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.802: mark_inode_dirty error
[  120.809625][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.809688][ T6374] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.802: Failed to acquire dquot type 1
[  120.833961][ T6389] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.874943][ T6389] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  120.897125][ T6389] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  120.904044][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.915429][ T6389] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  120.953761][ T6389] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  120.953988][ T6396] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  120.962880][ T6389] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  121.019524][ T6396] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  121.038856][ T6396] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  121.043425][ T6389] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  121.065949][ T6399] loop1: detected capacity change from 0 to 512
[  121.085334][ T6396] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  121.110612][ T6389] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  121.142234][ T6399] EXT4-fs: Ignoring removed nobh option
[  121.147329][ T6401] delete_channel: no stack
[  121.152916][ T6396] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  121.163123][ T6389] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  121.179035][ T6399] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.808: corrupted inode contents
[  121.194337][ T6407] sctp: [Deprecated]: syz.4.810 (pid 6407) Use of int in maxseg socket option.
[  121.194337][ T6407] Use struct sctp_assoc_value instead
[  121.209430][ T6389] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  121.225780][ T6389] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  121.243363][ T6399] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.808: mark_inode_dirty error
[  121.258784][ T6399] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.808: corrupted inode contents
[  121.268238][ T6402] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.805: corrupted xattr block 19: overlapping e_value 
[  121.284791][ T6399] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.808: mark_inode_dirty error
[  121.304967][ T6399] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.808: Failed to acquire dquot type 0
[  121.321715][ T6402] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  121.354288][ T6399] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.808: corrupted inode contents
[  121.375264][ T6389] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  121.381840][ T6389] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  121.389569][ T6389] vhci_hcd vhci_hcd.0: Device attached
[  121.403759][ T6399] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.808: mark_inode_dirty error
[  121.427037][ T6410] vhci_hcd: connection closed
[  121.427408][ T5182] vhci_hcd: stop threads
[  121.436441][ T5182] vhci_hcd: release socket
[  121.440887][ T5182] vhci_hcd: disconnect device
[  121.454490][ T6399] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.808: corrupted inode contents
[  121.483903][ T6399] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.808: mark_inode_dirty error
[  121.508361][ T6399] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.808: corrupted inode contents
[  121.539712][ T6399] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  121.564338][ T6399] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.808: corrupted inode contents
[  121.591648][ T6413] loop5: detected capacity change from 0 to 2048
[  121.598759][ T6399] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.808: mark_inode_dirty error
[  121.613933][ T6399] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  121.641857][ T6399] EXT4-fs (loop1): 1 truncate cleaned up
[  121.654300][ T6399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.654696][ T6413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  121.669562][ T6399] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.702714][ T6399] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.746267][ T6419] loop0: detected capacity change from 0 to 512
[  121.803629][ T6419] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  121.840160][ T6420] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  121.855593][ T6420] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1964 with error 28
[  121.856641][ T6419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  121.868076][ T6420] EXT4-fs (loop5): This should not happen!! Data will be lost
[  121.868076][ T6420] 
[  121.868098][ T6420] EXT4-fs (loop5): Total free blocks count 0
[  121.868115][ T6420] EXT4-fs (loop5): Free/Dirty block details
[  121.868193][ T6420] EXT4-fs (loop5): free_blocks=2415919104
[  121.890970][ T6419] System zones: 
[  121.891955][ T6420] EXT4-fs (loop5): dirty_blocks=1968
[  121.891972][ T6420] EXT4-fs (loop5): Block reservation details
[  121.891983][ T6420] EXT4-fs (loop5): i_reserved_data_blocks=123
[  121.924696][ T6419] 1-12
[  121.948022][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.958533][ T6419] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.812: corrupted in-inode xattr: e_value size too large
[  121.985173][ T6419] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.812: couldn't read orphan inode 15 (err -117)
[  121.999286][ T6419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.060359][ T4668] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  122.236170][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.303574][ T6438] wireguard0: entered promiscuous mode
[  122.309094][ T6438] wireguard0: entered allmulticast mode
[  122.555234][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'.
[  122.620851][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.818'.
[  122.657061][ T6447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6447 comm=syz.4.818
[  122.675307][ T6447] netlink: 'syz.4.818': attribute type 1 has an invalid length.
[  122.854908][ T6458] loop3: detected capacity change from 0 to 512
[  122.953690][ T6456] netlink: 'syz.4.819': attribute type 1 has an invalid length.
[  122.983314][ T6460] loop8: detected capacity change from 16384 to 16383
[  123.075215][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.114300][ T6462] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.822'.
[  123.134091][ T6462] netlink: zone id is out of range
[  123.145145][ T6462] netlink: zone id is out of range
[  123.174565][ T6462] netlink: del zone limit has 8 unknown bytes
[  123.229374][ T6457] geneve2: entered promiscuous mode
[  123.234758][ T6457] geneve2: entered allmulticast mode
[  123.388388][ T6473] loop5: detected capacity change from 0 to 512
[  123.407157][ T6473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.503562][ T6473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.528006][ T6473] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.576818][ T6473] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.591562][ T6473] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  123.602047][ T6473] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.617359][ T6473] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  123.626668][ T6473] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.643956][ T6486] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.651103][ T6473] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  123.669767][ T6473] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.670003][ T6486] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  123.704333][ T6473] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.737160][ T6491] loop1: detected capacity change from 0 to 512
[  123.784014][ T6491] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  123.796177][ T6486] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.808695][ T6492] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  123.808695][ T6492]    program syz.3.839 not setting count and/or reply_len properly
[  123.843747][ T6473] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  123.858636][ T6491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  123.886606][ T6473] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  123.901299][ T6491] System zones: 1-12
[  123.920268][ T6486] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  123.920286][ T6491] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.828: corrupted in-inode xattr: e_value size too large
[  123.920511][ T6486] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  123.958634][ T6491] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.828: couldn't read orphan inode 15 (err -117)
[  123.972246][ T6491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.015434][ T6473] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.824: corrupted xattr block 19: overlapping e_value 
[  124.035534][ T6473] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  124.105321][ T6473] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  124.111965][ T6473] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  124.119871][ T6473] vhci_hcd vhci_hcd.0: Device attached
[  124.133988][ T6502] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  124.201815][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'.
[  124.302039][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'.
[  124.508889][ T6504] vhci_hcd: connection closed
[  124.563489][ T5197] vhci_hcd: stop threads
[  124.572481][ T5197] vhci_hcd: release socket
[  124.576933][ T5197] vhci_hcd: disconnect device
[  124.714213][   T29] kauditd_printk_skb: 665 callbacks suppressed
[  124.714232][   T29] audit: type=1326 audit(1757937332.902:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  124.822383][   T29] audit: type=1326 audit(1757937333.002:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feff3085b67 code=0x7ffc0000
[  124.846116][   T29] audit: type=1326 audit(1757937333.002:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feff302ada9 code=0x7ffc0000
[  124.869777][   T29] audit: type=1326 audit(1757937333.002:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  124.893126][   T29] audit: type=1326 audit(1757937333.002:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  124.896190][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.916580][   T29] audit: type=1326 audit(1757937333.002:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  124.948813][   T29] audit: type=1326 audit(1757937333.002:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  124.972238][   T29] audit: type=1326 audit(1757937333.002:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  124.995612][   T29] audit: type=1326 audit(1757937333.002:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  125.018916][   T29] audit: type=1326 audit(1757937333.002:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  125.092354][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.131198][ T6519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6519 comm=syz.1.835
[  125.181515][ T6523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.836'.
[  125.658761][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'.
[  125.667717][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'.
[  126.305444][ T6529] geneve2: entered promiscuous mode
[  126.310720][ T6529] geneve2: entered allmulticast mode
[  126.705616][ T6555] random: crng reseeded on system resumption
[  126.721929][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'.
[  127.270661][ T6562] loop5: detected capacity change from 0 to 128
[  127.281019][ T6561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.287939][ T6565] loop1: detected capacity change from 0 to 512
[  127.308224][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  127.312581][ T6562] syz.5.847: attempt to access beyond end of device
[  127.312581][ T6562] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128
[  127.355507][ T6565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.370378][ T6568] loop0: detected capacity change from 0 to 2048
[  127.404951][ T6562] syz.5.847: attempt to access beyond end of device
[  127.404951][ T6562] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128
[  127.418390][ T6562] buffer_io_error: 4 callbacks suppressed
[  127.418410][ T6562] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  127.444548][ T6565] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.459857][ T3295]  loop0: p2 p3 p7
[  127.482136][ T6568]  loop0: p2 p3 p7
[  127.506876][ T6565] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.543380][ T6562] syz.5.847: attempt to access beyond end of device
[  127.543380][ T6562] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128
[  127.546637][ T2994]  loop0: p2 p3 p7
[  127.556838][ T6562] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  127.572359][ T6565] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  127.581574][ T6565] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.583260][ T6579] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.597834][ T6565] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  127.619674][ T6565] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.653561][ T6562] syz.5.847: attempt to access beyond end of device
[  127.653561][ T6562] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128
[  127.685934][ T6562] syz.5.847: attempt to access beyond end of device
[  127.685934][ T6562] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128
[  127.688398][ T6574] syz.5.847: attempt to access beyond end of device
[  127.688398][ T6574] loop5: rw=2049, sector=218, nr_sectors = 32 limit=128
[  127.699789][ T6565] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  127.737492][ T6579] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  127.762055][ T6574] syz.5.847: attempt to access beyond end of device
[  127.762055][ T6574] loop5: rw=2049, sector=138, nr_sectors = 16 limit=128
[  127.797815][ T6565] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.798850][ T6579] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.821820][ T6574] syz.5.847: attempt to access beyond end of device
[  127.821820][ T6574] loop5: rw=2049, sector=170, nr_sectors = 16 limit=128
[  127.833676][ T6562] syz.5.847: attempt to access beyond end of device
[  127.833676][ T6562] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128
[  127.851849][ T6562] Buffer I/O error on dev loop5, logical block 95, lost async page write
[  127.854445][ T6574] syz.5.847: attempt to access beyond end of device
[  127.854445][ T6574] loop5: rw=2049, sector=202, nr_sectors = 16 limit=128
[  127.881026][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  127.884794][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  127.895191][ T6565] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  127.902474][ T3272] udevd[3272]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  127.945093][ T6562] Buffer I/O error on dev loop5, logical block 96, lost async page write
[  127.969674][ T6565] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  127.984477][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  127.985277][ T3272] udevd[3272]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  128.008796][ T6562] Buffer I/O error on dev loop5, logical block 99, lost async page write
[  128.014882][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  128.028385][ T6565] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  128.041932][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  128.044510][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  128.057021][ T3272] udevd[3272]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  128.074150][ T6562] Buffer I/O error on dev loop5, logical block 100, lost async page write
[  128.089832][ T6593] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  128.113583][ T6593] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  128.127987][ T6569] loop3: detected capacity change from 0 to 512
[  128.135738][ T6586] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  128.136485][ T6593] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.846: corrupted xattr block 19: overlapping e_value 
[  128.142282][ T6586] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  128.163697][ T6586] vhci_hcd vhci_hcd.0: Device attached
[  128.179084][ T6579] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  128.204642][ T6585] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  128.255085][ T6596] vhci_hcd: connection closed
[  128.398990][ T6599] loop3: detected capacity change from 0 to 128
[  128.419057][ T5160] vhci_hcd: stop threads
[  128.423429][ T5160] vhci_hcd: release socket
[  128.427900][ T5160] vhci_hcd: disconnect device
[  128.455867][ T3480] Process accounting resumed
[  128.483551][ T1044] usb 4-1: enqueue for inactive port 0
[  128.606463][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'.
[  128.687003][ T6616] loop0: detected capacity change from 0 to 512
[  128.695592][ T1044] usb 4-1: enqueue for inactive port 0
[  128.714769][ T6616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  128.761333][ T6616] EXT4-fs (loop0): 1 truncate cleaned up
[  128.828597][ T6616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.901687][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.912498][ T6626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6626 comm=syz.3.862
[  128.926331][ T6616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.984522][ T6626] bridge0: port 1(syz_tun) entered blocking state
[  128.991061][ T6626] bridge0: port 1(syz_tun) entered disabled state
[  129.006870][ T6626] syz_tun: entered allmulticast mode
[  129.009555][ T6628] netlink: 39 bytes leftover after parsing attributes in process `syz.1.863'.
[  129.025604][ T6626] syz_tun: entered promiscuous mode
[  129.032009][ T6628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.863'.
[  129.106402][ T6624] lo speed is unknown, defaulting to 1000
[  129.136809][ T6624] lo speed is unknown, defaulting to 1000
[  129.467968][ T6639] netlink: 176 bytes leftover after parsing attributes in process `syz.3.867'.
[  129.504277][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'.
[  129.547989][ T6639] loop3: detected capacity change from 0 to 1024
[  129.577635][ T6639] EXT4-fs: Ignoring removed nobh option
[  129.605602][ T6639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.631205][ T6639] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  129.663987][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'.
[  129.672990][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'.
[  129.735118][   T29] kauditd_printk_skb: 905 callbacks suppressed
[  129.735137][   T29] audit: type=1326 audit(1757937337.922:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  129.764909][   T29] audit: type=1326 audit(1757937337.922:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  129.788232][   T29] audit: type=1326 audit(1757937337.922:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  129.811665][   T29] audit: type=1326 audit(1757937337.922:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff308eba9 code=0x7ffc0000
[  129.851853][ T1044] usb usb4-port1: attempt power cycle
[  129.927625][ T6656] lo speed is unknown, defaulting to 1000
[  129.933829][ T6656] lo speed is unknown, defaulting to 1000
[  130.118582][ T6660] sd 0:0:1:0: device reset
[  130.285947][   T29] audit: type=1400 audit(1757937338.292:6127): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  130.306107][   T29] audit: type=1400 audit(1757937338.322:6128): avc:  denied  { write } for  pid=6661 comm="syz.5.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  130.336372][ T6670] loop0: detected capacity change from 0 to 1024
[  130.343126][ T6670] EXT4-fs: Ignoring removed orlov option
[  130.367405][   T29] audit: type=1326 audit(1757937338.542:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  130.390792][   T29] audit: type=1326 audit(1757937338.542:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  130.414164][   T29] audit: type=1326 audit(1757937338.542:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  130.437554][   T29] audit: type=1326 audit(1757937338.542:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91616beba9 code=0x7ffc0000
[  130.477594][ T6670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.552903][ T6670] netlink: 196 bytes leftover after parsing attributes in process `syz.0.873'.
[  130.759174][ T6670] ==================================================================
[  130.763365][ T6658] loop1: detected capacity change from 0 to 1024
[  130.767320][ T6670] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode
[  130.778334][ T6680] lo speed is unknown, defaulting to 1000
[  130.781981][ T6670] 
[  130.781991][ T6670] write to 0xffff888119c701a0 of 4 bytes by task 6678 on cpu 0:
[  130.788851][ T6658] EXT4-fs: Ignoring removed nobh option
[  130.790051][ T6670]  writeback_single_inode+0x14a/0x3e0
[  130.798632][ T6680] lo speed is unknown, defaulting to 1000
[  130.803240][ T6670]  sync_inode_metadata+0x5b/0x90
[  130.803279][ T6670]  generic_buffers_fsync_noflush+0xd9/0x120
[  130.803302][ T6670]  ext4_sync_file+0x1ab/0x690
[  130.803319][ T6670]  vfs_fsync_range+0x10d/0x130
[  130.834663][ T6670]  ext4_buffered_write_iter+0x34f/0x3c0
[  130.840249][ T6670]  ext4_file_write_iter+0x383/0xf00
[  130.845492][ T6670]  iter_file_splice_write+0x663/0xa60
[  130.850872][ T6670]  direct_splice_actor+0x153/0x2a0
[  130.855992][ T6670]  splice_direct_to_actor+0x30f/0x680
[  130.861369][ T6670]  do_splice_direct+0xda/0x150
[  130.866138][ T6670]  do_sendfile+0x380/0x650
[  130.870573][ T6670]  __x64_sys_sendfile64+0x105/0x150
[  130.875797][ T6670]  x64_sys_call+0x2bb0/0x2ff0
[  130.880486][ T6670]  do_syscall_64+0xd2/0x200
[  130.885011][ T6670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.890917][ T6670] 
[  130.893252][ T6670] read to 0xffff888119c701a0 of 4 bytes by task 6670 on cpu 1:
[  130.900805][ T6670]  __mark_inode_dirty+0x191/0x750
[  130.905838][ T6670]  ext4_write_inline_data_end+0x3e5/0x5f0
[  130.911569][ T6670]  ext4_write_end+0x3d7/0x730
[  130.916258][ T6670]  generic_perform_write+0x30f/0x490
[  130.921547][ T6670]  ext4_buffered_write_iter+0x1ee/0x3c0
[  130.927105][ T6670]  ext4_file_write_iter+0x383/0xf00
[  130.932342][ T6670]  iter_file_splice_write+0x663/0xa60
[  130.937751][ T6670]  direct_splice_actor+0x153/0x2a0
[  130.942872][ T6670]  splice_direct_to_actor+0x30f/0x680
[  130.948255][ T6670]  do_splice_direct+0xda/0x150
[  130.953025][ T6670]  do_sendfile+0x380/0x650
[  130.957453][ T6670]  __x64_sys_sendfile64+0x105/0x150
[  130.962660][ T6670]  x64_sys_call+0x2bb0/0x2ff0
[  130.967347][ T6670]  do_syscall_64+0xd2/0x200
[  130.971872][ T6670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.977792][ T6670] 
[  130.980123][ T6670] value changed: 0x00000038 -> 0x00000002
[  130.985842][ T6670] 
[  130.988163][ T6670] Reported by Kernel Concurrency Sanitizer on:
[  130.994322][ T6670] CPU: 1 UID: 0 PID: 6670 Comm: syz.0.873 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  131.005562][ T6670] Tainted: [W]=WARN
[  131.009393][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  131.019488][ T6670] ==================================================================
[  131.045021][ T6658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.167885][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.301484][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.943487][ T1044] usb usb4-port1: unable to enumerate USB device