last executing test programs:

1m0.300036569s ago: executing program 1 (id=2841):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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")
lseek(0xffffffffffffffff, 0x64da, 0x4) (async, rerun: 32)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) (rerun: 32)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x101201, 0xc9)
writev(r0, &(0x7f0000012f40)=[{&(0x7f0000011940)="8f", 0x1}], 0x1) (async)
ioctl$KDSKBLED(r0, 0x4b65, 0x3000000) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) (async)
r3 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64)
epoll_create1(0x80000) (async, rerun: 64)
epoll_create1(0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x12, &(0x7f00000008c0)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x67}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x6}, 0x18) (async)
setrlimit(0x9, 0x0) (async)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) (async)
io_setup(0xbf, &(0x7f0000000100))

1m0.072835464s ago: executing program 1 (id=2846):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

1m0.072334004s ago: executing program 1 (id=2847):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

1m0.034460524s ago: executing program 1 (id=2848):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32=r1], 0x20, 0x4e0c0}, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x0, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r5, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfeffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r3, 0x3}, &(0x7f0000000380)=0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)

59.184084621s ago: executing program 1 (id=2867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@private0, 0x0, 0xa}}]}, 0xcc}}, 0x0)

58.942766425s ago: executing program 1 (id=2871):
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600))
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, 0x0)

58.927664006s ago: executing program 32 (id=2871):
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600))
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, 0x0)

34.558297588s ago: executing program 2 (id=3224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
close_range(r2, 0xffffffffffffffff, 0x0)

34.396921562s ago: executing program 2 (id=3229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x880784, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0x1, 0x49f, &(0x7f0000001340)="$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")
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80005cfcc175}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_usbip_server_init(0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
write$usbip_server(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x50)

33.037673038s ago: executing program 2 (id=3264):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000004c0)={0x2, 0x4c21, @loopback}, 0x10)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESDEC=r3], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4)
socket$unix(0x1, 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x3, 0x24, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000002000}, 0x120, 0x400, 0x2000000, 0x7, 0x32bf04cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2, 0xffffffff, 0x4}, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
syz_clone(0x3104100, 0x0, 0xf, 0x0, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[], 0x58)
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x249040, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x602, &(0x7f0000001200)="$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")
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580), &(0x7f00000005c0)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2beb37c07231bf47b5c5d71cea054d0340f614f16a44ac18b9ec855780a1f2478d8440d00bfc74f955503dcac930488612acd4b9cc1a8c1c7c54b02cc704f1da759c09e435606851019f0fec6967cac8277ead3eeb5493306804c760a5b11e9f92dc976b10bb8e7c9baefec4ec642c9a725157a015f5425bc3fbc31f533b262c76694db189f436a97a633a16aae29aec3543f16698e4c69627cac56cac2d123588f870e1dd38c292ebbb7a94c303708b2dfbc642dd0f0b08a357b41b9ffdeafa26b39d32cf2dec3ec73a77aebb66bf0fb85ee03100"/223], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x6a040000)
unshare(0x10000400)
socket$inet6(0xa, 0x80000, 0x84)

32.565523638s ago: executing program 2 (id=3275):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7fffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000080)={[{@fat=@tz_utc}, {@uni_xlate}, {@fat=@discard}, {@utf8no}, {@uni_xlate}, {@rodir}, {@utf8}]}, 0x1, 0x247, &(0x7f0000000840)="$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")
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
ftruncate(r5, 0x3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3800042, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@prjquota}, {@data_err_ignore}, {@nodiscard}, {@sysvgroups}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r7 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0)
ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000080)=0x3f)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r8, 0x0, 0x0, 0x8000c62)
copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0xae8, 0x863, 0x0)
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r9)

30.941596929s ago: executing program 2 (id=3302):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r4 = socket(0x22, 0x6, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xf567}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000540)={<r9=>0x0})
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r9, 0x1, r10})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote})
write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="00006003ffffffffffffffffffffffff8100250008004500002000002000fc2f900900000000e000000180006558000c907841100000"], 0x36)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000000000))

30.617116186s ago: executing program 2 (id=3310):
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008cc0000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
r4 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r6 = openat(r4, &(0x7f0000004400)='./bus\x00', 0x761402, 0x1)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)

30.598892666s ago: executing program 33 (id=3310):
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008cc0000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
r4 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r6 = openat(r4, &(0x7f0000004400)='./bus\x00', 0x761402, 0x1)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)

2.636768249s ago: executing program 3 (id=3889):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000000000084000000010000000a00ff0f048000009ba4c20708000000c3846e8699f04cfdf971f141550700000000000000fcffffffe01728d0e5d20820faf305a365426dc5bbd254c87f84741d83440fd2ba99c6fd", @ANYRES32=0x0], 0x2c, 0x20004000}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
r3 = socket(0x200000100000011, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @local}, 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)

2.614875559s ago: executing program 3 (id=3891):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928c4a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf5e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a56da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a018e506ed"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000400)="21d81403799a", 0x6}], 0x1}, 0x800)
pread64(r2, &(0x7f00000001c0)=""/185, 0xb9, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01010000020000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000110001002cbd7000fedbdf25fe8000000000000000000000000000bb000004d308003c002c0015005d0735000500000014000d00e000000200000000ff00000000000000"], 0x48}}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000))
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000280))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})

1.697877827s ago: executing program 3 (id=3912):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$qrtrtun(r0, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769", 0x345)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10)

1.577173559s ago: executing program 3 (id=3918):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001640), 0x80, 0x0)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x128}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2009})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x4)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x7, r2, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

1.53150054s ago: executing program 3 (id=3920):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(0x0, 0x60840, 0x0)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x5]}, &(0x7f00000000c0)=0x6)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200000000000000, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

1.217993866s ago: executing program 0 (id=3927):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x7, 0x48000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xffe)
ioctl$TCSETS(r2, 0x40045431, 0x0)
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
r5 = dup3(r4, r2, 0x0)
ioctl$TIOCSTI(r5, 0x402c542c, &(0x7f0000000000)=0xff)

1.076856569s ago: executing program 5 (id=3935):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3b46bed5b83bbad6, 0x8}, {0x8}}, [@TCA_RATE={0x6, 0x5, {0xba, 0x7}}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000005c, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.055515039s ago: executing program 5 (id=3937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20020810}, 0x0)

1.037469949s ago: executing program 5 (id=3939):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

1.01829823s ago: executing program 5 (id=3941):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r0 = gettid()
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
wait4(0x0, 0x0, 0x20000000, &(0x7f00000001c0))
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@map, 0xffffffffffffffff, 0x33, 0x10}, 0x20)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15)
dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)

754.036615ms ago: executing program 4 (id=3950):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
close(0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

636.545677ms ago: executing program 3 (id=3953):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x880784, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0x1, 0x49f, &(0x7f0000001340)="$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")
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80005cfcc175}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r3 = syz_usbip_server_init(0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
write$usbip_server(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x50)

564.026069ms ago: executing program 6 (id=3956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x9, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0))
io_setup(0x2, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a091dcf44910000000000020000070900020073797a32000000000900010073797a3000000000200004801c0001800b00010065787468647200000c0002800800064000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x1a, 0x0, 0xd}, 0x28)
r2 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x1, 0x55e, &(0x7f0000000a80)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="94d95e698dcdce8ac20d5580fd08eb4fa22499d302e2cbb21efa440df934498135185459b2f3d290ccfbe2016d41d5d28a27be169aff81a9b3993327f20fe90a16bda66a3ed68ef0e462eed37ebd31dccb46ce6cbd913eae318a3dd9441d7725689a01467ed4736c7383d346479ea408d88b0f7142f3fe60c83069416c31226c0c119bc8cc8db4477f42fc9aa61e0111484344aab6db206c844e88ccfc12b35f851eb1f371e500877615e6b464fd8a18489632cc1cba94e7220ddc682c0ed857fd884d17899479d0cd82", @ANYBLOB="b83e794b3741b34cdcdc11d82f2ead38229f6df187933b269666441d07bc5d0bc44961ea79553e7f234bdaf970971e387c80b0ad67051cbe7b79ea13baf72af009bb749a510826242751de80381dd80fcf72259c4c0e198c269e16e167a45d8f8ae075258644e299d4669f9c2bd4eb40a9992f0391ba6923d9ab15069e80b8eaf103e1d6667f8419c0880343acae54c0da8550984f00e13a5e81", @ANYRES64=r4, @ANYRES32=r2], 0x19)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x26, 0x3, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0xfffe, 0x1000, 0x6, 0x8000000008, 0x120005, 0xb, 0x0, 0x20000, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x3, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x1, 0x0, 'queue0\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000d40)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x40000000, 0x0, 0x9}, 0x8})

513.24922ms ago: executing program 4 (id=3957):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001640), 0x80, 0x0)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x128}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2009})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x4)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x7, r2, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

481.35733ms ago: executing program 4 (id=3958):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000000000084000000010000000a00ff0f048000009ba4c20708000000c3846e8699f04cfdf971f141550700000000000000fcffffffe01728d0e5d20820faf305a365426dc5bbd254c87f84741d83440fd2ba99c6fd", @ANYRES32=0x0], 0x2c, 0x20004000}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x7, 0x6, @local}, 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)

461.348361ms ago: executing program 4 (id=3959):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="188a1beafef72eaaecc78c8b5420968f680f603d101c86e0134f54feff00021dff0000000018122bd500ebc63b50ccf26567f64a16ee4091b9cf741434d4ac6f6285f014a0f519ca3aa5cbc6e7fd1c3a00b2637ae26d241b70b85eac662f46c7308f788ca3ef97bc3c8dee5b01834ed3419c5e110457d58bddde2d031c666ff469d7081062caffd034027fd89ae19b930ae5a525a900899cdeabf428fdcf9d4d77a0c532d5686ea49f7f4dea5b8efb3f24a7e4ae042be5a489b83bae24ea5b", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00')
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, 0x0, 0x40)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x6}, {0x0, 0x4}, {0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4024091}, 0x0)

455.137551ms ago: executing program 6 (id=3960):
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a3100000000540004802c000180090001007866726d000000001c000280050003000b0000000800024000000002080001400000001210000180090001006d61737100000000140001800e000100627974656f726465720000000900020073797a"], 0xe0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4e0cdd39749fb182)
r3 = socket$kcm(0xa, 0x1, 0x106)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9, 0x3}, 0x80, 0x0}, 0x24004059)
close(r3)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8)
r7 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')

424.896092ms ago: executing program 6 (id=3961):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
readlink(0x0, &(0x7f0000001200)=""/4096, 0x1000)
readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='syzkaller1\x00')

360.226533ms ago: executing program 0 (id=3962):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$tun(r2, &(0x7f00000000c0)={@void, @val={0x0, 0x3, 0x3, 0x9, 0x8, 0x401}, @eth={@broadcast, @empty, @void, {@canfd={0xd, {{0x3, 0x1}, 0x34, 0x0, 0x0, 0x0, "c96dd0c845b660d194810fbc6ca3ce9a13dba2c91a3fec79d04c4fb30025ffbdf67d42353a7b7c311acb664571984e678d8f2a2c6a33eeb5203844b77df0e095"}}}}}, 0x60)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000140)={0x7, 0x6, 0x6, 0x9, 0x9, 0xab6b})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x894)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001600)={<r6=>0x0, 0x78, "19beadf4b1011fb23aa8550b1ecde03696461120f8fb0467ff7b966fcc58d7d0d6d2d9dc0f1c059f446a89dbdead203d107bb3bb514ac158014b8a50369277ae22112236d43953de798bd075050208f43e902ca237ddec96bb0dfb6b7412f9973e8e7eb9686f1c58a220266ec7c931a8ae4d3e4e0b6df0ac"}, &(0x7f0000001680)=0x80)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000016c0)={<r7=>0x0, @in6={{0xa, 0x4e23, 0x634, @mcast2, 0x1ff}}, 0x0, 0x5}, &(0x7f0000001780)=0x90)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000017c0)={<r8=>0x0, 0xa8, "35e5f8ea17136d0504b7496aa88b24061b9db96ff419dc9015417c8525e9bbd8fdf6461df3d6827d95b0d47b3aabec78acaa5d523fe4c5918bc41433e2dd8ff0877b2a9906b3fddc83de26fa27900028556c9ecec1ab46f371933f994bac0c36560a99ce7751908f5ce805dfdf34f1aea948e8e3ea0a52d32cdb1a317792e36bb09459736060d05f87b1c2352a1855b59dbebe9350a3e5545bae73efcb748d2a3bfb24b5237d1576"}, &(0x7f0000001880)=0xb0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000018c0)={<r9=>0x0, 0x5, 0x1, [0x9]}, &(0x7f0000001900)=0xa)
sendmmsg$inet_sctp(r2, &(0x7f0000001a80)=[{&(0x7f0000000300)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000340)="beb62a973b2200f471e1f1d8383c61e7ee409d5912bce2d95c618f", 0x1b}, {&(0x7f0000000380)="b5fcb7377c0d1046ef572f279a836446955d3396f7f79fa5008ad455c3409387979e16ef667b65e26bba68d153319c144d4c7b6ae5283975d8bfa72b4a1542f18b66c6aafd18a622353d143d0bc129e4b4", 0x51}, {&(0x7f0000000400)="e0cb422f01fdbd9b2a4bc81e2915f2d2ee58ee8dbbd3879b08d0b6f19e78a7c4e767a534bf05b7b2fecd237265e7ba06884605582f6c18c188b8ac37bd64d14c404fe287b8621cea0beed2bfa383806aa0705280a3d4afa5e2e25021fe6fbfb76f7527567dd483f5a2b2b34c6d7d3c26837d61018e504b8c5eb84b93ea13618b", 0x80}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="6fcf141fc981127b313b9e61e5f4dfcfd2fc6124c5ffef13ab6d8a6e477c11d1ba4d3342c1a953ee7997268c659dd804abaa5d4a3af5d3327e80310b609de9c3fdc9668a738818ec054c06ba4e0e30dae850605bd9f3bb1a1d42ce8772b2e72ef8c29ad6b3365ea453a3d24b2578d01a035ee918bc8e6086a40b04a167056bba6a20ad39309e40ecc7ba363e4ebb067bd5c8704c64cb08f7cb387d5b96d5351c61606d1fbc038f540c0990c3befa4d57e9f335f2388fcf0cbd5ce631031d1ebc9784fdcf7ac22cec4ebf5acb3f13d9c4e1", 0xd1}], 0x5, &(0x7f0000001940)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0x7ff, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xb13, 0x8008, 0x1ff, 0xffff0001, 0x1, 0x1, 0xffff8000, r6}}, @authinfo={0x18, 0x84, 0x6, {0xd8}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x8004, 0x3, 0xb108, r7}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0xff, 0x1, 0x5, 0x401, 0x0, 0x800, 0x3, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x20e, 0x7fff, 0xd8, r9}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x138, 0x40}], 0x1, 0x1)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001ac0)={0x0, 0x0, 0x18, 0x6d0, @vifc_lcl_addr=@remote, @local}, 0x10)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @empty}, 0x0, 0x4, 0x4, 0x2}}, 0x2e)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000001c80)=0x31, 0x4)
execve(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001f40)={[&(0x7f0000001d00)='\'[{[-/\x00', &(0x7f0000001d40)='\\\x00', &(0x7f0000001d80)='\xff\xff\xff\xff\xff\xff', &(0x7f0000001dc0)='netdevsim\x00', &(0x7f0000001e00)='#.&!![@})&:\\-+{-\x00', &(0x7f0000001e40)='\x00', &(0x7f0000001e80)='netdevsim', &(0x7f0000001ec0)='(\x00', &(0x7f0000001f00)='\xff\xff\xff\xff\xff\xff']}, &(0x7f0000002000)={[&(0x7f0000001fc0)='/dev/ptp0\x00']})
quotactl_fd$Q_QUOTAON(r0, 0x1, 0x0, &(0x7f0000002040)='./file0\x00')
r10 = accept$packet(r2, 0x0, &(0x7f0000002080))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002100)={'ip_vti0\x00', &(0x7f00000020c0)={'gre0\x00', <r11=>0x0, 0x8000, 0x7800, 0x4, 0x3, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x64, 0x0, 0x2, 0x0, 0x0, @remote, @private=0xa010100, {[@noop]}}}}})
bind$packet(r10, &(0x7f0000002140)={0x11, 0x19, r11, 0x1, 0x6, 0x6, @remote}, 0x14)
getdents64(r3, &(0x7f0000002180)=""/123, 0x7b)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002440)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002240)={0x1b8, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x30}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd120}, {0x6, 0x11, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40400a0}, 0x2040004)
syz_open_dev$evdev(&(0x7f0000002480), 0x7, 0x40000)
sendfile(r0, r2, 0x0, 0x7d)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x54}}, 0x4)

359.735263ms ago: executing program 4 (id=3963):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

341.568223ms ago: executing program 4 (id=3964):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(0x0, 0x60840, 0x0)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x5]}, &(0x7f00000000c0)=0x6)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200000000000000, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

242.017735ms ago: executing program 0 (id=3965):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
gettid()
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0)

173.281216ms ago: executing program 6 (id=3966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
renameat2(0xffffffffffffffff, &(0x7f0000003540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r6], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='cq_process\x00', r7}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000002500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3ffffffbc}, 0x18)

161.388957ms ago: executing program 5 (id=3967):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000}, 0x50)

110.259427ms ago: executing program 6 (id=3968):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)
close(r2)

66.176619ms ago: executing program 5 (id=3969):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
gettid()
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="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"], 0x1c8}}, 0x0)

65.355509ms ago: executing program 0 (id=3970):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000000000084000000010000000a00ff0f048000009ba4c20708000000c3846e8699f04cfdf971f141550700000000000000fcffffffe01728d0e5d20820faf305a365426dc5bbd254c87f84741d83440fd2ba99c6fd", @ANYRES32=0x0], 0x2c, 0x20004000}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x7, 0x6, @local}, 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)

49.104149ms ago: executing program 0 (id=3971):
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a3100000000540004802c000180090001007866726d000000001c000280050003000b0000000800024000000002080001400000001210000180090001006d61737100000000140001800e000100627974656f726465720000000900020073797a"], 0xe0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4e0cdd39749fb182)
r3 = socket$kcm(0xa, 0x1, 0x106)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9, 0x3}, 0x80, 0x0}, 0x24004059)
close(r3)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8)
r7 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')

27.774109ms ago: executing program 0 (id=3972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x7, 0x48000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xffe)
ioctl$TCSETS(r2, 0x40045431, 0x0)
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
r5 = dup3(r4, r2, 0x0)
ioctl$TIOCSTI(r5, 0x402c542c, &(0x7f0000000000)=0xff)

0s ago: executing program 6 (id=3973):
listxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/28, 0x1c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x0, 0xf30, {{0x5, 0x4, 0x3, 0x26, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @remote}}}})
r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0xf}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0)
writev(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
r5 = syz_io_uring_setup(0x7493, 0x0, 0x0, &(0x7f0000000540)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x47f4, 0x0, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d6974000000fa"], 0xf8}, 0x1, 0x0, 0x0, 0x4044485}, 0x0)

kernel console output (not intermixed with test programs):

 RBP: 00007fe4e8117090 R08: 0000000000000000 R09: 0000000000000000
[  170.017971][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.018034][T12142] R13: 00007fe4e98f6038 R14: 00007fe4e98f5fa0 R15: 00007ffd4431f298
[  170.018057][T12142]  </TASK>
[  170.305826][T11378] hid_parser_main: 48 callbacks suppressed
[  170.305849][T11378] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  170.334587][T11378] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  170.386915][T12158] __nla_validate_parse: 15 callbacks suppressed
[  170.386953][T12158] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3110'.
[  170.448174][T12159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  170.591258][T12160] lo speed is unknown, defaulting to 1000
[  170.648787][T12177] loop2: detected capacity change from 0 to 512
[  170.655659][T12177] EXT4-fs: Ignoring removed oldalloc option
[  170.663858][T12177] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3112: Parent and EA inode have the same ino 15
[  170.678337][T12177] EXT4-fs (loop2): 1 orphan inode deleted
[  170.684614][T12177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.693200][T12160] chnl_net:caif_netlink_parms(): no params data found
[  170.701485][T12177] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.3112: deleted inode referenced: 15
[  170.716077][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3112'.
[  170.725365][T12177] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  170.726490][T11586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.759862][T10613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.789430][T12186] loop2: detected capacity change from 0 to 512
[  170.797823][T11586] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.809550][T12160] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.816789][T12160] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.824610][T12160] bridge_slave_0: entered allmulticast mode
[  170.831543][T12160] bridge_slave_0: entered promiscuous mode
[  170.838704][T12160] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.840073][T12186] EXT4-fs (loop2): too many log groups per flexible block group
[  170.845809][T12160] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.846063][T12160] bridge_slave_1: entered allmulticast mode
[  170.853678][T12186] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  170.861601][T12160] bridge_slave_1: entered promiscuous mode
[  170.885477][T12186] EXT4-fs (loop2): mount failed
[  170.892185][T11586] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.916730][T12160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.937865][T11586] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.950965][T12160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.983694][T12160] team0: Port device team_slave_0 added
[  171.000839][T12160] team0: Port device team_slave_1 added
[  171.038997][T12160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.046017][T12160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.072020][T12160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.089556][T12160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.096689][T12160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.122653][T12160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.136286][T12200] serio: Serial port ptm0
[  171.147583][T11586] batadv1: left allmulticast mode
[  171.152724][T11586] batadv1: left promiscuous mode
[  171.157895][T11586] bridge0: port 3(batadv1) entered disabled state
[  171.166963][T11586] bridge_slave_1: left allmulticast mode
[  171.172645][T11586] bridge_slave_1: left promiscuous mode
[  171.178354][T11586] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.202802][T11586] bridge_slave_0: left allmulticast mode
[  171.208829][T11586] bridge_slave_0: left promiscuous mode
[  171.214528][T11586] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.241597][T12194] 9pnet_fd: Insufficient options for proto=fd
[  171.279428][T12208] SELinux:  Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped).
[  171.397416][T12208] netlink: 'syz.3.3121': attribute type 13 has an invalid length.
[  171.489299][T11586] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.517599][T11586] bond_slave_0: left promiscuous mode
[  171.518040][T12217] netlink: 'syz.0.3124': attribute type 1 has an invalid length.
[  171.530855][T12217] netlink: 'syz.0.3124': attribute type 2 has an invalid length.
[  171.539493][T11586] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.548194][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'.
[  171.561144][T11586] bond_slave_1: left promiscuous mode
[  171.571302][T11586] $Hÿ (unregistering): Released all slaves
[  171.580344][T11586] bond1 (unregistering): Released all slaves
[  171.629932][T11586] IPVS: stopping master sync thread 5504 ...
[  171.790929][T12215] bond1: entered allmulticast mode
[  171.810125][T12217] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  171.825834][T11377] lo speed is unknown, defaulting to 1000
[  171.831606][T11377] syz2: Port: 1 Link DOWN
[  171.834069][T11576] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.877795][T12222] loop5: detected capacity change from 0 to 1024
[  171.890680][T11576] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.918183][T12222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.943205][T12160] hsr_slave_0: entered promiscuous mode
[  171.951071][T12222] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.962227][T12160] hsr_slave_1: entered promiscuous mode
[  171.969974][T12160] debugfs: 'hsr0' already exists in 'hsr'
[  171.975837][T12160] Cannot create hsr debugfs directory
[  171.981345][T11576] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.985509][T12222] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3125: lblock 0 mapped to illegal pblock 0 (length 1)
[  171.997419][T11576] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.014336][T11586] hsr_slave_0: left promiscuous mode
[  172.020397][T11586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.027933][T11586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.036047][T11586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.043520][T11586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.051775][T12222] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.3125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  172.070574][T11586] batman_adv: batadv0: Interface deactivated: macvlan0
[  172.077611][T11586] batman_adv: batadv0: Removing interface: macvlan0
[  172.089445][T11586] veth0_macvtap: left promiscuous mode
[  172.095169][T11586] veth1_vlan: left promiscuous mode
[  172.100758][T11586] veth0_vlan: left promiscuous mode
[  172.126694][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  172.188590][T11586] team0 (unregistering): Port device team_slave_1 removed
[  172.200131][T11586] team0 (unregistering): Port device team_slave_0 removed
[  172.215114][T12237] netlink: 'syz.3.3131': attribute type 21 has an invalid length.
[  172.237599][T12219] lo speed is unknown, defaulting to 1000
[  172.306856][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'.
[  172.354198][T12240] loop5: detected capacity change from 0 to 764
[  172.378978][T12240] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  172.452067][T12249] loop5: detected capacity change from 0 to 512
[  172.474906][T12249] EXT4-fs: Ignoring removed oldalloc option
[  172.493848][T12249] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3135: Parent and EA inode have the same ino 15
[  172.536667][T12249] EXT4-fs (loop5): 1 orphan inode deleted
[  172.544030][T12249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.577226][T12249] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3135: deleted inode referenced: 15
[  172.577837][T11586] IPVS: stop unused estimator thread 0...
[  172.600833][T12249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3135'.
[  172.620240][T12249] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  172.678457][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.744090][   T29] kauditd_printk_skb: 370 callbacks suppressed
[  172.744109][   T29] audit: type=1400 audit(1757663501.055:24597): avc:  denied  { remount } for  pid=12253 comm="syz.3.3137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  172.820170][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3142'.
[  172.832411][T12261] loop2: detected capacity change from 0 to 1024
[  172.845439][T12160] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  172.858609][   T29] audit: type=1400 audit(1757663501.175:24598): avc:  denied  { write } for  pid=12268 comm="syz.5.3144" path="socket:[37289]" dev="sockfs" ino=37289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  172.885872][T12160] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  172.898020][T12261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.913449][T12160] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  172.936542][T12160] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  172.966367][T12279] loop5: detected capacity change from 0 to 512
[  172.971388][T12278] tipc: Started in network mode
[  172.977796][T12278] tipc: Node identity 5e174d6fcacc, cluster identity 4711
[  172.985128][T12278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.987285][T12279] EXT4-fs: Ignoring removed oldalloc option
[  173.018570][T12279] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3148: Parent and EA inode have the same ino 15
[  173.037787][T10613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.052121][T12278] tipc: Disabling bearer <eth:syzkaller0>
[  173.074147][T12160] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.080982][T12279] EXT4-fs (loop5): 1 orphan inode deleted
[  173.093361][T12292] loop2: detected capacity change from 0 to 512
[  173.100388][T12279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.128928][T12160] 8021q: adding VLAN 0 to HW filter on device team0
[  173.137431][T12292] vfat: Unknown parameter 'utf8?1'
[  173.153134][T12292] loop2: detected capacity change from 0 to 1024
[  173.161042][T12279] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3148: deleted inode referenced: 15
[  173.176507][T11585] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.183611][T11585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.192999][T12279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3148'.
[  173.207764][T12292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.208188][   T29] audit: type=1400 audit(1757663501.525:24599): avc:  denied  { create } for  pid=12293 comm="syz.0.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  173.225911][T12279] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  173.249992][T11586] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.257107][T11586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.265019][T12292] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.279714][T12292] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3150: bg 0: block 393: padding at end of block bitmap is not set
[  173.300186][T12292] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[  173.304637][T12160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  173.312887][T12292] EXT4-fs (loop2): This should not happen!! Data will be lost
[  173.312887][T12292] 
[  173.323235][T12160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.345033][   T29] audit: type=1400 audit(1757663501.565:24600): avc:  denied  { write } for  pid=12293 comm="syz.0.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  173.364764][   T29] audit: type=1400 audit(1757663501.565:24601): avc:  denied  { setopt } for  pid=12293 comm="syz.0.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  173.384528][   T29] audit: type=1400 audit(1757663501.595:24602): avc:  denied  { append } for  pid=12291 comm="syz.2.3150" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  173.409961][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3150'.
[  173.431730][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.481587][T12160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.535568][   T29] audit: type=1400 audit(1757663501.845:24603): avc:  denied  { read } for  pid=12315 comm="syz.5.3155" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  173.559027][   T29] audit: type=1400 audit(1757663501.845:24604): avc:  denied  { read } for  pid=12315 comm="syz.5.3155" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  173.582821][   T29] audit: type=1400 audit(1757663501.845:24605): avc:  denied  { open } for  pid=12315 comm="syz.5.3155" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  173.606977][   T29] audit: type=1400 audit(1757663501.855:24606): avc:  denied  { write } for  pid=12317 comm="syz.0.3156" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  173.647883][T12318] loop0: detected capacity change from 0 to 512
[  173.655682][T12318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  173.688262][T12318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.716943][T12318] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.737220][T12318] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.3156: corrupted xattr block 19: overlapping e_value 
[  173.767332][T12318] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  173.814107][T12160] veth0_vlan: entered promiscuous mode
[  173.840472][T12160] veth1_vlan: entered promiscuous mode
[  173.872871][T12160] veth0_macvtap: entered promiscuous mode
[  173.880762][T12160] veth1_macvtap: entered promiscuous mode
[  173.892324][T12160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.902491][T12160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.925432][T11614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.935576][T10613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.957545][T11614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.978020][T11614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.034200][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3158'.
[  174.043316][T11614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.064276][T12347] loop4: detected capacity change from 0 to 128
[  174.092769][T12347] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  174.100668][T12347] FAT-fs (loop4): Filesystem has been set read-only
[  174.131048][T12347] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  174.139630][T12349] lo speed is unknown, defaulting to 1000
[  174.157043][T12347] syz.4.3109: attempt to access beyond end of device
[  174.157043][T12347] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128
[  174.181980][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'.
[  174.204427][T12352] geneve2: entered promiscuous mode
[  174.209744][T12352] geneve2: entered allmulticast mode
[  174.245108][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.301890][T12354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.334810][T12354] tipc: Disabling bearer <eth:syzkaller0>
[  174.425212][T12363] netlink: 'syz.4.3164': attribute type 11 has an invalid length.
[  174.455969][T12367] loop0: detected capacity change from 0 to 128
[  174.500092][T12367] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  174.508027][T12367] FAT-fs (loop0): Filesystem has been set read-only
[  174.537126][T12367] syz.0.3166: attempt to access beyond end of device
[  174.537126][T12367] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  174.593770][T12367] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  174.601874][T12367] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  174.613263][T12374] syz.0.3166: attempt to access beyond end of device
[  174.613263][T12374] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  174.626597][T12374] Buffer I/O error on dev loop0, logical block 2065, async page read
[  174.673514][T12374] syz.0.3166: attempt to access beyond end of device
[  174.673514][T12374] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[  174.686871][T12374] Buffer I/O error on dev loop0, logical block 2066, async page read
[  174.727027][T12374] syz.0.3166: attempt to access beyond end of device
[  174.727027][T12374] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128
[  174.740351][T12374] Buffer I/O error on dev loop0, logical block 2067, async page read
[  174.777107][T12374] syz.0.3166: attempt to access beyond end of device
[  174.777107][T12374] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128
[  174.790553][T12374] Buffer I/O error on dev loop0, logical block 2068, async page read
[  174.827801][T12374] syz.0.3166: attempt to access beyond end of device
[  174.827801][T12374] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128
[  174.841263][T12374] Buffer I/O error on dev loop0, logical block 2069, async page read
[  174.866054][T12384] loop4: detected capacity change from 0 to 512
[  174.874301][T12374] syz.0.3166: attempt to access beyond end of device
[  174.874301][T12374] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128
[  174.887631][T12374] Buffer I/O error on dev loop0, logical block 2070, async page read
[  174.925018][T12374] syz.0.3166: attempt to access beyond end of device
[  174.925018][T12374] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128
[  174.938409][T12374] Buffer I/O error on dev loop0, logical block 2071, async page read
[  174.948348][T12384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.968977][T12384] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  174.990485][T12374] syz.0.3166: attempt to access beyond end of device
[  174.990485][T12374] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128
[  175.003909][T12374] Buffer I/O error on dev loop0, logical block 2072, async page read
[  175.019163][T12384] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3170: corrupted inode contents
[  175.028649][T12367] Buffer I/O error on dev loop0, logical block 2065, async page read
[  175.051720][T12384] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3170: mark_inode_dirty error
[  175.075811][T12367] Buffer I/O error on dev loop0, logical block 2066, async page read
[  175.084347][T12384] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3170: corrupted inode contents
[  175.165656][T12384] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3170: mark_inode_dirty error
[  175.185222][T12392] netlink: 'syz.4.3170': attribute type 22 has an invalid length.
[  175.237834][T12384] macvtap0: refused to change device tx_queue_len
[  175.258921][T11548] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.292507][T11548] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.322800][T11548] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.373882][T11548] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.419801][T12410] loop5: detected capacity change from 0 to 1024
[  175.456827][T12410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.517171][T12160] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.568172][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.654054][T12422] tipc: Started in network mode
[  175.659073][T12422] tipc: Node identity ba8f2018c9bf, cluster identity 4711
[  175.666250][T12422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.710656][T12422] tipc: Disabling bearer <eth:syzkaller0>
[  175.737918][T12427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.745515][T12427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.776077][T12427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.783514][T12427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.833410][T12434] ------------[ cut here ]------------
[  175.839161][T12434] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)(1)
[  175.858704][T12424] SELinux:  policydb magic number 0x40040 does not match expected magic number 0xf97cff8c
[  175.864544][T12434] WARNING: CPU: 0 PID: 12434 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[  175.884476][T12434] Modules linked in:
[  175.888329][T12424] SELinux: failed to load policy
[  175.888487][T12434] CPU: 0 UID: 0 PID: 12434 Comm: syz.5.3181 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  175.903294][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  175.913417][T12434] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[  175.919868][T12434] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  175.939572][T12434] RSP: 0018:ffffc90000f03440 EFLAGS: 00010292
[  175.945780][T12434] RAX: a55bf443f4db0000 RBX: ffff888118a2aa98 RCX: 0000000000080000
[  175.954007][T12434] RDX: ffffc9000256c000 RSI: 0000000000004056 RDI: 0000000000004057
[  175.962199][T12434] RBP: 00000000ffffdfcc R08: 0001ffff86a20c2f R09: 0000000000000000
[  175.970245][T12434] R10: ffffffff88e699e0 R11: ffffffff82203780 R12: ffff888118a2aa58
[  175.978280][T12434] R13: ffff8881043d8000 R14: ffff8881043d8000 R15: ffff888118a2aa90
[  175.981532][T12429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12429 comm=syz.3.3180
[  175.986291][T12434] FS:  00007f819e08f6c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000
[  176.007740][T12434] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.014367][T12434] CR2: 00007ff09007c000 CR3: 000000012e084000 CR4: 00000000003506f0
[  176.022413][T12434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  176.030443][T12434] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  176.038508][T12434] Call Trace:
[  176.041886][T12434]  <TASK>
[  176.044844][T12434]  reg_set_min_max+0x1c1/0x260
[  176.049690][T12434]  check_cond_jmp_op+0x1080/0x16e0
[  176.055067][T12434]  do_check+0x332a/0x7a10
[  176.059504][T12434]  do_check_common+0xc3a/0x12a0
[  176.061603][T12438] loop5: detected capacity change from 0 to 512
[  176.064567][T12434]  bpf_check+0x942b/0xd9e0
[  176.075325][T12434]  ? __rcu_read_unlock+0x4f/0x70
[  176.080344][T12434]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  176.086408][T12434]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[  176.092118][T12434]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[  176.098093][T12434]  ? css_rstat_updated+0xb7/0x240
[  176.103204][T12434]  ? pcpu_block_update+0x24e/0x3b0
[  176.108367][T12434]  ? _find_next_zero_bit+0x29/0xa0
[  176.113505][T12434]  ? pcpu_block_refresh_hint+0x157/0x170
[  176.119295][T12434]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  176.125430][T12434]  ? css_rstat_updated+0xb7/0x240
[  176.130533][T12434]  ? __rcu_read_unlock+0x4f/0x70
[  176.135586][T12434]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[  176.141473][T12434]  ? should_fail_ex+0x30/0x280
[  176.146299][T12434]  ? selinux_bpf_prog_load+0x36/0xf0
[  176.151620][T12434]  ? should_failslab+0x8c/0xb0
[  176.156512][T12434]  ? __kmalloc_cache_noprof+0x189/0x320
[  176.162118][T12434]  ? selinux_bpf_prog_load+0xbf/0xf0
[  176.167506][T12434]  ? security_bpf_prog_load+0x2c/0xa0
[  176.172979][T12434]  bpf_prog_load+0xedd/0x1070
[  176.177847][T12434]  ? security_bpf+0x2b/0x90
[  176.182410][T12434]  __sys_bpf+0x462/0x7b0
[  176.186731][T12434]  __x64_sys_bpf+0x41/0x50
[  176.191252][T12434]  x64_sys_call+0x2aea/0x2ff0
[  176.195989][T12434]  do_syscall_64+0xd2/0x200
[  176.200599][T12434]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  176.206764][T12434]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  176.212573][T12434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.218559][T12434] RIP: 0033:0x7f819f62eba9
[  176.223087][T12434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.242781][T12434] RSP: 002b:00007f819e08f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  176.251249][T12434] RAX: ffffffffffffffda RBX: 00007f819f875fa0 RCX: 00007f819f62eba9
[  176.259294][T12434] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  176.267384][T12434] RBP: 00007f819f6b1e19 R08: 0000000000000000 R09: 0000000000000000
[  176.267650][T12438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.275395][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.275418][T12434] R13: 00007f819f876038 R14: 00007f819f875fa0 R15: 00007fff2f4ec468
[  176.275447][T12434]  </TASK>
[  176.307338][T12434] ---[ end trace 0000000000000000 ]---
[  176.313037][T12438] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.383840][T12445] IPVS: Error connecting to the multicast addr
[  176.414463][T12446] loop0: detected capacity change from 0 to 512
[  176.436914][T12446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.457177][T12446] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.512494][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.529376][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.609203][T12459] netlink: 'syz.0.3188': attribute type 1 has an invalid length.
[  176.623674][T12460] loop5: detected capacity change from 0 to 512
[  176.652526][T12460] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  176.667363][T12460] EXT4-fs (loop5): invalid journal inode
[  176.753108][T12470] __nla_validate_parse: 2 callbacks suppressed
[  176.753123][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3193'.
[  176.776391][T12471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3191'.
[  176.785466][T12471] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3191'.
[  176.831335][T12475] loop0: detected capacity change from 0 to 512
[  176.848005][T12475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.860864][T12475] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.878615][T12470] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.3193: corrupted xattr block 19: overlapping e_value 
[  176.892708][T12470] EXT4-fs (loop0): Remounting filesystem read-only
[  176.899281][T12470] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  176.908675][T12470] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  176.918433][T12470] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  176.958540][T12483] netlink: 'syz.3.3196': attribute type 21 has an invalid length.
[  176.958606][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.966595][T12483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3196'.
[  176.998429][T12485] loop5: detected capacity change from 0 to 512
[  177.005312][T12485] EXT4-fs: Ignoring removed oldalloc option
[  177.014074][T12485] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3198: Parent and EA inode have the same ino 15
[  177.028208][T12485] EXT4-fs (loop5): 1 orphan inode deleted
[  177.035756][T12485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.048934][T12485] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3198: deleted inode referenced: 15
[  177.057149][T12490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3197'.
[  177.061399][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3198'.
[  177.079373][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'.
[  177.079750][T12485] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  177.097826][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'.
[  177.131733][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.222582][T12503] netlink: 'syz.5.3204': attribute type 10 has an invalid length.
[  177.252110][T12505] loop0: detected capacity change from 0 to 512
[  177.269831][T12503] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  177.288547][T12505] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  177.319046][T12505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  177.330530][T12510] loop5: detected capacity change from 0 to 512
[  177.337407][T12505] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3205: corrupted in-inode xattr: e_value size too large
[  177.353239][T12505] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3205: couldn't read orphan inode 15 (err -117)
[  177.369974][T12510] EXT4-fs (loop5): failed to initialize system zone (-117)
[  177.371240][T12505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.391110][T12510] EXT4-fs (loop5): mount failed
[  177.417311][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.485968][T12528] loop2: detected capacity change from 0 to 512
[  177.519782][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'.
[  177.530574][T12526] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  177.550380][T12528] EXT4-fs (loop2): failed to initialize system zone (-117)
[  177.557905][T12528] EXT4-fs (loop2): mount failed
[  177.799412][   T29] kauditd_printk_skb: 136 callbacks suppressed
[  177.799432][   T29] audit: type=1400 audit(1757663506.115:24743): avc:  denied  { write } for  pid=12543 comm="syz.4.3216" path="socket:[38147]" dev="sockfs" ino=38147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  177.837243][T12546] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3216'.
[  177.865246][T12546] netlink: zone id is out of range
[  177.870629][T12546] netlink: zone id is out of range
[  177.878187][T12546] netlink: zone id is out of range
[  177.883349][T12546] netlink: zone id is out of range
[  177.888520][T12546] netlink: zone id is out of range
[  177.893642][T12546] netlink: zone id is out of range
[  177.898825][T12546] netlink: zone id is out of range
[  177.903942][T12546] netlink: del zone limit has 8 unknown bytes
[  177.988098][   T29] audit: type=1326 audit(1757663506.285:24744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e96aeba9 code=0x7ffc0000
[  178.012189][   T29] audit: type=1326 audit(1757663506.285:24745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4e96aeba9 code=0x7ffc0000
[  178.036009][   T29] audit: type=1326 audit(1757663506.285:24746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e96aeba9 code=0x7ffc0000
[  178.059947][   T29] audit: type=1326 audit(1757663506.285:24747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4e96aeba9 code=0x7ffc0000
[  178.079246][T12551] audit: audit_backlog=65 > audit_backlog_limit=64
[  178.083819][   T29] audit: type=1326 audit(1757663506.285:24748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e96aeba9 code=0x7ffc0000
[  178.090106][T12551] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64
[  178.090129][T12551] audit: backlog limit exceeded
[  178.126981][   T29] audit: type=1326 audit(1757663506.285:24749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12549 comm="syz.3.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4e96aeba9 code=0x7ffc0000
[  178.665992][T12544] Set syz1 is full, maxelem 65536 reached
[  178.672627][T12510] Set syz1 is full, maxelem 65536 reached
[  178.712848][T12565] loop2: detected capacity change from 0 to 512
[  178.720300][T12565] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  178.741237][T12567] loop5: detected capacity change from 0 to 512
[  178.755366][T12567] EXT4-fs: Ignoring removed oldalloc option
[  178.766422][T12572] loop0: detected capacity change from 0 to 1024
[  178.775165][T12567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3226: Parent and EA inode have the same ino 15
[  178.790379][T12567] EXT4-fs (loop5): 1 orphan inode deleted
[  178.794172][T12565] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6
[  178.798333][T12567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.820547][T12572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.844643][T12567] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3226: deleted inode referenced: 15
[  178.870925][T12572] bridge0: port 3(macsec1) entered blocking state
[  178.877557][T12572] bridge0: port 3(macsec1) entered disabled state
[  178.889376][T12582] loop2: detected capacity change from 0 to 512
[  178.896862][T12567] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  178.904722][T12572] macsec1: entered allmulticast mode
[  178.913618][T12582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  178.920384][T12582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  178.928062][T12582] vhci_hcd vhci_hcd.0: Device attached
[  178.934108][T12572] macsec1: left allmulticast mode
[  178.946752][T12586] sctp: [Deprecated]: syz.0.3227 (pid 12586) Use of int in max_burst socket option.
[  178.946752][T12586] Use struct sctp_assoc_value instead
[  178.964727][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.004699][T12586] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3227: Allocating blocks 385-513 which overlap fs metadata
[  179.034799][T12593] veth0_to_team: entered promiscuous mode
[  179.061650][T12586] EXT4-fs (loop0): pa ffff8881072203f0: logic 16, phys. 129, len 24
[  179.069823][T12586] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  179.096266][T12595] veth0_to_team: entered promiscuous mode
[  179.143916][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.244789][T12583] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  179.262873][T11586] vhci_hcd: stop threads
[  179.267222][T11586] vhci_hcd: release socket
[  179.271677][T11586] vhci_hcd: disconnect device
[  179.395487][T12619] loop0: detected capacity change from 0 to 512
[  179.412067][T12619] EXT4-fs: Ignoring removed oldalloc option
[  179.446341][T12619] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3243: Parent and EA inode have the same ino 15
[  179.479443][T12619] EXT4-fs (loop0): 1 orphan inode deleted
[  179.498735][T12619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.548254][T12619] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3243: deleted inode referenced: 15
[  179.582415][T12619] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  179.668995][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.950806][T12654] loop0: detected capacity change from 0 to 512
[  179.975678][T12654] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  179.982283][T12654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  179.989877][T12654] vhci_hcd vhci_hcd.0: Device attached
[  180.068867][T12660] loop5: detected capacity change from 0 to 512
[  180.089225][T12660] EXT4-fs: Ignoring removed oldalloc option
[  180.116218][T12660] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3260: Parent and EA inode have the same ino 15
[  180.146777][T12660] EXT4-fs (loop5): 1 orphan inode deleted
[  180.162967][T12660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.185977][T12660] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3260: deleted inode referenced: 15
[  180.208276][T12660] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  180.235045][ T4942] usb 1-1: new low-speed USB device number 8 using vhci_hcd
[  180.270345][T12671] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000008
[  180.320812][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.395867][T12671] loop2: detected capacity change from 0 to 1024
[  180.410511][T12680] lo speed is unknown, defaulting to 1000
[  180.450800][T12671] lo speed is unknown, defaulting to 1000
[  180.463615][T12657] vhci_hcd: connection reset by peer
[  180.470065][T11586] vhci_hcd: stop threads
[  180.474352][T11586] vhci_hcd: release socket
[  180.477081][T12692] tmpfs: Bad value for 'mpol'
[  180.478864][T11586] vhci_hcd: disconnect device
[  180.796642][T12707] loop4: detected capacity change from 0 to 128
[  180.809346][T12707] FAULT_INJECTION: forcing a failure.
[  180.809346][T12707] name failslab, interval 1, probability 0, space 0, times 0
[  180.822127][T12707] CPU: 0 UID: 0 PID: 12707 Comm: syz.4.3273 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  180.822173][T12707] Tainted: [W]=WARN
[  180.822180][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  180.822192][T12707] Call Trace:
[  180.822199][T12707]  <TASK>
[  180.822207][T12707]  __dump_stack+0x1d/0x30
[  180.822227][T12707]  dump_stack_lvl+0xe8/0x140
[  180.822253][T12707]  dump_stack+0x15/0x1b
[  180.822269][T12707]  should_fail_ex+0x265/0x280
[  180.822301][T12707]  should_failslab+0x8c/0xb0
[  180.822330][T12707]  kmem_cache_alloc_noprof+0x50/0x310
[  180.822422][T12707]  ? getname_flags+0x80/0x3b0
[  180.822462][T12707]  getname_flags+0x80/0x3b0
[  180.822500][T12707]  do_sys_openat2+0x60/0x110
[  180.822554][T12707]  __x64_sys_openat+0xf2/0x120
[  180.822597][T12707]  x64_sys_call+0x2e9c/0x2ff0
[  180.822619][T12707]  do_syscall_64+0xd2/0x200
[  180.822653][T12707]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  180.822774][T12707]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  180.822813][T12707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.822842][T12707] RIP: 0033:0x7f322f8deba9
[  180.822860][T12707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.822883][T12707] RSP: 002b:00007f322e305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  180.822934][T12707] RAX: ffffffffffffffda RBX: 00007f322fb26180 RCX: 00007f322f8deba9
[  180.822991][T12707] RDX: 000000000000275a RSI: 0000200000000800 RDI: ffffffffffffff9c
[  180.823003][T12707] RBP: 00007f322e305090 R08: 0000000000000000 R09: 0000000000000000
[  180.823015][T12707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.823081][T12707] R13: 00007f322fb26218 R14: 00007f322fb26180 R15: 00007fff2b1560f8
[  180.823104][T12707]  </TASK>
[  181.377750][T12716] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  181.436610][T12724] loop2: detected capacity change from 0 to 128
[  181.574846][T12734] loop0: detected capacity change from 0 to 2048
[  181.608647][T12724] Trying to write to read-only block-device loop2
[  181.632722][T12735] lo speed is unknown, defaulting to 1000
[  181.642372][T12738] loop5: detected capacity change from 0 to 512
[  181.651001][T12731] loop4: detected capacity change from 0 to 8192
[  181.663604][T12734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.696206][T12738] loop5: detected capacity change from 0 to 512
[  181.766875][T12746] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.074468][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.128422][T12765] delete_channel: no stack
[  182.145559][T12765] delete_channel: no stack
[  182.280529][T10613] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  182.288188][T10613] FAT-fs (loop2): Filesystem has been set read-only
[  182.297877][T12783] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.306303][T10613] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  182.346291][T12786] FAULT_INJECTION: forcing a failure.
[  182.346291][T12786] name failslab, interval 1, probability 0, space 0, times 0
[  182.359045][T12786] CPU: 1 UID: 0 PID: 12786 Comm: syz.0.3304 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  182.359123][T12786] Tainted: [W]=WARN
[  182.359132][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  182.359145][T12786] Call Trace:
[  182.359151][T12786]  <TASK>
[  182.359159][T12786]  __dump_stack+0x1d/0x30
[  182.359181][T12786]  dump_stack_lvl+0xe8/0x140
[  182.359200][T12786]  dump_stack+0x15/0x1b
[  182.359288][T12786]  should_fail_ex+0x265/0x280
[  182.359312][T12786]  ? resv_map_alloc+0x57/0x190
[  182.359353][T12786]  should_failslab+0x8c/0xb0
[  182.359386][T12786]  __kmalloc_cache_noprof+0x4c/0x320
[  182.359422][T12786]  resv_map_alloc+0x57/0x190
[  182.359517][T12786]  hugetlbfs_get_inode+0x67/0x370
[  182.359551][T12786]  hugetlb_file_setup+0x192/0x3d0
[  182.359584][T12786]  ksys_mmap_pgoff+0x157/0x310
[  182.359611][T12786]  x64_sys_call+0x14a3/0x2ff0
[  182.359671][T12786]  do_syscall_64+0xd2/0x200
[  182.359713][T12786]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  182.359745][T12786]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  182.359875][T12786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.359927][T12786] RIP: 0033:0x7fe19594eba9
[  182.359946][T12786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.359969][T12786] RSP: 002b:00007fe1943af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  182.360002][T12786] RAX: ffffffffffffffda RBX: 00007fe195b95fa0 RCX: 00007fe19594eba9
[  182.360017][T12786] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000
[  182.360033][T12786] RBP: 00007fe1943af090 R08: ffffffffffffffff R09: 0000000000000000
[  182.360103][T12786] R10: 0000000000051031 R11: 0000000000000246 R12: 0000000000000001
[  182.360189][T12786] R13: 00007fe195b96038 R14: 00007fe195b95fa0 R15: 00007ffe64e1f098
[  182.360213][T12786]  </TASK>
[  182.377190][T12791] hub 2-0:1.0: USB hub found
[  182.559235][T12791] hub 2-0:1.0: 8 ports detected
[  182.609999][T12795] __nla_validate_parse: 14 callbacks suppressed
[  182.610018][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'.
[  182.772766][T12805] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.835369][   T29] kauditd_printk_skb: 301 callbacks suppressed
[  182.835400][   T29] audit: type=1326 audit(1757663511.135:25051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819f62eba9 code=0x7ffc0000
[  182.865396][   T29] audit: type=1326 audit(1757663511.135:25052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819f62eba9 code=0x7ffc0000
[  182.920262][T11586] bridge_slave_1: left allmulticast mode
[  182.926045][T11586] bridge_slave_1: left promiscuous mode
[  182.931921][T11586] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.960374][T11586] bridge_slave_0: left allmulticast mode
[  182.966170][T11586] bridge_slave_0: left promiscuous mode
[  182.971901][T11586] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.118478][T11586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.127293][   T29] audit: type=1326 audit(1757663511.435:25053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  183.151059][   T29] audit: type=1326 audit(1757663511.435:25054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  183.174731][   T29] audit: type=1326 audit(1757663511.435:25055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  183.198864][   T29] audit: type=1326 audit(1757663511.435:25056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.0.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  183.265736][T11586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.286878][T11586] bond0 (unregistering): Released all slaves
[  183.367593][   T29] audit: type=1400 audit(1757663511.685:25057): avc:  denied  { relabelto } for  pid=12828 comm="syz.4.3321" name="file0" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  183.394285][   T29] audit: type=1400 audit(1757663511.685:25058): avc:  denied  { associate } for  pid=12828 comm="syz.4.3321" name="file0" dev="tmpfs" ino=288 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  183.423472][T11586] hsr_slave_0: left promiscuous mode
[  183.429339][T11586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.448327][T11586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.494650][T11586] team0 (unregistering): Port device team_slave_1 removed
[  183.495346][   T29] audit: type=1400 audit(1757663511.755:25059): avc:  denied  { rmdir } for  pid=12160 comm="syz-executor" name="file0" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  183.528219][   T29] audit: type=1400 audit(1757663511.785:25060): avc:  denied  { write } for  pid=12832 comm="syz.4.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  183.550257][T11586] team0 (unregistering): Port device team_slave_0 removed
[  183.562105][T12837] FAULT_INJECTION: forcing a failure.
[  183.562105][T12837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.575259][T12837] CPU: 0 UID: 0 PID: 12837 Comm: syz.5.3324 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  183.575348][T12837] Tainted: [W]=WARN
[  183.575363][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.575377][T12837] Call Trace:
[  183.575384][T12837]  <TASK>
[  183.575410][T12837]  __dump_stack+0x1d/0x30
[  183.575433][T12837]  dump_stack_lvl+0xe8/0x140
[  183.575452][T12837]  dump_stack+0x15/0x1b
[  183.575468][T12837]  should_fail_ex+0x265/0x280
[  183.575500][T12837]  should_fail+0xb/0x20
[  183.575557][T12837]  should_fail_usercopy+0x1a/0x20
[  183.575592][T12837]  strncpy_from_user+0x25/0x230
[  183.575770][T12837]  ? bpf_trace_run2+0x124/0x1c0
[  183.575803][T12837]  __se_sys_request_key+0x57/0x290
[  183.575830][T12837]  __x64_sys_request_key+0x55/0x70
[  183.575854][T12837]  x64_sys_call+0x1d98/0x2ff0
[  183.575978][T12837]  do_syscall_64+0xd2/0x200
[  183.576020][T12837]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  183.576052][T12837]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  183.576095][T12837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.576156][T12837] RIP: 0033:0x7f819f62eba9
[  183.576176][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.576196][T12837] RSP: 002b:00007f819e06e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  183.576301][T12837] RAX: ffffffffffffffda RBX: 00007f819f876090 RCX: 00007f819f62eba9
[  183.576317][T12837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  183.576332][T12837] RBP: 00007f819e06e090 R08: 0000000000000000 R09: 0000000000000000
[  183.576347][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.576370][T12837] R13: 00007f819f876128 R14: 00007f819f876090 R15: 00007fff2f4ec468
[  183.576390][T12837]  </TASK>
[  183.808229][T12814] lo speed is unknown, defaulting to 1000
[  183.940324][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3329'.
[  184.093590][T12814] chnl_net:caif_netlink_parms(): no params data found
[  184.181102][T12814] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.188349][T12814] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.205420][T12814] bridge_slave_0: entered allmulticast mode
[  184.223149][T12865] loop4: detected capacity change from 0 to 764
[  184.243670][T12814] bridge_slave_0: entered promiscuous mode
[  184.257697][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3336'.
[  184.275922][T12814] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.283045][T12814] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.293349][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3335'.
[  184.302505][T12814] bridge_slave_1: entered allmulticast mode
[  184.319053][T12865] Symlink component flag not implemented
[  184.337805][T12865] Symlink component flag not implemented (129)
[  184.347009][T12814] bridge_slave_1: entered promiscuous mode
[  184.352977][T12874] loop5: detected capacity change from 0 to 512
[  184.360573][T12865] rock: directory entry would overflow storage
[  184.366913][T12865] rock: sig=0x4f50, size=4, remaining=3
[  184.372471][T12865] iso9660: Corrupted directory entry in block 6 of inode 1792
[  184.375402][T12874] EXT4-fs: Ignoring removed orlov option
[  184.395419][T12874] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  184.409898][T12814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.425823][T12874] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3335: bad orphan inode 32
[  184.440821][T12814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.463545][T12874] ext4_test_bit(bit=31, block=4) = 0
[  184.469096][T12874] EXT4-fs (loop5): 1 orphan inode deleted
[  184.487128][T12814] team0: Port device team_slave_0 added
[  184.493764][T12814] team0: Port device team_slave_1 added
[  184.519851][T12814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.526907][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.552856][T12814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.565408][T12814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.572384][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.598506][T12814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.626665][T12886] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.627520][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'.
[  184.666896][T12814] hsr_slave_0: entered promiscuous mode
[  184.678008][T12814] hsr_slave_1: entered promiscuous mode
[  184.684284][T12814] debugfs: 'hsr0' already exists in 'hsr'
[  184.690073][T12814] Cannot create hsr debugfs directory
[  184.704350][T12900] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3342'.
[  184.853993][T12814] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  184.863640][T12814] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  184.874062][T12814] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  184.886974][T12814] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  184.901100][T12926] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.948818][T12939] pimreg: entered allmulticast mode
[  184.973271][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'.
[  184.975956][T12814] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.000528][T12814] 8021q: adding VLAN 0 to HW filter on device team0
[  185.011084][T11586] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.018225][T11586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.032016][T11614] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.039183][T11614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.069130][T12951] batadv_slave_1: entered promiscuous mode
[  185.092139][T12814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  185.130933][T12951] batadv_slave_1: left promiscuous mode
[  185.166940][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.275136][ T4942] usb 1-1: enqueue for inactive port 0
[  185.288253][ T4942] usb 1-1: enqueue for inactive port 0
[  185.299578][T12975] lo speed is unknown, defaulting to 1000
[  185.309752][T12814] veth0_vlan: entered promiscuous mode
[  185.320089][T12814] veth1_vlan: entered promiscuous mode
[  185.341014][T12814] veth0_macvtap: entered promiscuous mode
[  185.357959][T12814] veth1_macvtap: entered promiscuous mode
[  185.365276][ T4942] vhci_hcd: vhci_device speed not set
[  185.383600][T12814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.396436][T12814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.408209][T11576] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.417302][T11576] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.426752][T11576] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.437749][T11576] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.527966][T12985] loop5: detected capacity change from 0 to 136
[  185.622141][T12990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.631022][T12990] tipc: Disabling bearer <eth:syzkaller0>
[  185.798071][T13004] loop0: detected capacity change from 0 to 512
[  185.804604][T13004] EXT4-fs: Ignoring removed oldalloc option
[  185.813827][T13004] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3376: Parent and EA inode have the same ino 15
[  185.827447][T13004] EXT4-fs (loop0): 1 orphan inode deleted
[  185.834717][T13004] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3376: deleted inode referenced: 15
[  185.849352][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3376'.
[  185.858684][T13004] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  186.184126][T13026] tipc: Started in network mode
[  186.189164][T13026] tipc: Node identity 22091237a1f5, cluster identity 4711
[  186.196545][T13026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.229795][T13026] tipc: Disabling bearer <eth:syzkaller0>
[  186.310346][T13019] lo speed is unknown, defaulting to 1000
[  186.319459][T13035] netlink: 'syz.4.3385': attribute type 10 has an invalid length.
[  186.341488][T13035] team0: Device hsr_slave_0 failed to register rx_handler
[  186.422209][T13040] loop4: detected capacity change from 0 to 512
[  186.437786][T13040] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3387: corrupted in-inode xattr: bad e_name length
[  186.468582][T13040] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3387: couldn't read orphan inode 15 (err -117)
[  186.497319][T13040] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3387: dx entry: limit 0 != root limit 125
[  186.509260][T13040] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3387: Corrupt directory, running e2fsck is recommended
[  186.522513][T13040] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.3387: path /69/file7: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  186.563135][T13053] loop5: detected capacity change from 0 to 128
[  186.575493][T13053] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  186.581064][T13019] chnl_net:caif_netlink_parms(): no params data found
[  186.609520][T13053] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  186.677639][T13019] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.684755][T13019] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.704497][T13019] bridge_slave_0: entered allmulticast mode
[  186.713620][T13019] bridge_slave_0: entered promiscuous mode
[  186.746919][T13019] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.754051][T13019] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.769166][T13019] bridge_slave_1: entered allmulticast mode
[  186.776343][T13019] bridge_slave_1: entered promiscuous mode
[  186.794084][T13019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.804604][T13019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.827731][T13019] team0: Port device team_slave_0 added
[  186.834400][T13019] team0: Port device team_slave_1 added
[  186.853838][T13019] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.860868][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.886962][T13019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.905458][T13069] veth3: entered promiscuous mode
[  186.910546][T13069] veth3: entered allmulticast mode
[  186.917237][T13019] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.924256][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.950219][T13019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.980726][T13019] hsr_slave_0: entered promiscuous mode
[  186.986858][T13019] hsr_slave_1: entered promiscuous mode
[  186.992756][T13019] debugfs: 'hsr0' already exists in 'hsr'
[  186.998536][T13019] Cannot create hsr debugfs directory
[  187.236896][T13080] loop0: detected capacity change from 0 to 512
[  187.243595][T13080] EXT4-fs: Ignoring removed oldalloc option
[  187.253625][T13080] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3399: Parent and EA inode have the same ino 15
[  187.266545][T13080] EXT4-fs (loop0): 1 orphan inode deleted
[  187.272876][T13019] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  187.275848][T13080] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3399: deleted inode referenced: 15
[  187.292439][T13080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3399'.
[  187.294373][T13019] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  187.308202][T13080] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  187.319285][T13019] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  187.329721][T13019] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  187.388769][T13019] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.402655][T13019] 8021q: adding VLAN 0 to HW filter on device team0
[  187.413186][T11574] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.420310][T11574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.433514][T11576] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.440619][T11576] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.474269][T13019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.498078][T13095] loop4: detected capacity change from 0 to 1024
[  187.509370][T13095] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  187.519240][T13095] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  187.543298][T13095] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  187.564566][T13095] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #5: comm syz.4.3403: unexpected bad inode w/o EXT4_IGET_BAD
[  187.587953][T13099] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3404'.
[  187.598782][T13095] EXT4-fs (loop4): no journal found
[  187.604090][T13095] EXT4-fs (loop4): can't get journal size
[  187.614501][T13104] loop5: detected capacity change from 0 to 1024
[  187.623835][T13019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.634273][T13095] EXT4-fs (loop4): too many log groups per flexible block group
[  187.642028][T13095] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  187.653784][T13095] EXT4-fs (loop4): mount failed
[  187.753260][T13120] loop5: detected capacity change from 0 to 512
[  187.759678][T13123] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3411'.
[  187.775654][T13120] EXT4-fs: Ignoring removed oldalloc option
[  187.805816][ T4942] kernel write not supported for file 22/net/vlan/vlan1 (pid: 4942 comm: kworker/1:8)
[  187.808348][T13019] veth0_vlan: entered promiscuous mode
[  187.826012][T13120] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3410: Parent and EA inode have the same ino 15
[  187.841230][T13019] veth1_vlan: entered promiscuous mode
[  187.851874][T13120] EXT4-fs (loop5): 1 orphan inode deleted
[  187.856506][T13019] veth0_macvtap: entered promiscuous mode
[  187.865405][T13019] veth1_macvtap: entered promiscuous mode
[  187.873264][T13120] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3410: deleted inode referenced: 15
[  187.885757][T13120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3410'.
[  187.887344][T13019] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.894980][T13120] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  187.911981][   T29] kauditd_printk_skb: 137 callbacks suppressed
[  187.912006][   T29] audit: type=1400 audit(1757663516.225:25198): avc:  denied  { accept } for  pid=13125 comm="syz.0.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  187.913966][T13019] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.957370][T11554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.976036][T11554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.008544][T11554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.031194][T11554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.127468][   T29] audit: type=1326 audit(1757663516.445:25199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.5.3415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f819f62eba9 code=0x0
[  188.166809][T13149] loop4: detected capacity change from 0 to 512
[  188.174909][T13149] EXT4-fs (loop4): orphan cleanup on readonly fs
[  188.182061][T13149] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3416: bg 0: block 248: padding at end of block bitmap is not set
[  188.212548][T13149] Quota error (device loop4): write_blk: dquota write failed
[  188.220044][T13149] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  188.230139][T13149] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3416: Failed to acquire dquot type 1
[  188.245849][T13149] EXT4-fs (loop4): 1 truncate cleaned up
[  188.263023][T13145] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3416'.
[  188.276091][   T29] audit: type=1326 audit(1757663516.595:25200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13144 comm="syz.4.3416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f322f8deba9 code=0x0
[  188.376212][   T29] audit: type=1400 audit(1757663516.695:25201): avc:  denied  { mount } for  pid=13146 comm="syz.3.3417" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  188.410141][   T29] audit: type=1400 audit(1757663516.715:25202): avc:  denied  { unmount } for  pid=13146 comm="syz.3.3417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  188.617906][   T29] audit: type=1326 audit(1757663516.935:25203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.3.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0343aeba9 code=0x7ffc0000
[  188.641944][   T29] audit: type=1326 audit(1757663516.935:25204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.3.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0343aeba9 code=0x7ffc0000
[  188.681672][   T29] audit: type=1326 audit(1757663516.965:25205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.3.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0343aeba9 code=0x7ffc0000
[  188.693244][T13167] loop0: detected capacity change from 0 to 512
[  188.714035][T13167] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  188.720600][T13167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  188.728343][T13167] vhci_hcd vhci_hcd.0: Device attached
[  188.857491][T13174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3424'.
[  188.866764][T13174] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  188.885480][T13168] usbip_core: unknown command
[  188.890364][T13168] vhci_hcd: unknown pdu 0
[  188.894839][T13168] usbip_core: unknown command
[  188.912714][T11574] vhci_hcd: stop threads
[  188.917042][T11574] vhci_hcd: release socket
[  188.921488][T11574] vhci_hcd: disconnect device
[  188.926893][ T4942] vhci_hcd: vhci_device speed not set
[  188.991651][T13184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.999874][T13184] tipc: Disabling bearer <eth:syzkaller0>
[  189.014401][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3429'.
[  189.191565][T13193] loop5: detected capacity change from 0 to 1024
[  189.313224][T13199] 9pnet_fd: Insufficient options for proto=fd
[  189.368568][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3435'.
[  189.398154][T13210] loop5: detected capacity change from 0 to 512
[  189.405015][T13210] EXT4-fs: Ignoring removed oldalloc option
[  189.415705][T13210] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3436: Parent and EA inode have the same ino 15
[  189.439698][T13210] EXT4-fs (loop5): 1 orphan inode deleted
[  189.446999][T13210] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3436: deleted inode referenced: 15
[  189.470298][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'.
[  189.489945][T13210] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  189.642744][T13232] loop6: detected capacity change from 0 to 1024
[  189.658745][T13234] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3447'.
[  189.676820][T13234] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3447'.
[  189.743147][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3449'.
[  189.805802][T13244] loop5: detected capacity change from 0 to 128
[  189.812847][T13244] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  189.838782][T13244] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  189.888807][T13247] loop4: detected capacity change from 0 to 512
[  189.916952][T13247] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  189.923526][T13247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  189.931272][T13247] vhci_hcd vhci_hcd.0: Device attached
[  190.002422][T13254] loop5: detected capacity change from 0 to 512
[  190.011468][T13254] EXT4-fs: Ignoring removed mblk_io_submit option
[  190.026331][T13254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  190.050452][T13254] EXT4-fs (loop5): 1 truncate cleaned up
[  190.150599][T13257] loop0: detected capacity change from 0 to 512
[  190.165352][T13257] EXT4-fs: Ignoring removed oldalloc option
[  190.183418][T13257] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3454: Parent and EA inode have the same ino 15
[  190.195898][ T4942] usb 9-1: new low-speed USB device number 8 using vhci_hcd
[  190.216968][T13257] EXT4-fs (loop0): 1 orphan inode deleted
[  190.226769][T13257] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3454: deleted inode referenced: 15
[  190.246136][T13257] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  190.289838][T13249] usbip_core: unknown command
[  190.294612][T13249] vhci_hcd: unknown pdu 0
[  190.299011][T13249] usbip_core: unknown command
[  190.358436][T11586] vhci_hcd: stop threads
[  190.362747][T11586] vhci_hcd: release socket
[  190.367260][T11586] vhci_hcd: disconnect device
[  190.419437][T13273] loop6: detected capacity change from 0 to 1024
[  190.444551][T13275] loop0: detected capacity change from 0 to 128
[  190.454179][T13275] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  190.467564][T13275] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  190.529923][T13281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.578212][T13281] tipc: Disabling bearer <eth:syzkaller0>
[  190.600041][T13288] tipc: Started in network mode
[  190.605001][T13288] tipc: Node identity 863dfa82fce3, cluster identity 4711
[  190.612239][T13288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.662068][T13288] tipc: Disabling bearer <eth:syzkaller0>
[  190.756454][T13303] loop6: detected capacity change from 0 to 512
[  190.758427][T13304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.763618][T13303] ext4: Unknown parameter 'nouser_xattr'
[  190.785027][T13303] loop6: detected capacity change from 0 to 1024
[  190.803826][T13304] tipc: Disabling bearer <eth:syzkaller0>
[  190.810095][T13303] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  190.825330][T13303] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  190.837650][T13303] EXT4-fs (loop6): This should not happen!! Data will be lost
[  190.837650][T13303] 
[  190.847358][T13303] EXT4-fs (loop6): Total free blocks count 0
[  190.853432][T13303] EXT4-fs (loop6): Free/Dirty block details
[  190.859379][T13303] EXT4-fs (loop6): free_blocks=68451041280
[  190.865220][T13303] EXT4-fs (loop6): dirty_blocks=80
[  190.870344][T13303] EXT4-fs (loop6): Block reservation details
[  190.876425][T13303] EXT4-fs (loop6): i_reserved_data_blocks=5
[  190.899211][T11554] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  190.911648][T11554] EXT4-fs (loop6): This should not happen!! Data will be lost
[  190.911648][T11554] 
[  191.067084][T13322] loop6: detected capacity change from 0 to 512
[  191.270311][T13336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.304332][T13333] tipc: Disabling bearer <eth:syzkaller0>
[  191.365953][T13344] loop6: detected capacity change from 0 to 512
[  191.372811][T13344] EXT4-fs: Ignoring removed oldalloc option
[  191.380587][T13344] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3486: Parent and EA inode have the same ino 15
[  191.393603][T13344] EXT4-fs (loop6): 1 orphan inode deleted
[  191.400733][T13344] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3486: deleted inode referenced: 15
[  191.413113][T13344] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  191.598120][T13375] loop0: detected capacity change from 0 to 512
[  191.605039][T13375] EXT4-fs: Ignoring removed oldalloc option
[  191.612902][T13375] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3500: Parent and EA inode have the same ino 15
[  191.626703][T13375] EXT4-fs (loop0): 1 orphan inode deleted
[  191.633660][T13375] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3500: deleted inode referenced: 15
[  191.647376][T13375] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  191.721823][T13379] loop5: detected capacity change from 0 to 2048
[  191.806103][T13390] netlink: 'syz.6.3505': attribute type 10 has an invalid length.
[  191.827593][T13394] loop5: detected capacity change from 0 to 128
[  191.845691][T13394] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  191.872825][T13394] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.908139][T13390] team0: Device hsr_slave_0 failed to register rx_handler
[  192.002036][T13416] loop6: detected capacity change from 0 to 512
[  192.008883][T13416] EXT4-fs: Ignoring removed oldalloc option
[  192.012358][T13407] vlan2: entered promiscuous mode
[  192.020027][T13407] vlan2: entered allmulticast mode
[  192.020237][T13416] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3514: Parent and EA inode have the same ino 15
[  192.025246][T13407] hsr_slave_1: entered allmulticast mode
[  192.039919][T13416] EXT4-fs (loop6): 1 orphan inode deleted
[  192.052174][T13416] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3514: deleted inode referenced: 15
[  192.066040][T13416] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  192.083043][T13407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13407 comm=syz.3.3511
[  192.170958][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.178430][T13427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.188611][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.196067][T13427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.370546][T13433] loop5: detected capacity change from 0 to 128
[  192.385937][T13433] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.413702][T13431] netlink: 'syz.4.3519': attribute type 10 has an invalid length.
[  192.425118][T13433] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.440808][T13431] team0: Port device dummy0 added
[  192.465901][T13431] netlink: 'syz.4.3519': attribute type 10 has an invalid length.
[  192.495216][T13431] team0: Port device dummy0 removed
[  192.507315][T13431] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  192.628533][T13449] atomic_op ffff8881038e4528 conn xmit_atomic 0000000000000000
[  192.738548][T13454] vlan2: entered promiscuous mode
[  192.743712][T13454] vlan2: entered allmulticast mode
[  192.749044][T13454] hsr_slave_1: entered allmulticast mode
[  192.766909][T13459] __nla_validate_parse: 17 callbacks suppressed
[  192.766926][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3524'.
[  192.877393][T13465] loop0: detected capacity change from 0 to 128
[  192.888771][T13465] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.947495][T13465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.114744][T13472] netlink: 'syz.0.3535': attribute type 1 has an invalid length.
[  193.147527][T13472] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.175763][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'.
[  193.221393][T13474] bond1 (unregistering): Released all slaves
[  193.473128][T13450] net_ratelimit: 1 callbacks suppressed
[  193.473144][T13450] Set syz1 is full, maxelem 65536 reached
[  193.560493][T13480] loop6: detected capacity change from 0 to 512
[  193.571018][T13480] EXT4-fs: Ignoring removed oldalloc option
[  193.584880][T13482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.593863][T13480] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3538: Parent and EA inode have the same ino 15
[  193.608923][T13482] tipc: Disabling bearer <eth:syzkaller0>
[  193.625069][T13480] EXT4-fs (loop6): 1 orphan inode deleted
[  193.633328][T13480] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3538: deleted inode referenced: 15
[  193.667064][T13480] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3538'.
[  193.685033][T13480] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  193.745655][T13478] netlink: 'syz.5.3537': attribute type 10 has an invalid length.
[  193.766683][T13478] bond0: (slave dummy0): Releasing backup interface
[  193.775865][T13478] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  193.794047][T13495] loop6: detected capacity change from 0 to 512
[  193.800545][T13483] netlink: 'syz.5.3537': attribute type 10 has an invalid length.
[  193.812101][T13495] EXT4-fs: Ignoring removed oldalloc option
[  193.815203][T13478] team0: Failed to send options change via netlink (err -105)
[  193.822778][   T29] kauditd_printk_skb: 214 callbacks suppressed
[  193.822808][   T29] audit: type=1326 audit(1757663522.135:25420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f322f8deba9 code=0x0
[  193.825562][T13478] team0: Port device dummy0 added
[  193.836175][T13495] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3540: Parent and EA inode have the same ino 15
[  193.866481][T13483] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  193.912846][T13495] EXT4-fs (loop6): 1 orphan inode deleted
[  193.928001][T13483] team0: Failed to send options change via netlink (err -105)
[  193.942450][T13483] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  193.958475][T13495] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3540: deleted inode referenced: 15
[  193.970285][T13483] team0: Port device dummy0 removed
[  193.980488][T13495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3540'.
[  193.993086][T13483] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  194.001963][T13476] loop0: detected capacity change from 0 to 1024
[  194.009086][T13495] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  194.009674][   T29] audit: type=1326 audit(1757663522.325:25421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.3.3544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0343aeba9 code=0x0
[  194.027621][T13476] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  194.056424][T13476] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  194.064608][T13476] EXT4-fs (loop0): orphan cleanup on readonly fs
[  194.071305][T13476] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  194.086025][T13476] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  194.093086][T13476] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  194.106443][T13476] EXT4-fs (loop0): Remounting filesystem read-only
[  194.113244][T13476] EXT4-fs (loop0): 1 orphan inode deleted
[  194.283428][T10868] EXT4-fs unmount: 40 callbacks suppressed
[  194.283447][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.310001][T13517] loop0: detected capacity change from 0 to 128
[  194.317986][T13517] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  194.330150][T13517] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  194.371716][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3548'.
[  194.401997][T13523] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  194.408679][T13523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  194.416320][T13523] vhci_hcd vhci_hcd.0: Device attached
[  194.483825][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'.
[  194.583062][T13524] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  194.592186][T11586] vhci_hcd: stop threads
[  194.596582][T11586] vhci_hcd: release socket
[  194.601055][T11586] vhci_hcd: disconnect device
[  194.606161][T11379] vhci_hcd: vhci_device speed not set
[  194.613140][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.650374][T13532] loop6: detected capacity change from 0 to 164
[  194.689819][T13535] loop6: detected capacity change from 0 to 512
[  194.696806][T13535] EXT4-fs: Ignoring removed oldalloc option
[  194.705261][T13535] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3553: Parent and EA inode have the same ino 15
[  194.723254][T13535] EXT4-fs (loop6): 1 orphan inode deleted
[  194.729684][T13535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.745664][T13535] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3553: deleted inode referenced: 15
[  194.772638][T13535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3553'.
[  194.784908][T13535] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  194.798116][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3554'.
[  194.809692][T13538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3554'.
[  194.838499][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.864820][T13540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.873900][T13540] tipc: Disabling bearer <eth:syzkaller0>
[  195.018586][   T29] audit: type=1400 audit(1757663523.335:25422): avc:  denied  { watch } for  pid=13543 comm="syz.4.3557" path="/96" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  195.199651][T13546] loop6: detected capacity change from 0 to 1024
[  195.206999][T13546] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  195.220013][T13546] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  195.228188][T13546] EXT4-fs (loop6): orphan cleanup on readonly fs
[  195.236183][T13546] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  195.250780][T13546] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  195.255862][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'.
[  195.263902][T13546] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  195.280344][ T4942] usb 9-1: enqueue for inactive port 0
[  195.285961][ T4942] usb 9-1: enqueue for inactive port 0
[  195.291772][T13546] EXT4-fs (loop6): Remounting filesystem read-only
[  195.298393][T13546] EXT4-fs (loop6): 1 orphan inode deleted
[  195.304735][T13546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.355096][ T4942] vhci_hcd: vhci_device speed not set
[  195.363631][   T29] audit: type=1326 audit(1757663523.675:25423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.0.3562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe19594eba9 code=0x0
[  195.397572][   T29] audit: type=1326 audit(1757663523.715:25424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.5.3561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f819f62eba9 code=0x0
[  195.436937][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.460609][T13565] loop6: detected capacity change from 0 to 1024
[  195.467377][T13565] ext4: Unknown parameter 'mask'
[  195.711680][T13579] atomic_op ffff888125b78d28 conn xmit_atomic 0000000000000000
[  195.722655][   T29] audit: type=1326 audit(1757663524.035:25425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.6.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  195.746604][   T29] audit: type=1326 audit(1757663524.035:25426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.6.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  195.770402][   T29] audit: type=1326 audit(1757663524.035:25427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.6.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  195.785509][T13581] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  195.794040][   T29] audit: type=1326 audit(1757663524.035:25428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.6.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  195.826129][   T29] audit: type=1326 audit(1757663524.035:25429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.6.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  196.324752][T13592] Set syz1 is full, maxelem 65536 reached
[  196.389396][T13611] netlink: 'syz.5.3579': attribute type 21 has an invalid length.
[  196.543532][T13623] netlink: 'syz.0.3584': attribute type 13 has an invalid length.
[  196.574995][T13626] loop6: detected capacity change from 0 to 512
[  196.584049][T13626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3585: bg 0: block 5: invalid block bitmap
[  196.598544][T13626] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  196.609207][T13626] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3585: invalid indirect mapped block 3 (level 2)
[  196.627792][T13626] EXT4-fs (loop6): 2 truncates cleaned up
[  196.629520][T13623] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.634191][T13626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.640850][T13623] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.691364][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.749474][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.761078][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.830279][T11554] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.842718][T11554] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.853300][T13635] tipc: Started in network mode
[  196.858423][T13635] tipc: Node identity 76dc76b3d09a, cluster identity 4711
[  196.865698][T13635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.874612][T13635] tipc: Disabling bearer <eth:syzkaller0>
[  196.882106][T11554] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.891371][T11554] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.190940][T13644] netlink: 'syz.4.3589': attribute type 13 has an invalid length.
[  197.279831][T13644] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.287195][T13644] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.443364][T11586] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.452394][T11586] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.482267][T11586] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.491325][T11586] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.500845][T11586] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.509791][T11586] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.519363][T11586] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.528390][T11586] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.657033][T13667] loop6: detected capacity change from 0 to 512
[  197.671354][T13667] EXT4-fs: Ignoring removed oldalloc option
[  197.675841][T13659] bridge0: entered promiscuous mode
[  197.680469][T13667] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3596: Parent and EA inode have the same ino 15
[  197.684889][T13659] macsec1: entered promiscuous mode
[  197.695628][T13667] EXT4-fs (loop6): 1 orphan inode deleted
[  197.702827][T13659] bridge0: port 3(macsec1) entered blocking state
[  197.706799][T13667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.712469][T13659] bridge0: port 3(macsec1) entered disabled state
[  197.730190][T13667] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  197.770449][T13659] macsec1: entered allmulticast mode
[  197.775970][T13659] bridge0: entered allmulticast mode
[  197.789509][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.799890][T13659] macsec1: left allmulticast mode
[  197.805001][T13659] bridge0: left allmulticast mode
[  197.820500][T13659] bridge0: left promiscuous mode
[  197.849813][T13676] vlan2: entered promiscuous mode
[  197.855090][T13676] vlan2: entered allmulticast mode
[  197.860343][T13676] hsr_slave_1: entered allmulticast mode
[  197.873836][T13676] __nla_validate_parse: 7 callbacks suppressed
[  197.873853][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'.
[  197.974908][T13683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.986021][T13683] tipc: Disabling bearer <eth:syzkaller0>
[  198.374722][T13701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3610'.
[  198.851346][T13710] loop6: detected capacity change from 0 to 512
[  198.867209][T13710] EXT4-fs: Ignoring removed oldalloc option
[  198.886346][T13710] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3614: Parent and EA inode have the same ino 15
[  198.915511][T13710] EXT4-fs (loop6): 1 orphan inode deleted
[  198.926540][T13710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.944924][T13710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3614'.
[  198.956450][T13710] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  199.029566][T13719] netlink: 'syz.3.3611': attribute type 13 has an invalid length.
[  199.040381][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.113172][T13719] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.120554][T13719] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.163162][T13731] loop6: detected capacity change from 0 to 512
[  199.200396][T13731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.217835][T13719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.228715][T13719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.229986][T13731] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.320119][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.357854][T11576] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.382973][T11576] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.415785][   T29] kauditd_printk_skb: 67 callbacks suppressed
[  199.415803][   T29] audit: type=1326 audit(1757663527.715:25497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.445690][   T29] audit: type=1326 audit(1757663527.715:25498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.455574][T11585] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.469442][   T29] audit: type=1326 audit(1757663527.715:25499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.501837][   T29] audit: type=1326 audit(1757663527.715:25500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.522209][T11585] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.525744][   T29] audit: type=1326 audit(1757663527.715:25501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.525779][   T29] audit: type=1326 audit(1757663527.725:25502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.525866][   T29] audit: type=1326 audit(1757663527.725:25503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.605655][   T29] audit: type=1326 audit(1757663527.725:25504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.6.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  199.684524][   T29] audit: type=1326 audit(1757663527.825:25505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13739 comm="syz.4.3624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f322f8deba9 code=0x0
[  199.716951][T13752] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  199.718905][   T29] audit: type=1326 audit(1757663528.025:25506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.6.3628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c1abeba9 code=0x0
[  199.723542][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  199.754138][T13752] vhci_hcd vhci_hcd.0: Device attached
[  199.933801][T13755] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  199.953085][T11586] vhci_hcd: stop threads
[  199.957396][T11586] vhci_hcd: release socket
[  199.961872][T11586] vhci_hcd: disconnect device
[  200.005000][ T4942] usb 11-1: new low-speed USB device number 3 using vhci_hcd
[  200.012723][ T4942] usb 11-1: enqueue for inactive port 0
[  200.023945][ T4942] usb 11-1: enqueue for inactive port 0
[  200.037392][ T4942] usb 11-1: enqueue for inactive port 0
[  200.125219][ T4942] vhci_hcd: vhci_device speed not set
[  200.292563][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3635'.
[  200.360144][T13776] macsec1: entered promiscuous mode
[  200.365488][T13776] bridge0: entered promiscuous mode
[  200.371140][T13776] bridge0: port 3(macsec1) entered blocking state
[  200.377626][T13776] bridge0: port 3(macsec1) entered disabled state
[  200.384246][T13776] macsec1: entered allmulticast mode
[  200.389591][T13776] bridge0: entered allmulticast mode
[  200.396669][T13776] macsec1: left allmulticast mode
[  200.401735][T13776] bridge0: left allmulticast mode
[  200.407880][T13776] bridge0: left promiscuous mode
[  200.753211][T13801] vlan0: entered promiscuous mode
[  200.758441][T13801] vlan0: entered allmulticast mode
[  200.763613][T13801] hsr_slave_1: entered allmulticast mode
[  200.777327][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3647'.
[  200.829410][T13811] bridge0: entered promiscuous mode
[  200.837905][T13811] macsec1: entered promiscuous mode
[  200.854832][T13811] bridge0: port 3(macsec1) entered blocking state
[  200.861449][T13811] bridge0: port 3(macsec1) entered disabled state
[  200.875282][T13817] netlink: 'syz.4.3653': attribute type 1 has an invalid length.
[  200.876613][T13811] macsec1: entered allmulticast mode
[  200.888435][T13811] bridge0: entered allmulticast mode
[  200.906331][T13811] macsec1: left allmulticast mode
[  200.911692][T13811] bridge0: left allmulticast mode
[  200.928081][T13811] bridge0: left promiscuous mode
[  200.984084][T13824] loop6: detected capacity change from 0 to 1024
[  201.005393][T13824] ext4: Unknown parameter 'mask'
[  201.169968][T13834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  201.176518][T13834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.184184][T13834] vhci_hcd vhci_hcd.0: Device attached
[  201.227162][T13839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.246601][T13839] tipc: Disabling bearer <eth:syzkaller0>
[  201.329132][T13842] loop6: detected capacity change from 0 to 512
[  201.336977][T13842] EXT4-fs: Ignoring removed oldalloc option
[  201.344682][T13842] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3662: Parent and EA inode have the same ino 15
[  201.358644][T13842] EXT4-fs (loop6): 1 orphan inode deleted
[  201.364898][T13842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.379703][T13842] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3662: deleted inode referenced: 15
[  201.391790][T13842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3662'.
[  201.402650][T13842] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  201.430043][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.445102][ T4942] usb 1-1: new low-speed USB device number 10 using vhci_hcd
[  201.463147][T13835] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 8
[  201.471365][T11554] vhci_hcd: stop threads
[  201.475685][T11554] vhci_hcd: release socket
[  201.480116][T11554] vhci_hcd: disconnect device
[  201.495316][T13847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.502828][T13847] tipc: Disabling bearer <eth:syzkaller0>
[  201.614042][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3665'.
[  201.875003][T13859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3667'.
[  202.141512][T13873] bridge0: entered promiscuous mode
[  202.146916][T13873] macsec1: entered promiscuous mode
[  202.153079][T13873] bridge0: port 3(macsec1) entered blocking state
[  202.159730][T13873] bridge0: port 3(macsec1) entered disabled state
[  202.166334][T13873] macsec1: entered allmulticast mode
[  202.171646][T13873] bridge0: entered allmulticast mode
[  202.177524][T13873] macsec1: left allmulticast mode
[  202.182696][T13873] bridge0: left allmulticast mode
[  202.188498][T13873] bridge0: left promiscuous mode
[  202.330360][T13887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.340119][T13887] tipc: Disabling bearer <eth:syzkaller0>
[  202.349648][T13889] loop6: detected capacity change from 0 to 128
[  202.356511][T13889] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  202.368955][T13889] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  202.492319][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'.
[  202.507250][T13914] loop6: detected capacity change from 0 to 1024
[  202.514343][T13914] ext4: Unknown parameter 'mask'
[  202.580084][T13916] bridge0: entered promiscuous mode
[  202.586515][T13916] macsec1: entered promiscuous mode
[  202.592896][T13916] bridge0: port 3(macsec1) entered blocking state
[  202.599456][T13916] bridge0: port 3(macsec1) entered disabled state
[  202.606197][T13916] macsec1: entered allmulticast mode
[  202.611500][T13916] bridge0: entered allmulticast mode
[  202.617276][T13916] macsec1: left allmulticast mode
[  202.622336][T13916] bridge0: left allmulticast mode
[  202.628124][T13916] bridge0: left promiscuous mode
[  202.691208][T13921] loop6: detected capacity change from 0 to 512
[  202.699235][T13921] EXT4-fs: Ignoring removed oldalloc option
[  202.708031][T13921] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3690: Parent and EA inode have the same ino 15
[  202.724770][T13921] EXT4-fs (loop6): 1 orphan inode deleted
[  202.731018][T13921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.745854][T13921] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3690: deleted inode referenced: 15
[  202.752138][T13927] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  202.763720][T13927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  202.771401][T13927] vhci_hcd vhci_hcd.0: Device attached
[  202.789531][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.950082][T13928] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  202.963169][T11554] vhci_hcd: stop threads
[  202.967527][T11554] vhci_hcd: release socket
[  202.972104][T11554] vhci_hcd: disconnect device
[  203.015009][ T4944] usb 11-1: new low-speed USB device number 4 using vhci_hcd
[  203.022733][ T4944] usb 11-1: enqueue for inactive port 0
[  203.029714][ T4944] usb 11-1: enqueue for inactive port 0
[  203.035666][ T4944] usb 11-1: enqueue for inactive port 0
[  203.116688][ T4944] vhci_hcd: vhci_device speed not set
[  203.173446][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3699'.
[  203.204316][T13954] loop6: detected capacity change from 0 to 1024
[  203.219747][T13954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.225473][T13956] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  203.238308][T13956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  203.245960][T13956] vhci_hcd vhci_hcd.0: Device attached
[  203.295119][T13954] bridge0: entered promiscuous mode
[  203.306465][T13954] macsec1: entered promiscuous mode
[  203.320896][T13954] bridge0: port 3(macsec1) entered blocking state
[  203.327640][T13954] bridge0: port 3(macsec1) entered disabled state
[  203.334390][T13954] macsec1: entered allmulticast mode
[  203.339745][T13954] bridge0: entered allmulticast mode
[  203.355006][T13954] macsec1: left allmulticast mode
[  203.360101][T13954] bridge0: left allmulticast mode
[  203.366340][T13954] bridge0: left promiscuous mode
[  203.436471][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.495005][T11378] usb 9-1: new low-speed USB device number 9 using vhci_hcd
[  203.550417][T13959] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6
[  203.558052][T11614] vhci_hcd: stop threads
[  203.562334][T11614] vhci_hcd: release socket
[  203.566820][T11614] vhci_hcd: disconnect device
[  203.723352][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3713'.
[  203.738237][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3718'.
[  203.747831][T13998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3718'.
[  203.853136][T14011] loop6: detected capacity change from 0 to 512
[  203.863095][T14011] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  203.869779][T14011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  203.877364][T14011] vhci_hcd vhci_hcd.0: Device attached
[  204.025663][T14012] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  204.032882][T11586] vhci_hcd: stop threads
[  204.037193][T11586] vhci_hcd: release socket
[  204.041766][T11586] vhci_hcd: disconnect device
[  204.064991][ T4945] vhci_hcd: vhci_device speed not set
[  204.403209][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3729'.
[  204.448870][T14038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.456849][T14038] tipc: Disabling bearer <eth:syzkaller0>
[  204.539663][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  204.539680][   T29] audit: type=1326 audit(1757663532.855:25676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.3.3733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0343aeba9 code=0x0
[  204.634086][   T29] audit: type=1326 audit(1757663532.945:25677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.657899][   T29] audit: type=1326 audit(1757663532.945:25678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.708157][   T29] audit: type=1326 audit(1757663532.945:25679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.731797][   T29] audit: type=1326 audit(1757663532.955:25680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.755400][   T29] audit: type=1326 audit(1757663532.955:25681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.779107][   T29] audit: type=1326 audit(1757663532.995:25682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.802674][   T29] audit: type=1326 audit(1757663532.995:25683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19594eba9 code=0x7ffc0000
[  204.831345][   T29] audit: type=1326 audit(1757663533.135:25684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14048 comm="syz.4.3737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f322f8deba9 code=0x0
[  204.938543][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'.
[  204.974461][T14072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.983322][T14072] tipc: Disabling bearer <eth:syzkaller0>
[  205.110529][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3748'.
[  205.122095][T14081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3748'.
[  205.222506][   T29] audit: type=1326 audit(1757663533.535:25685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.6.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  205.333101][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3755'.
[  205.381094][T14105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.389131][T14105] tipc: Disabling bearer <eth:syzkaller0>
[  205.497963][T14108] loop6: detected capacity change from 0 to 512
[  205.504565][T14108] EXT4-fs: Ignoring removed oldalloc option
[  205.516906][T14108] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3759: Parent and EA inode have the same ino 15
[  205.530929][T14108] EXT4-fs (loop6): 1 orphan inode deleted
[  205.537124][T14108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.551022][T14108] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3759: deleted inode referenced: 15
[  205.596143][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.935944][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3768'.
[  206.475071][ T4942] usb 1-1: enqueue for inactive port 0
[  206.480717][ T4942] usb 1-1: enqueue for inactive port 0
[  206.565055][ T4942] vhci_hcd: vhci_device speed not set
[  206.884710][T14191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.893594][T14191] tipc: Disabling bearer <eth:syzkaller0>
[  207.452024][T14227] 
: renamed from bond0
[  207.548339][T14231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.555805][T14231] tipc: Disabling bearer <eth:syzkaller0>
[  207.822427][T14255] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  207.828994][T14255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  207.836655][T14255] vhci_hcd vhci_hcd.0: Device attached
[  207.874063][T14259] macsec1: entered promiscuous mode
[  207.879432][T14259] bridge0: entered promiscuous mode
[  207.893937][T14259] bridge0: port 3(macsec1) entered blocking state
[  207.900608][T14259] bridge0: port 3(macsec1) entered disabled state
[  207.921433][T14259] macsec1: entered allmulticast mode
[  207.926803][T14259] bridge0: entered allmulticast mode
[  207.945595][T14259] macsec1: left allmulticast mode
[  207.950748][T14259] bridge0: left allmulticast mode
[  207.967418][T14259] bridge0: left promiscuous mode
[  208.014773][T14256] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6
[  208.035823][T11614] vhci_hcd: stop threads
[  208.040115][T11614] vhci_hcd: release socket
[  208.044550][T11614] vhci_hcd: disconnect device
[  208.317344][T14273] __nla_validate_parse: 9 callbacks suppressed
[  208.317368][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3825'.
[  208.439267][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3831'.
[  208.496173][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'.
[  208.565125][T11378] usb 9-1: enqueue for inactive port 0
[  208.576182][T11378] usb 9-1: enqueue for inactive port 0
[  208.639719][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'.
[  208.656223][T11378] vhci_hcd: vhci_device speed not set
[  208.740270][T14315] loop6: detected capacity change from 0 to 512
[  208.755474][T14315] EXT4-fs: Ignoring removed oldalloc option
[  208.778149][T14315] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3843: Parent and EA inode have the same ino 15
[  208.826987][T14315] EXT4-fs (loop6): 1 orphan inode deleted
[  208.837337][T14315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.851707][T14315] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3843: deleted inode referenced: 15
[  208.883200][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3843'.
[  208.934533][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.991045][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3846'.
[  209.077788][T14333] loop6: detected capacity change from 0 to 512
[  209.100394][T14335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.109733][T14333] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  209.116294][T14333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  209.123855][T14333] vhci_hcd vhci_hcd.0: Device attached
[  209.143755][T14335] tipc: Disabling bearer <eth:syzkaller0>
[  209.309531][T14336] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  209.317163][T11585] vhci_hcd: stop threads
[  209.321495][T11585] vhci_hcd: release socket
[  209.326069][T11585] vhci_hcd: disconnect device
[  209.365012][ T4942] usb 13-1: new low-speed USB device number 3 using vhci_hcd
[  209.373765][ T4942] usb 13-1: enqueue for inactive port 0
[  209.388803][ T4942] usb 13-1: enqueue for inactive port 0
[  209.397750][ T4942] usb 13-1: enqueue for inactive port 0
[  209.475046][ T4942] vhci_hcd: vhci_device speed not set
[  209.483368][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3856'.
[  209.513572][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'.
[  209.568993][   T29] kauditd_printk_skb: 202 callbacks suppressed
[  209.569009][   T29] audit: type=1326 audit(1757663537.885:25888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.5.3857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f819f62eba9 code=0x0
[  209.645533][T14372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.653617][T14372] tipc: Disabling bearer <eth:syzkaller0>
[  209.840333][T14384] macsec1: entered promiscuous mode
[  209.845621][T14384] bridge0: entered promiscuous mode
[  209.851260][T14384] bridge0: port 3(macsec1) entered blocking state
[  209.857790][T14384] bridge0: port 3(macsec1) entered disabled state
[  209.864433][T14384] macsec1: entered allmulticast mode
[  209.869755][T14384] bridge0: entered allmulticast mode
[  209.875741][T14384] macsec1: left allmulticast mode
[  209.880774][T14384] bridge0: left allmulticast mode
[  209.886392][T14384] bridge0: left promiscuous mode
[  209.988762][T14390] loop6: detected capacity change from 0 to 512
[  209.995532][T14390] EXT4-fs: Ignoring removed oldalloc option
[  210.005237][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'.
[  210.015285][T14390] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3869: Parent and EA inode have the same ino 15
[  210.028091][T14390] EXT4-fs (loop6): 1 orphan inode deleted
[  210.034235][T14390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.047389][T14390] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3869: deleted inode referenced: 15
[  210.063890][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3869'.
[  210.091097][   T29] audit: type=1400 audit(1757663538.405:25889): avc:  denied  { create } for  pid=14395 comm="syz.4.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  210.124154][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.153646][T14402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.165714][T14402] tipc: Disabling bearer <eth:syzkaller0>
[  210.253879][   T29] audit: type=1326 audit(1757663538.565:25890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.6.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.278286][   T29] audit: type=1326 audit(1757663538.565:25891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.6.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.302043][   T29] audit: type=1326 audit(1757663538.575:25892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.6.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.325819][   T29] audit: type=1326 audit(1757663538.575:25893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.6.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.349459][   T29] audit: type=1326 audit(1757663538.575:25894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.6.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.373448][   T29] audit: type=1326 audit(1757663538.575:25895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.6.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.377266][T14412] macsec1: entered promiscuous mode
[  210.402657][T14412] bridge0: entered promiscuous mode
[  210.411623][T14412] bridge0: port 3(macsec1) entered blocking state
[  210.418227][T14412] bridge0: port 3(macsec1) entered disabled state
[  210.436508][T14412] macsec1: entered allmulticast mode
[  210.441890][T14412] bridge0: entered allmulticast mode
[  210.452456][T14412] macsec1: left allmulticast mode
[  210.457621][T14412] bridge0: left allmulticast mode
[  210.467723][   T29] audit: type=1326 audit(1757663538.785:25896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14422 comm="syz.6.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.493575][   T29] audit: type=1326 audit(1757663538.805:25897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14422 comm="syz.6.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe8c1abeba9 code=0x7ffc0000
[  210.517476][T14412] bridge0: left promiscuous mode
[  210.550938][T14423] loop6: detected capacity change from 0 to 512
[  210.559146][T14423] EXT4-fs: Ignoring removed mblk_io_submit option
[  210.566877][T14423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  210.580711][T14423] EXT4-fs (loop6): 1 truncate cleaned up
[  210.587623][T14423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.600963][T14423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.646486][T14438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.662895][T14438] tipc: Disabling bearer <eth:syzkaller0>
[  211.502878][T14480] block device autoloading is deprecated and will be removed.
[  211.567594][T14487] loop0: detected capacity change from 0 to 512
[  211.574565][T14487] EXT4-fs: Ignoring removed oldalloc option
[  211.596887][T14487] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3911: Parent and EA inode have the same ino 15
[  211.611365][T14487] EXT4-fs (loop0): 1 orphan inode deleted
[  211.619629][T14487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.632765][T14487] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.3911: deleted inode referenced: 15
[  211.685107][T10868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.744133][T14495] bridge0: entered promiscuous mode
[  211.759679][T14495] macsec1: entered promiscuous mode
[  211.776388][T14495] bridge0: port 3(macsec1) entered blocking state
[  211.782898][T14495] bridge0: port 3(macsec1) entered disabled state
[  211.815320][T14495] macsec1: entered allmulticast mode
[  211.820687][T14495] bridge0: entered allmulticast mode
[  211.834426][T14495] macsec1: left allmulticast mode
[  211.839671][T14495] bridge0: left allmulticast mode
[  211.858359][T14495] bridge0: left promiscuous mode
[  211.868185][T14513] loop0: detected capacity change from 0 to 128
[  211.911252][T14513] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  211.955550][T14513] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  211.989260][T14521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.007802][T14521] tipc: Disabling bearer <eth:syzkaller0>
[  212.110140][T14531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.118748][T14531] tipc: Disabling bearer <eth:syzkaller0>
[  212.261566][T14558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.269470][T14558] tipc: Disabling bearer <eth:syzkaller0>
[  212.453931][T14575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.462911][T14575] tipc: Disabling bearer <eth:syzkaller0>
[  212.656243][T14586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  212.662807][T14586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  212.670453][T14586] vhci_hcd vhci_hcd.0: Device attached
[  212.907602][T14587] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  212.915108][T11378] usb 7-1: new low-speed USB device number 4 using vhci_hcd
[  212.916394][T11585] vhci_hcd: stop threads
[  212.926786][T11585] vhci_hcd: release socket
[  212.931273][T11585] vhci_hcd: disconnect device
[  212.948554][T14610] bridge0: entered promiscuous mode
[  212.957471][T14610] macsec1: entered promiscuous mode
[  212.965919][T14610] bridge0: port 3(macsec1) entered blocking state
[  212.972492][T14610] bridge0: port 3(macsec1) entered disabled state
[  212.979342][T14610] macsec1: entered allmulticast mode
[  212.984688][T14610] bridge0: entered allmulticast mode
[  212.990633][T14610] macsec1: left allmulticast mode
[  212.995701][T14610] bridge0: left allmulticast mode
[  213.001534][T14610] bridge0: left promiscuous mode
[  213.160768][T14625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.171672][T14625] tipc: Disabling bearer <eth:syzkaller0>
[  213.262400][T14630] ==================================================================
[  213.270528][T14630] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault
[  213.277572][T14630] 
[  213.279899][T14630] write to 0xffff888118c2d448 of 8 bytes by task 14626 on cpu 1:
[  213.287624][T14630]  shmem_fallocate+0x221/0x840
[  213.292410][T14630]  vfs_fallocate+0x3b6/0x400
[  213.297025][T14630]  madvise_vma_behavior+0x192d/0x1cf0
[  213.302421][T14630]  madvise_do_behavior+0x5b7/0x970
[  213.307557][T14630]  do_madvise+0x10e/0x190
[  213.311907][T14630]  __x64_sys_madvise+0x64/0x80
[  213.316695][T14630]  x64_sys_call+0x1f1a/0x2ff0
[  213.321409][T14630]  do_syscall_64+0xd2/0x200
[  213.325943][T14630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.331858][T14630] 
[  213.334196][T14630] read to 0xffff888118c2d448 of 8 bytes by task 14630 on cpu 0:
[  213.341840][T14630]  shmem_fault+0x90/0x250
[  213.346185][T14630]  __do_fault+0xb9/0x200
[  213.350447][T14630]  handle_mm_fault+0xf78/0x2c20
[  213.355316][T14630]  __get_user_pages+0x102e/0x1fa0
[  213.360355][T14630]  __mm_populate+0x243/0x3a0
[  213.364964][T14630]  vm_mmap_pgoff+0x232/0x2e0
[  213.369579][T14630]  ksys_mmap_pgoff+0xc2/0x310
[  213.374269][T14630]  x64_sys_call+0x14a3/0x2ff0
[  213.378984][T14630]  do_syscall_64+0xd2/0x200
[  213.383598][T14630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.389506][T14630] 
[  213.391830][T14630] value changed: 0x0000000000000000 -> 0xffffc90003683b58
[  213.398939][T14630] 
[  213.401283][T14630] Reported by Kernel Concurrency Sanitizer on:
[  213.407466][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.5.3969 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  213.418938][T14630] Tainted: [W]=WARN
[  213.422743][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  213.432804][T14630] ==================================================================
[  217.995110][T11378] usb 7-1: enqueue for inactive port 0
[  218.000630][T11378] usb 7-1: enqueue for inactive port 0
[  218.085133][T11378] vhci_hcd: vhci_device speed not set