last executing test programs:

3m4.614744972s ago: executing program 1 (id=2459):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x161602, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x6})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

3m4.535292006s ago: executing program 1 (id=2463):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0x20006b, 0x4)
recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

3m4.352724285s ago: executing program 1 (id=2469):
pipe2(0x0, 0x80)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x451f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x23, 0x0, 0x4851}, 0x20000004)

3m4.263412099s ago: executing program 1 (id=2471):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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")
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$cont(0x19, r2, 0xf, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x23, 0x201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x4, 0x8408, 0x5, 0x1, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
clock_gettime(0x0, 0x0)
ppoll(&(0x7f0000000000)=[{r5, 0x101a}], 0x1, &(0x7f0000000080), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r3, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc0, 0x2, "2c3271b74cdc5e37c06c1ecb716c12e6184e0a6f5e55341d257c0dfaa8cfa1d11d8b9fc9b0d5a798d9be22adf25e68ef154e9319e2b08665c18431c953e096f9aced1cc7dd1707f520f5bab76ea63c0302fc5c1156c58e9aba685115e2cbc5132990c8fe2e3ff3ce84b7c6be0e71b84e270db51701f5347c7321eb3b18df00f63de9391da28daf4797b15b244455e8d10a2b6530d953860ca4c756f045e405d42c05ca22d1d77cd805924372549562ede35e67ccc9cbc58f9acddc41"}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40084}, 0xc0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000022c0)={0xf, 0xfffffff9, 0x7f, 0x1f5, 0x6, 0x80001})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x25, 0x9, 0x70bd2b, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r8)
write$binfmt_register(r8, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8000, 0x3a, '[', 0x3a, 'net/tcp6\x00', 0x3a, './file1', 0x3a, [0x50]}, 0x32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018e58, &(0x7f0000000100)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@grpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@nomblk_io_submit}]}, 0x4, 0x62c, &(0x7f0000001140)="$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")
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')

3m4.079966407s ago: executing program 1 (id=2473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
socket$unix(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x3, 0x0, 0x0, 0x8001}})
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x10})
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x48d00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11b}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r9, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r11, {0x4, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010)

3m3.909470535s ago: executing program 1 (id=2476):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

3m3.867992017s ago: executing program 32 (id=2476):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

1.807102287s ago: executing program 4 (id=5384):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f00000002c0)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4080)
sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="6870e2c4fe5ee37665b8778a8c001676236ad4fadbf40218c046458401dc31d68a00a9d5661b3f48fb77645638be8caf3c0b45a48a7087ff7b54fc02c0d097f5fc7867a76ecb201fdb857317aed50a5b304b953e883e12f696e76d254a9e0d005a0c210af533d4ae4934585a8d9ef45e09b0e4a991ccc578d60c7691bef68cb2dd70d9961d71d354e6f4886001fc9498b6af1e41a1e2f2ac80c5dac7b391e283f4dffb3a6a004df8ab032b4b982015c941af1cbc8300c1c77a3ff72ba8dabd2e6d13675714fd24", 0xc7}, {&(0x7f0000000340)="be353811c2884ce56fdfcfbf74c71f08e9fd1d2c834d5caeda8ae7d8cdd3c388af37d607734257e95222525b06d267", 0x2f}, {&(0x7f0000000380)="3ab3c902270dbfefba76", 0xa}, {&(0x7f00000004c0)="0e4e4a3c359fcad7536ceff9bb49d3e128a9304281d392ca2d40cf9221ca109b68ce3f19d3819581f23139acd7d2a2cef17f2c85eadb4c8dc658d05bc480cc1c4ff799c906be3b20808cc25494940428c8c33fc760b44c27a8d45c19f9c738ddaee4bce93cd97545a1a05b161cc3712b525dbab7fadde1d6352ae463743cf640e4a850f2efd6757ece7dc71d2768852f94074c03ccc39723988fb2d96335179dca14ab8dbb982428cb8e05f8af680135b7a9b70374ab507ec8339e2ffc039d15f2ea818822f5cc4c82edca486a03b343f6", 0xd1}], 0x4, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x48}, 0x8001)
syz_usb_connect$cdc_ncm(0x1, 0x16a, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x158, 0x2, 0x1, 0x10, 0xa0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "1d4bd152"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x97, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mdlm_detail={0xdf, 0x24, 0x13, 0x8, "a415e4f95ace27ab02458b21380afabca0534f40ded7d7b7fba3b0501c12877f2232e6991b136475ef7706765665bfe890a8957943a919ed1bd9b455ea73b84b3de6692089e4d2ede575eb923d46430aa3abb6220d28f3e3b9d718f1ec59ccff0bf05e499abbf2304ad68439cc5eb2358e123756f7d3b5016372c46af575daa98b83a87814d4d23c25180b3b1bbeeaa8cb563c4b6ec8a494251eab4a9132c18790fa85a2af206f31e03b8afe960dcf675fa3b4e46bc928bc6385b598efba1186d7412f2f1ed6f6f8c19b031fc0656b7552bac282c527d1c4d6707d"}, @mdlm={0x15, 0x24, 0x12, 0xfbe}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5c, 0x1, 0x53}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x630, 0x1, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x9, 0xfe, 0x3, 0xe4d1d6b8335684e9, 0xfe}, 0x57, &(0x7f0000000800)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x2, 0xfffc}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "185a080e06ec3c23d8f80f7fa9cf8c9b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0xe4, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x56, 0xf00, 0x9, [0xff000f, 0xf]}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x9, 0x1ef00, 0x46}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0xd, 0x3ff}]}, 0x5, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x861}}, {0x81, &(0x7f00000008c0)=@string={0x81, 0x3, "0018acb2998a4369434c8e3453a8002f351d26cf0a3e0670079805c9028a21fe0f5f1d2351eeae124b4068660d2440a459acca61f5ae8785f00bd71c4406bb261aac28c20ddb4dc7c4c3e09cc0ad6037f3a5bbfcff7d22773815a57f737ae7ab9129663b673102e9a6133ccae4694ba8da7cfa8621fc2d039311441f009819"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x42b}}, {0xd1, &(0x7f0000000a00)=@string={0xd1, 0x3, "5a8719d2de26f7264791f2c8ff2c0d1b74b8ecec04bb143e55cc7989a135de3578cc7ce74a2cd998cc9613cca64707b6a80f7bee41a6342862570b8b91a6b09722ea25d75620779c8a11eeda57af3a0d734187bbb7196e3b62a9a60f55d965ad8b8de4177856293534a76647d58d36ea0977d28fac777378115bf85eb4269de311d8baa47108bc3f013e744e86e1a93af6247040682fe58187f9d74c330d774464e0f4ed36c28fb30a16753a813ad131f2bbf8837ca543de2c1930b6643d396c8ed8daa9169e112d0db0f75a72773e"}}]})

1.454911184s ago: executing program 2 (id=5388):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0x20006b, 0x4)
recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

1.431055295s ago: executing program 3 (id=5389):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
r1 = signalfd4(r0, &(0x7f0000000000)={[0xe]}, 0x8, 0x80800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="fb8d93e3280e73f12c2ec76ed7712fe40000000100000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000dded090e00000000000000000000feffffff0000"]}, 0x118)
unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='xprtrdma_post_send\x00', r7, 0x0, 0x7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@lazytime}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r8 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x349c8b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x2)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYRES64=r9, @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003", @ANYRESOCT=r8, @ANYRES32=r5], 0x84}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'dvmrp0\x00', <r13=>0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="681ccd74421ff6979d488bceb3ad09449b5b41d3bddc64b98cffc1b64c075111a41d89acdd4f119481b0d3eb386180169124e3f540b9588226fc42c951beabbf0baac586f8929f41941454b6dfe601f7bc8702311a03fcdcc5e783274c956ace2d44a0db6d76051a536a1c73748b8ea66a1ec23219e17f63a87e113926cdd23841f1add21d06e24426c6a19bcd0abf2cf103add2d1819920c6505d93f5dfc6112fda30ce302187255af718df7657767889274d", @ANYRES16=r12, @ANYBLOB="00012bbd7000fcdbdf2507000000050005007f000000080004000200000008000200010000002c000680080003000000000008000600190000000800060000000000080003007f00000108000700", @ANYRES32=r13, @ANYBLOB="08000300060000000800030007000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80004)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500000000000700", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

1.377996117s ago: executing program 2 (id=5391):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x1, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400007ffc}, 0x18)
syz_clone3(0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r5, &(0x7f00000018c0)=[{&(0x7f0000000300)="503cf98da9993f416ea19502a1058eeb2a60efebe3cdb1d78574a028817e4d0787cf20bd0a80f4a4ad61410fdce8018ee3adcf9ec59ff9361ed21916ce6257be269ad96debf6942a485ae5a3efdf5b9d8fdfb64222c0fd1df43fe5939dacda9f3da8e769d120410ae9979728f4ff0b01b8a03ac1c7d0bb3c6842baa9600603ff21d91872", 0x84}, {&(0x7f00000004c0)="6cf6fa122b5c6803ae19adb00e70db3bc914ef989f0e440284f9555936b35b54c535add9f56940fc407e85374cea832fc3037d61c391561a861b30966c4666c8d3d99ad8f00e9e21759febff67214d895b61eb0661ff14a1bfb4c0e0f8384ce0", 0x60}, {&(0x7f00000005c0)="b2a470edc4adfa22715ae358b6bb2dc2455b32b817d73ea3200bb08a7fad6bb3b901f0df25f0ead7bdd9cc4b6f0c59d8a0ca9ace5b7757630a7deca08461758663b01b3d06264eedb229169c700452d643385d2e4946ec0101088fc4f95233c0044938e95f36838599f6ea80af919642794bc2c76dfbb6dde778eaccdeed95fa4a593653f5c2ecc1cf53f245ff8324a09c6ad57af7e783", 0x97}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="4886980322485dce5722d651fc867fdc293909467f1a7322f894fcc15129a0c18005fc9b4b777b973767ec7ddd045af1c799d07d9ed171a3484a8df0ba1a52d475bf6e7e30dfb35ad92d9f9e4d8a1e0c931b3880df7ba563b58a100c2bda78c5fa5cb6cc3b5858bf30762303a05d284dae9e590eff282071d04599d93c790c05c3c0703ba39e242bbb911c633d14fb35c2fa3050cd563c50f7760d75c1286692dd62361d349dd90cd1fdbfa61d8fe6d40aa8537a82babbef5f5b30f00564ee92675f3058803559477bf8d60f4ff6362e461c24ce16", 0xd5}, {&(0x7f0000000180)="3fcce98cc8cc940c42d86c3ddaff2578348856c621fe45829d0dba6b8cbf83308da96f8a6c3a39c161f35a3f561a40cdaf5a501148389e", 0x37}, {&(0x7f0000000280)="1b3c8b63d3c9e6d73c6f377e68466174e554d4", 0x13}, {&(0x7f0000001780)="da462c5b73eb05483d714dd5ddaffc952d1b54ef05846c96125d7745aceb598f6d5d04a2ba0cee17d3dc5c1346dc02dcc10ce81bd75b4d6fbbbcae4ed05299d75b53114314481ef1ecda4d104f5cb9dbdd4324f9ade96b9bc9c8930fa7b9fb90b1aab79453ee28777fba209582686b8277a11d751358e40267f28e5c9b6031afbaeb44b6bfd73876bcafd512d112dcd13a2bd3f7e788eb3e521c92b51082e9d4893f165460b18d2e3ddfc32dfb144186d6f6db92ecbfff8775f728c7b49b37f058693d5e5f08464e5ce9defa623896", 0xcf}, {&(0x7f00000003c0)="ae4f50cecbb159782707c5c789084ea4fc99809767a272665f3849258b5d540ccdbd", 0x22}, {&(0x7f0000001880)="7650b51adb2e3f9cca203ff765e80f93ce96ba96d0ea1939a42f975540ff11b112484d59d5dcfecf", 0x28}], 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

1.357211698s ago: executing program 3 (id=5392):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.327075359s ago: executing program 2 (id=5395):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0, {0x1}}, './file0\x00'})
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="5d0277cb363972f05de0be7167ea18fdf4b155b2230c1df949dcfa647301d8ba", 0x20}, {&(0x7f0000000400)="8d272e34e12836a260735c70b2dfa4c460b5913217f9fc2bf1a8770731a6090a73e15398bc98f32bf0b0bab688216b173311a5d6a19ee0d26d81844e015633be5e3cfdd5eb66cba80b86fa9e46f408d7c7f10913c874baf527b2ebf54dcb9edc3dd43b62ee8c2a0f3263e638e8d4caf2a81d2e6f0c1230313973744cd9b2931ed233950e11f4ed933f583082e90fc9ce97eeccfc312d8b24642e0e721c98cf6d3c98644381c7e0eabc91989e773ffad81cc83286fd4b7a95e545c4034605ad0ba0e1d7cffdc0613082eb226429888aea", 0xd0}, {&(0x7f0000000500)="e3fa0aa13a18e8593fc1f3bf2a46f11d1766c174344d0caa4bc7caa47957709f39f922195b1b6b4e37c6605f394bbc237215381204e4b86705fca3f5cc9a5ab296929419977513417d873817171c63bc6fe6ecef34df587d95d9231d54771e8dcecfe57184fb569a6849d74e2be51b5c88c53c0f1f49a810d4d267fc55b0de4d", 0x80}, {&(0x7f0000000580)="53bc1461db08466166d76d4799b1509ed78ce4e2b33418b255f7cb9dcca93ff3d6f4dcad6717e641ca9b941796d0c7172f182f1026b3859fac4ea05f71cac4aca37295d391779c64733e246037f81404937935fa920fb3fb6ca926925a9ae4542c56075e1e00ab959ef0df63bcacda580b24d54318476aaad992f2c49fb4648bc3c5d2172547a2d3201063f43ea3834eaa2910b00cb661ba7754cdc1c97a0d8d6ee4453dc72b65d45cbb903859be87d03f59183da8c801030c", 0xb9}, {&(0x7f00000006c0)="76266a8b9907d35dd4c8dfa30a2987de313a253115675b5e39078e53c8466619c4c1f46b097d61d59b9df3dc9ae88bb1917d2bafa4e3ebe56f975dfb2c004ff13956d1a13773934b81cb1dca37897cde122ecd8e5cb42f70d18de7ea26c68cff79b0ab4dcac9345ceae4db22bdc9", 0x6e}, {&(0x7f0000000740)="8942331ec7a59664ef385259fdac39ee376fa7ea9c99b35e2709b85d0b8b9e355d318f54aff88f71d86ca53b3a2f2e74006dcef9ba", 0x35}, {&(0x7f0000000780)="e0db52d8a97e61f449270e635ebaee9606d47588460e0ed3c8be0b8a44984990f1fafec9acc588d3b0a8511e021e03990e566ba2b7fe2ff06fd10f720e581f23294e3027b3ec31044a41ee772b75dedc3e6b60ac7984c2be57090266249edc40eecdaf0fadc7583d74e6cbbc1bf3f5c2fd50698e1b2b07c22b44c66b2d4fb49efbfa4e7d0f3784312a82699f578a0b2162679755f2592aea8ba0440bc04e3a1d35f8bc3578bc73644f8fe4a61c2bfa507e6e1297d2e42f74a5c3e726d2c771ed59c5ff014329486e5f9c9a81a922b2f2c408f87634e765ed056fb3b71a1d3fffaec6877e3f1909c2b3737ec73345aa88", 0xf0}, {&(0x7f0000000880)="0d0de9d8448d", 0x6}], 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e80)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8)
mount$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x2000, &(0x7f0000000fc0)={[{@quota}, {@grpquota}, {@huge_within_size}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2a, 0x65, 0x6b, 0x31, 0x41147faa572934de, 0x6d]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x36, 0x33, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r8}}]})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000d40)={0x1, 0x0, 0x18, 0x20, 0x1dd, &(0x7f0000000940)})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000740)="240000001a005f0214f9f4e6ff0804000a000f00fd00"/36, 0x24)
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001580)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r11=>0x0, 0x4, 0x4, 0xf9, 0x550, 0x1c, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8000, 0xfffffff9, 0x4221}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000ffdbdf251900000024000180080003000200000008000100", @ANYRES32=r11, @ANYBLOB="08000300608177ca17b910ac42000000"], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4004800)
syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)

1.31437174s ago: executing program 3 (id=5396):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

1.262700382s ago: executing program 4 (id=5398):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x88, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x4070)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async)
close(0xffffffffffffffff) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
r5 = dup2(r4, r4) (async)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000618110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) (async)
set_mempolicy(0x6, 0x0, 0xe0) (async)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) (async)
write$tun(r5, 0x0, 0x46)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (rerun: 64)

1.258678903s ago: executing program 3 (id=5399):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010300003218298a000002000000000000001a00000005001300090000005bce7f69c0"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0x0, 0x4, 0x5, 0x0, 0x3, 0xfffffffffffffffd})
r4 = getpgrp(0x0)
r5 = syz_pidfd_open(r4, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r5, &(0x7f00000018c0), 0x0, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x20000000000002dc, &(0x7f0000000480)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r7, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r3, 0x289}], 0x51, 0x100)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080004400000000208000740000000050800064000000003050002000000000000000340dfff00040900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$hiddev(0xffffffffffffffff, &(0x7f0000000580)=""/243, 0xf3)

1.195041706s ago: executing program 4 (id=5402):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fchdir(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000a48000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/217, 0xe4, 0x0, &(0x7f0000000480)=""/194, 0x10c}, &(0x7f0000000040)=0x40)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001000)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="b875a1431a05b9319c404acaed8a33c44dff045b5c6af0363e2255c1cabf7d8d271b5d7e35673142d523215281b08537", 0x30}], 0x1}}], 0x1, 0x20000000)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000040)=""/48, 0x30}], 0x2}, 0x7}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9)
kexec_load(0x0, 0x0, 0x0, 0x0)

979.807406ms ago: executing program 5 (id=5404):
socket$kcm(0x10, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)=""/236, 0xec}], 0x1, 0x3, 0x4)
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/225, 0xe1}], 0x1, 0x941, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
r1 = memfd_secret(0x0)
fchmod(r1, 0x168)

930.321338ms ago: executing program 5 (id=5405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18)
r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000580)='dE\x00', 0x0)
close(r2)

929.669448ms ago: executing program 5 (id=5406):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x1, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400007ffc}, 0x18)
syz_clone3(0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r5, &(0x7f00000018c0)=[{&(0x7f0000000300)="503cf98da9993f416ea19502a1058eeb2a60efebe3cdb1d78574a028817e4d0787cf20bd0a80f4a4ad61410fdce8018ee3adcf9ec59ff9361ed21916ce6257be269ad96debf6942a485ae5a3efdf5b9d8fdfb64222c0fd1df43fe5939dacda9f3da8e769d120410ae9979728f4ff0b01b8a03ac1c7d0bb3c6842baa9600603ff21d91872", 0x84}, {&(0x7f00000004c0)="6cf6fa122b5c6803ae19adb00e70db3bc914ef989f0e440284f9555936b35b54c535add9f56940fc407e85374cea832fc3037d61c391561a861b30966c4666c8d3d99ad8f00e9e21759febff67214d895b61eb0661ff14a1bfb4c0e0f8384ce0", 0x60}, {&(0x7f00000005c0)="b2a470edc4adfa22715ae358b6bb2dc2455b32b817d73ea3200bb08a7fad6bb3b901f0df25f0ead7bdd9cc4b6f0c59d8a0ca9ace5b7757630a7deca08461758663b01b3d06264eedb229169c700452d643385d2e4946ec0101088fc4f95233c0044938e95f36838599f6ea80af919642794bc2c76dfbb6dde778eaccdeed95fa4a593653f5c2ecc1cf53f245ff8324a09c6ad57af7e783", 0x97}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="4886980322485dce5722d651fc867fdc293909467f1a7322f894fcc15129a0c18005fc9b4b777b973767ec7ddd045af1c799d07d9ed171a3484a8df0ba1a52d475bf6e7e30dfb35ad92d9f9e4d8a1e0c931b3880df7ba563b58a100c2bda78c5fa5cb6cc3b5858bf30762303a05d284dae9e590eff282071d04599d93c790c05c3c0703ba39e242bbb911c633d14fb35c2fa3050cd563c50f7760d75c1286692dd62361d349dd90cd1fdbfa61d8fe6d40aa8537a82babbef5f5b30f00564ee92675f3058803559477bf8d60f4ff6362e461c24ce16", 0xd5}, {&(0x7f0000000180)="3fcce98cc8cc940c42d86c3ddaff2578348856c621fe45829d0dba6b8cbf83308da96f8a6c3a39c161f35a3f561a40cdaf5a501148389e", 0x37}, {&(0x7f0000000280)="1b3c8b63d3c9e6d73c6f377e68466174e554d4", 0x13}, {&(0x7f0000001780)="da462c5b73eb05483d714dd5ddaffc952d1b54ef05846c96125d7745aceb598f6d5d04a2ba0cee17d3dc5c1346dc02dcc10ce81bd75b4d6fbbbcae4ed05299d75b53114314481ef1ecda4d104f5cb9dbdd4324f9ade96b9bc9c8930fa7b9fb90b1aab79453ee28777fba209582686b8277a11d751358e40267f28e5c9b6031afbaeb44b6bfd73876bcafd512d112dcd13a2bd3f7e788eb3e521c92b51082e9d4893f165460b18d2e3ddfc32dfb144186d6f6db92ecbfff8775f728c7b49b37f058693d5e5f08464e5ce9defa623896", 0xcf}, {&(0x7f00000003c0)="ae4f50cecbb159782707c5c789084ea4fc99809767a272665f3849258b5d540ccdbd", 0x22}, {&(0x7f0000001880)="7650b51adb2e3f9cca203ff765e80f93ce96ba96d0ea1939a42f975540ff11b112484d59d5dcfecf", 0x28}], 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

885.986969ms ago: executing program 3 (id=5407):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

852.249671ms ago: executing program 5 (id=5409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x190)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x20000900)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000900)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1.\xef>\x8b\xb1_\x04\xbbT\x89EK;\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x06\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe3\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26i\xbb\xdeb\x95?\xc0\x81 w\xeb\xbd\x98Y\x04\x02\xbf\x1f\xc9\xc1i\xc0\x8d\xe9jsvO\xd7\x17\xddF\xdc\xe5%P\xf1~\xb4E]\b\xde\x1e7\xba\x05\xe0\xa8}+\xc6\x03L\x01\x0e\x1f\x89\xa7D\xcc_i\xfc\x8f$\xbbq\x8f\xb7x\x9d\xa4W\x86\xf8\xfd\xd5\xafN\xa9(Y$!\xcd,\xcfvQP\xe0L\x17\xe4D\xb2\x9c\xa4\xfa;\xeat\xcd9\xef\xdev\xa0U\x19+\xfd\x98\xa9\xf6\n\xc5\xa5O\xfd/@\xc0F;iR\x05}=\xc9\xd0\xda\xf3\x9b5\x9d\x99\x85\x15\xe6\x81\x1c\x9dmcJ\xd5#hJ.\xe3W\xf5\xcfg2\xa0\xc6\xa3=\x92cPs\x88\xc2z\xdd\xfd\x80lxO>M+S\x87\aM\xf8X\xbeG\xaa\xe3\xad\x9e\xe2\x97~\xf0N\xaa\xe60\xe7\xce(\xc1\xe6\xa2n\x8a\xc6\xe3\xb4\xf1\x1d\xb2\xfb\x1a)<A ,\xfb\x00H~\xc6v\x16\xe6lA\x00!n\xf160\x93\xe3\xf7\x11C\x03+A\'\xc1\xb3\xd0kfh\x9b\x00\x15)\x06\xb0s\xe5\xff\xf3\xcb\xbb8\xa8?\xf0\x00\xc0\x92o\xfe\x04c1t\n\x8b\x81ygO\x18\xf3\x8b\xb0\xd9\xe6\xfb\x9a\xd6\x01\x82', &(0x7f0000000200)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=<r8=>0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}}, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000800000000000000000001e000000de0000000000"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000004000007020000f8ffffffb7030000080000009e04cd91f35937f1f5ac85556fe20080020000008500000003000000858000000e0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000000)={0x2, 0x1f, "0b5568105e722989735123fe9d465702ead1f9c365f27d604a4dbbf5f7eaf8"})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000020", @ANYRESOCT=r1, @ANYRESOCT=r8], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="697f8d1309da63c5969fd4a44a073ab4e015f034453cec9bfa6e6a5fde61a199e3669ac1c8af7d29dbd0f38c41aed18ca3ca5ab9d769cf34d60ec52047ec0817169590328951e457290cb4cbc280b73f926b1929cae03c2b7b1398e076d8d778a7d8bccf1e78", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41101, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0)

747.208816ms ago: executing program 5 (id=5410):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0xfffffffffffffe5c, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000480), 0x5, 0x0)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, 0x0)

664.69035ms ago: executing program 3 (id=5411):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xfe}, 'port0\x00', 0x48, 0x180808, 0xfffffffd, 0xa, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xe})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f00000008c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='ufshcd_exception_event\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r3}, 0x18)
r5 = memfd_create(0x0, 0x5)
fsetxattr$security_selinux(r5, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x14b}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000580)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r8, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x65f, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18)
alarm(0x8)
syz_clone3(&(0x7f00000007c0)={0x4000000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x3}, 0x58)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x6, 0x12)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmmsg(r10, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680})

664.37698ms ago: executing program 2 (id=5412):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

663.91663ms ago: executing program 0 (id=5413):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0x20006b, 0x4)
recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

663.32617ms ago: executing program 5 (id=5414):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0, {0x1}}, './file0\x00'})
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="5d0277cb363972f05de0be7167ea18fdf4b155b2230c1df949dcfa647301d8ba", 0x20}, {&(0x7f0000000400)="8d272e34e12836a260735c70b2dfa4c460b5913217f9fc2bf1a8770731a6090a73e15398bc98f32bf0b0bab688216b173311a5d6a19ee0d26d81844e015633be5e3cfdd5eb66cba80b86fa9e46f408d7c7f10913c874baf527b2ebf54dcb9edc3dd43b62ee8c2a0f3263e638e8d4caf2a81d2e6f0c1230313973744cd9b2931ed233950e11f4ed933f583082e90fc9ce97eeccfc312d8b24642e0e721c98cf6d3c98644381c7e0eabc91989e773ffad81cc83286fd4b7a95e545c4034605ad0ba0e1d7cffdc0613082eb226429888aea", 0xd0}, {&(0x7f0000000500)="e3fa0aa13a18e8593fc1f3bf2a46f11d1766c174344d0caa4bc7caa47957709f39f922195b1b6b4e37c6605f394bbc237215381204e4b86705fca3f5cc9a5ab296929419977513417d873817171c63bc6fe6ecef34df587d95d9231d54771e8dcecfe57184fb569a6849d74e2be51b5c88c53c0f1f49a810d4d267fc55b0de4d", 0x80}, {&(0x7f0000000580)="53bc1461db08466166d76d4799b1509ed78ce4e2b33418b255f7cb9dcca93ff3d6f4dcad6717e641ca9b941796d0c7172f182f1026b3859fac4ea05f71cac4aca37295d391779c64733e246037f81404937935fa920fb3fb6ca926925a9ae4542c56075e1e00ab959ef0df63bcacda580b24d54318476aaad992f2c49fb4648bc3c5d2172547a2d3201063f43ea3834eaa2910b00cb661ba7754cdc1c97a0d8d6ee4453dc72b65d45cbb903859be87d03f59183da8c801030c", 0xb9}, {&(0x7f00000006c0)="76266a8b9907d35dd4c8dfa30a2987de313a253115675b5e39078e53c8466619c4c1f46b097d61d59b9df3dc9ae88bb1917d2bafa4e3ebe56f975dfb2c004ff13956d1a13773934b81cb1dca37897cde122ecd8e5cb42f70d18de7ea26c68cff79b0ab4dcac9345ceae4db22bdc9", 0x6e}, {&(0x7f0000000740)="8942331ec7a59664ef385259fdac39ee376fa7ea9c99b35e2709b85d0b8b9e355d318f54aff88f71d86ca53b3a2f2e74006dcef9ba", 0x35}, {&(0x7f0000000780)="e0db52d8a97e61f449270e635ebaee9606d47588460e0ed3c8be0b8a44984990f1fafec9acc588d3b0a8511e021e03990e566ba2b7fe2ff06fd10f720e581f23294e3027b3ec31044a41ee772b75dedc3e6b60ac7984c2be57090266249edc40eecdaf0fadc7583d74e6cbbc1bf3f5c2fd50698e1b2b07c22b44c66b2d4fb49efbfa4e7d0f3784312a82699f578a0b2162679755f2592aea8ba0440bc04e3a1d35f8bc3578bc73644f8fe4a61c2bfa507e6e1297d2e42f74a5c3e726d2c771ed59c5ff014329486e5f9c9a81a922b2f2c408f87634e765ed056fb3b71a1d3fffaec6877e3f1909c2b3737ec73345aa88", 0xf0}, {&(0x7f0000000880)="0d0de9d8448d", 0x6}], 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e80)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8)
mount$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x2000, &(0x7f0000000fc0)={[{@quota}, {@grpquota}, {@huge_within_size}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2a, 0x65, 0x6b, 0x31, 0x41147faa572934de, 0x6d]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x36, 0x33, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r8}}]})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000d40)={0x1, 0x0, 0x18, 0x20, 0x1dd, &(0x7f0000000940)})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000740)="240000001a005f0214f9f4e6ff0804000a000f00fd00"/36, 0x24)
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001580)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r12=>0x0, 0x4, 0x4, 0xf9, 0x550, 0x1c, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8000, 0xfffffff9, 0x4221}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000ffdbdf251900000024000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000300608177ca17b910ac42000000"], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4004800)
syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)

652.16595ms ago: executing program 2 (id=5415):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0, {0x1}}, './file0\x00'})
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="5d0277cb363972f05de0be7167ea18fdf4b155b2230c1df949dcfa647301d8ba", 0x20}, {&(0x7f0000000400)="8d272e34e12836a260735c70b2dfa4c460b5913217f9fc2bf1a8770731a6090a73e15398bc98f32bf0b0bab688216b173311a5d6a19ee0d26d81844e015633be5e3cfdd5eb66cba80b86fa9e46f408d7c7f10913c874baf527b2ebf54dcb9edc3dd43b62ee8c2a0f3263e638e8d4caf2a81d2e6f0c1230313973744cd9b2931ed233950e11f4ed933f583082e90fc9ce97eeccfc312d8b24642e0e721c98cf6d3c98644381c7e0eabc91989e773ffad81cc83286fd4b7a95e545c4034605ad0ba0e1d7cffdc0613082eb226429888aea", 0xd0}, {&(0x7f0000000500)="e3fa0aa13a18e8593fc1f3bf2a46f11d1766c174344d0caa4bc7caa47957709f39f922195b1b6b4e37c6605f394bbc237215381204e4b86705fca3f5cc9a5ab296929419977513417d873817171c63bc6fe6ecef34df587d95d9231d54771e8dcecfe57184fb569a6849d74e2be51b5c88c53c0f1f49a810d4d267fc55b0de4d", 0x80}, {&(0x7f0000000580)="53bc1461db08466166d76d4799b1509ed78ce4e2b33418b255f7cb9dcca93ff3d6f4dcad6717e641ca9b941796d0c7172f182f1026b3859fac4ea05f71cac4aca37295d391779c64733e246037f81404937935fa920fb3fb6ca926925a9ae4542c56075e1e00ab959ef0df63bcacda580b24d54318476aaad992f2c49fb4648bc3c5d2172547a2d3201063f43ea3834eaa2910b00cb661ba7754cdc1c97a0d8d6ee4453dc72b65d45cbb903859be87d03f59183da8c801030c", 0xb9}, {&(0x7f00000006c0)="76266a8b9907d35dd4c8dfa30a2987de313a253115675b5e39078e53c8466619c4c1f46b097d61d59b9df3dc9ae88bb1917d2bafa4e3ebe56f975dfb2c004ff13956d1a13773934b81cb1dca37897cde122ecd8e5cb42f70d18de7ea26c68cff79b0ab4dcac9345ceae4db22bdc9", 0x6e}, {&(0x7f0000000740)="8942331ec7a59664ef385259fdac39ee376fa7ea9c99b35e2709b85d0b8b9e355d318f54aff88f71d86ca53b3a2f2e74006dcef9ba", 0x35}, {&(0x7f0000000780)="e0db52d8a97e61f449270e635ebaee9606d47588460e0ed3c8be0b8a44984990f1fafec9acc588d3b0a8511e021e03990e566ba2b7fe2ff06fd10f720e581f23294e3027b3ec31044a41ee772b75dedc3e6b60ac7984c2be57090266249edc40eecdaf0fadc7583d74e6cbbc1bf3f5c2fd50698e1b2b07c22b44c66b2d4fb49efbfa4e7d0f3784312a82699f578a0b2162679755f2592aea8ba0440bc04e3a1d35f8bc3578bc73644f8fe4a61c2bfa507e6e1297d2e42f74a5c3e726d2c771ed59c5ff014329486e5f9c9a81a922b2f2c408f87634e765ed056fb3b71a1d3fffaec6877e3f1909c2b3737ec73345aa88", 0xf0}, {&(0x7f0000000880)="0d0de9d8448d", 0x6}], 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e80)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8)
mount$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x2000, &(0x7f0000000fc0)={[{@quota}, {@grpquota}, {@huge_within_size}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2a, 0x65, 0x6b, 0x31, 0x41147faa572934de, 0x6d]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x36, 0x33, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r8}}]})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000d40)={0x1, 0x0, 0x18, 0x20, 0x1dd, &(0x7f0000000940)})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r9, 0x0, 0x2144}, 0x18)
write(0xffffffffffffffff, &(0x7f0000000740)="240000001a005f0214f9f4e6ff0804000a000f00fd00"/36, 0x24)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001580)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r12=>0x0, 0x4, 0x4, 0xf9, 0x550, 0x1c, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8000, 0xfffffff9, 0x4221}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000ffdbdf251900000024000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000300608177ca17b910ac42000000"], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4004800)
syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)

576.212234ms ago: executing program 0 (id=5416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18)
r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000580)='dE\x00', 0x0)
close(r2)

558.036124ms ago: executing program 0 (id=5417):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000002000000000000000000000000000000000000000000000001030000000000000000000000000000ff010000000000000000000000000001000000003c00000002000000fe800000000000000000000000000010000000000000100000000000030000000000000000000000000000000000000000000000000000002b00000002000000ac141400000000000000000000000000efffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000000000ff02000000000000000000000000000100000000040200"/500], 0x23c}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000003, 0xd4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x4}, 0x18) (async)
io_setup(0xd6, &(0x7f0000000200)=<r5=>0x0) (async)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x2020}]) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
dup2(r11, r10) (async)
setsockopt$sock_attach_bpf(r11, 0x1, 0x21, &(0x7f0000000040), 0x4) (async, rerun: 32)
sendmmsg(r10, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000004c40)="e2a62495bc5a6ae93c56ad0e5e329b4cd7cbd4326da11157159af191a6d69bd8316ff676376eb6461b431145b2ce82c34a247766256efd2f731e1e4382a047938aebc8050e885440594b8e60dc6f96e500693139be1fb14273e05bfb0c093e7926d057392fd7d2c6c85fa2b2f1acc5d0c90252f0869ab4910cd25a4896f9955602d62c070fe4b4e34774ac2ee79db69a190595dc37c82e5f4c3fbef8a29494eefa9b526f8378c8235373425205a7ff4e40aba5ad717541f0639cf660bb17bd8ca491bec87dcda22a730b232eef0df4edefd755739794bdcde900bbccf87b4932093cdcd71060f253bf188a95a63eac7c1d7220aa8008650e025d4139ef776fe52743c27aea0f9a3cc038c14d118bb2b8ddee206a50da0d25e4bc04914ca93d4b6e2258b1f43b5761e384d02a98193c58783e3d81027957e1675f97fd6e16c7d10a254a437616edda66302f64a84e04a7dad433ae6e8b24908ec3180ee4303973c565451ba1583272aa43aa15997348f21e82f7ce6df48add439abc0d7764ef24f01b301b7e646de0437dd425fcd4c12778d4884b4e14f08409bc0d7bc1784f36acf660dd7bdb395a5a0a47ef54abb59895b484812434c9c64fbf90615c0925d3242d50d52b6233b9494bcd2b9b661c43dd639bec7109f24620d4a1975bfc6ee59f4f054ea89199a8b9304061a6685c738dd63e503fd9eec49e104c952ebf458c9d8cc52bbf1cf82fd6ad92303ddf8d6b24b0bc6c39a7abde8c7d438167b2f93306643ba63f858224ae3e75dba50889a6b2fb52498f214135a795a218b48a199cfdf85ce4f4624c8b161c59dbd1147787241e869a2b9222c905047104c7f2dfe74eff6aef09d87561e73cd27640807c103f9997b2bcb2af470c9bd551eb354c7a6214f82f3c233aa52055e06fdcfa273949678256897c94e1fe61c057c644674c1341da96d4a3544acf971deaeb585e50a0de301ffd2c1eac3bb60653f99225dc68ecedb359f6fa9226f272810d22d9efd6761dd76fdff33f8ca394632431bd1f1a096aabd125ed39bacd038835129687eb342b3c17d6f0e6e87728e3f53b57560edf46c2c807fc4238e162513c2e0e8637433a37a0010d5bcccd0e4d47fa6b32fde2793a39dbd11eeaafac328e5b9fe90a5bd8d33bfd526b246a0a6d56ee3a92e38fd262a98175004e312a48576107370e1da2ddec59704ee85756495341f99fcae69871aac5cee201c752828f7aaabdd56e6abaca17fd5a1eebcd1e1f7ecbea33984b8cee141392ccddc56d6a288dc5b89f96fba89404a205b8534f85a3cc315f93aaf86c7656fa122ec669a5caeb422146ef4822f934e20ee8a6021a24cb23b5e6f9d1772f9fc8f0e5cc9fc74185435e5fbb5aa8e3d33e2ce300e9e6fd46c90b07919c3bddc037bc61c99138e65836f4a255b8c0c1a9f6f6c848c4018449437d4b12a61851314bf130667d8fabd4ec0a93616af692ce4c01c842be5b610132b38818659ad4bb56a799f8aab4643e499598cfea442b21f2f38b47072ffc413f3810a98064d4a60b9c65cbb1d6b261c86921e0123b984614109ac758089deda5c4d44862fae58846fc7b889428e1ad1d508753d11855a35a604548b93589adb0221015a93f4c3bac9893c77226a8247ee585e1daad2f4abb286ff57af884c48abd15848a5df41f1bbe5f932463fd2af050e52ed58b8e405cff83328d5b85b23a428b36f920985a1b1fe05ee78297350bbd4d98b5832677ac64c537b7d513bbe758578ef87ee289f4930d52dce40d3690308d5d1b19d0bebf987db890d5a0336c77ce39295c140c798e14b2331d5fd4e922ad6b0fd336fe6c01f7835f0fb4873cd8f847ba61f024f53e734a50e03551d8a8d15f88458e1447fa3bfc1ddb728358520044a00f3165dcbff6147c1ac6832c74634cc15755ba8e82c548c0ec2e0970a7afe3a91a38da7ef572ec0386162324e8fe0ce963074054140ac9d08e9314aa00c9c18cacea748d0a0c77d715d572b70cfae450a692b86016a3011e61613b070eb8e88b5b222f98ed52b84cdbffbcd3a860f371e3cd43087215a8e7665c9cf5d7e856d89b597141235106c207064287a9ac4600101ef27907ecfe7e65", 0x5dd}], 0x1}}], 0x6, 0x200040d1) (rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

517.566276ms ago: executing program 0 (id=5418):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) (fail_nth: 7)

255.023808ms ago: executing program 0 (id=5419):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
r1 = signalfd4(r0, &(0x7f0000000000)={[0xe]}, 0x8, 0x80800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="fb8d93e3280e73f12c2ec76ed7712fe40000000100000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000dded090e00000000000000000000feffffff0000"]}, 0x118)
unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='xprtrdma_post_send\x00', r7, 0x0, 0x7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@lazytime}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r8 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x349c8b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x2)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYRES64=r9, @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003", @ANYRESOCT=r8, @ANYRES32=r5], 0x84}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'dvmrp0\x00', <r13=>0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="681ccd74421ff6979d488bceb3ad09449b5b41d3bddc64b98cffc1b64c075111a41d89acdd4f119481b0d3eb386180169124e3f540b9588226fc42c951beabbf0baac586f8929f41941454b6dfe601f7bc8702311a03fcdcc5e783274c956ace2d44a0db6d76051a536a1c73748b8ea66a1ec23219e17f63a87e113926cdd23841f1add21d06e24426c6a19bcd0abf2cf103add2d1819920c6505d93f5dfc6112fda30ce302187255af718df7657767889274d", @ANYRES16=r12, @ANYBLOB="00012bbd7000fcdbdf2507000000050005007f000000080004000200000008000200010000002c000680080003000000000008000600190000000800060000000000080003007f00000108000700", @ANYRES32=r13, @ANYBLOB="08000300060000000800030007000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80004)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500000000000700", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

254.590988ms ago: executing program 4 (id=5420):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x1, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400007ffc}, 0x18)
syz_clone3(0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r5, &(0x7f00000018c0)=[{&(0x7f0000000300)="503cf98da9993f416ea19502a1058eeb2a60efebe3cdb1d78574a028817e4d0787cf20bd0a80f4a4ad61410fdce8018ee3adcf9ec59ff9361ed21916ce6257be269ad96debf6942a485ae5a3efdf5b9d8fdfb64222c0fd1df43fe5939dacda9f3da8e769d120410ae9979728f4ff0b01b8a03ac1c7d0bb3c6842baa9600603ff21d91872", 0x84}, {&(0x7f00000004c0)="6cf6fa122b5c6803ae19adb00e70db3bc914ef989f0e440284f9555936b35b54c535add9f56940fc407e85374cea832fc3037d61c391561a861b30966c4666c8d3d99ad8f00e9e21759febff67214d895b61eb0661ff14a1bfb4c0e0f8384ce0", 0x60}, {&(0x7f00000005c0)="b2a470edc4adfa22715ae358b6bb2dc2455b32b817d73ea3200bb08a7fad6bb3b901f0df25f0ead7bdd9cc4b6f0c59d8a0ca9ace5b7757630a7deca08461758663b01b3d06264eedb229169c700452d643385d2e4946ec0101088fc4f95233c0044938e95f36838599f6ea80af919642794bc2c76dfbb6dde778eaccdeed95fa4a593653f5c2ecc1cf53f245ff8324a09c6ad57af7e783", 0x97}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="4886980322485dce5722d651fc867fdc293909467f1a7322f894fcc15129a0c18005fc9b4b777b973767ec7ddd045af1c799d07d9ed171a3484a8df0ba1a52d475bf6e7e30dfb35ad92d9f9e4d8a1e0c931b3880df7ba563b58a100c2bda78c5fa5cb6cc3b5858bf30762303a05d284dae9e590eff282071d04599d93c790c05c3c0703ba39e242bbb911c633d14fb35c2fa3050cd563c50f7760d75c1286692dd62361d349dd90cd1fdbfa61d8fe6d40aa8537a82babbef5f5b30f00564ee92675f3058803559477bf8d60f4ff6362e461c24ce16", 0xd5}, {&(0x7f0000000180)="3fcce98cc8cc940c42d86c3ddaff2578348856c621fe45829d0dba6b8cbf83308da96f8a6c3a39c161f35a3f561a40cdaf5a501148389e", 0x37}, {&(0x7f0000000280)="1b3c8b63d3c9e6d73c6f377e68466174e554d4", 0x13}, {&(0x7f0000001780)="da462c5b73eb05483d714dd5ddaffc952d1b54ef05846c96125d7745aceb598f6d5d04a2ba0cee17d3dc5c1346dc02dcc10ce81bd75b4d6fbbbcae4ed05299d75b53114314481ef1ecda4d104f5cb9dbdd4324f9ade96b9bc9c8930fa7b9fb90b1aab79453ee28777fba209582686b8277a11d751358e40267f28e5c9b6031afbaeb44b6bfd73876bcafd512d112dcd13a2bd3f7e788eb3e521c92b51082e9d4893f165460b18d2e3ddfc32dfb144186d6f6db92ecbfff8775f728c7b49b37f058693d5e5f08464e5ce9defa623896", 0xcf}, {&(0x7f00000003c0)="ae4f50cecbb159782707c5c789084ea4fc99809767a272665f3849258b5d540ccdbd", 0x22}, {&(0x7f0000001880)="7650b51adb2e3f9cca203ff765e80f93ce96ba96d0ea1939a42f975540ff11b112484d59d5dcfecf", 0x28}], 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

185.315591ms ago: executing program 4 (id=5421):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

180.497291ms ago: executing program 0 (id=5422):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x94, r5, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1a}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x89}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r6 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r7, &(0x7f0000000140)='./file0\x00')
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r7}}, 0x18)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
syz_clone(0x18200000, &(0x7f0000000180), 0x0, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000440))
write(r8, &(0x7f0000001340)="005574fdf2937cb5ff586416cd7e25d84ef3df76a67859ee08ddb216c20000a06994fbb2f21a60f4d76c892fa1fa0fa3fdad1f8ed3283cfb2f84dd36620e63b001000080df5da11b007748d8d205970400000000000000ffd2171cfdd86bc40090f6d69fbf9a9b231ac0cbf4bb461a7e2fbb1407537e8ddb5cf7ffffffffffffff2f669f4c6b1cdd5237c60000000012f1391a396f78ce187bfc080bcdc947819b7e66c0535d40", 0xa7)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000103010400000000000000000000000a0c000200fffffffc0000000330000b80140005800e0001006972632d323030303000000008000c400000000308000c400000000027000340000034000c0002"], 0x5c}}, 0x94)
sendfile(r8, r4, 0x0, 0x3ffff)
ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendfile(r8, r4, 0x0, 0x7ffff000)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

94.431956ms ago: executing program 4 (id=5423):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0, {0x1}}, './file0\x00'})
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="5d0277cb363972f05de0be7167ea18fdf4b155b2230c1df949dcfa647301d8ba", 0x20}, {&(0x7f0000000400)="8d272e34e12836a260735c70b2dfa4c460b5913217f9fc2bf1a8770731a6090a73e15398bc98f32bf0b0bab688216b173311a5d6a19ee0d26d81844e015633be5e3cfdd5eb66cba80b86fa9e46f408d7c7f10913c874baf527b2ebf54dcb9edc3dd43b62ee8c2a0f3263e638e8d4caf2a81d2e6f0c1230313973744cd9b2931ed233950e11f4ed933f583082e90fc9ce97eeccfc312d8b24642e0e721c98cf6d3c98644381c7e0eabc91989e773ffad81cc83286fd4b7a95e545c4034605ad0ba0e1d7cffdc0613082eb226429888aea", 0xd0}, {&(0x7f0000000500)="e3fa0aa13a18e8593fc1f3bf2a46f11d1766c174344d0caa4bc7caa47957709f39f922195b1b6b4e37c6605f394bbc237215381204e4b86705fca3f5cc9a5ab296929419977513417d873817171c63bc6fe6ecef34df587d95d9231d54771e8dcecfe57184fb569a6849d74e2be51b5c88c53c0f1f49a810d4d267fc55b0de4d", 0x80}, {&(0x7f0000000580)="53bc1461db08466166d76d4799b1509ed78ce4e2b33418b255f7cb9dcca93ff3d6f4dcad6717e641ca9b941796d0c7172f182f1026b3859fac4ea05f71cac4aca37295d391779c64733e246037f81404937935fa920fb3fb6ca926925a9ae4542c56075e1e00ab959ef0df63bcacda580b24d54318476aaad992f2c49fb4648bc3c5d2172547a2d3201063f43ea3834eaa2910b00cb661ba7754cdc1c97a0d8d6ee4453dc72b65d45cbb903859be87d03f59183da8c801030c", 0xb9}, {&(0x7f00000006c0)="76266a8b9907d35dd4c8dfa30a2987de313a253115675b5e39078e53c8466619c4c1f46b097d61d59b9df3dc9ae88bb1917d2bafa4e3ebe56f975dfb2c004ff13956d1a13773934b81cb1dca37897cde122ecd8e5cb42f70d18de7ea26c68cff79b0ab4dcac9345ceae4db22bdc9", 0x6e}, {&(0x7f0000000740)="8942331ec7a59664ef385259fdac39ee376fa7ea9c99b35e2709b85d0b8b9e355d318f54aff88f71d86ca53b3a2f2e74006dcef9ba", 0x35}, {&(0x7f0000000780)="e0db52d8a97e61f449270e635ebaee9606d47588460e0ed3c8be0b8a44984990f1fafec9acc588d3b0a8511e021e03990e566ba2b7fe2ff06fd10f720e581f23294e3027b3ec31044a41ee772b75dedc3e6b60ac7984c2be57090266249edc40eecdaf0fadc7583d74e6cbbc1bf3f5c2fd50698e1b2b07c22b44c66b2d4fb49efbfa4e7d0f3784312a82699f578a0b2162679755f2592aea8ba0440bc04e3a1d35f8bc3578bc73644f8fe4a61c2bfa507e6e1297d2e42f74a5c3e726d2c771ed59c5ff014329486e5f9c9a81a922b2f2c408f87634e765ed056fb3b71a1d3fffaec6877e3f1909c2b3737ec73345aa88", 0xf0}, {&(0x7f0000000880)="0d0de9d8448d", 0x6}], 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e80)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8)
mount$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x2000, &(0x7f0000000fc0)={[{@quota}, {@grpquota}, {@huge_within_size}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2a, 0x65, 0x6b, 0x31, 0x41147faa572934de, 0x6d]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x36, 0x33, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r8}}]})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000d40)={0x1, 0x0, 0x18, 0x20, 0x1dd, &(0x7f0000000940)})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000740)="240000001a005f0214f9f4e6ff0804000a000f00fd00"/36, 0x24)
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001580)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r11=>0x0, 0x4, 0x4, 0xf9, 0x550, 0x1c, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8000, 0xfffffff9, 0x4221}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000ffdbdf251900000024000180080003000200000008000100", @ANYRES32=r11, @ANYBLOB="08000300608177ca17b910ac42000000"], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4004800)
syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)

0s ago: executing program 2 (id=5424):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000700)=ANY=[], 0x78)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfe, 0x0, 0x0, 0x8, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r9 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0x200c01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=\b\x00,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00'])
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000020000000050000000000000018110000f36a6306000000000000009496bf3cdb5aff2c9346b6a1befda37985e9bde416af48f1b6953743bf33b18db2e1a420ac0833031abf0f694123b92eb79af15c", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT=r5, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES8=r5, @ANYRESDEC=r10], &(0x7f0000000880)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r12}, 0x10)
setitimer(0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cc90000efed8834e5d309ff226623234136220ffcdf19", @ANYRES16=r13, @ANYBLOB="5953fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c0000800500090009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

95 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1a34a65e7 code=0x7ffc0000
[  291.179557][   T29] audit: type=1326 audit(431.094:43481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1a344b829 code=0x7ffc0000
[  291.202734][   T29] audit: type=1326 audit(431.094:43482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1a34a65e7 code=0x7ffc0000
[  291.225743][   T29] audit: type=1326 audit(431.094:43483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1a344b829 code=0x7ffc0000
[  291.248675][   T29] audit: type=1326 audit(431.094:43484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  291.271707][   T29] audit: type=1326 audit(431.104:43485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1a34a65e7 code=0x7ffc0000
[  291.294614][   T29] audit: type=1326 audit(431.104:43486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1a344b829 code=0x7ffc0000
[  291.317696][   T29] audit: type=1326 audit(431.104:43487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  291.340871][   T29] audit: type=1326 audit(431.114:43488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1a34a65e7 code=0x7ffc0000
[  291.363817][   T29] audit: type=1326 audit(431.114:43489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1a344b829 code=0x7ffc0000
[  291.519679][T16294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.546943][T16316] lo speed is unknown, defaulting to 1000
[  291.581869][T16294] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  291.614313][T16324] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  291.631307][T16294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4158'.
[  291.697669][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.721396][T16329] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  291.737373][T16326] loop4: detected capacity change from 0 to 1024
[  291.745090][T16329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  291.756583][T16329] netlink: 'syz.5.4170': attribute type 1 has an invalid length.
[  291.786499][T16326] EXT4-fs: Ignoring removed orlov option
[  291.814610][T16337] futex_wake_op: syz.0.4171 tries to shift op by 32; fix this program
[  291.825153][T16326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.839255][T16340] netlink: 'syz.3.4175': attribute type 13 has an invalid length.
[  291.859803][T16326] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  291.882253][T16326] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  291.904040][T16326] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4169'.
[  291.949106][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.027422][T16354] loop4: detected capacity change from 0 to 512
[  292.043927][T16350] lo speed is unknown, defaulting to 1000
[  292.071553][T16356] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  292.078891][T16354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.087627][T16356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4181'.
[  292.119088][T16354] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4180: corrupted inode contents
[  292.131356][T16354] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4180: mark_inode_dirty error
[  292.143668][T16354] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4180: corrupted inode contents
[  292.155828][T16354] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4180: mark_inode_dirty error
[  292.208226][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.214159][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4182'.
[  292.226559][T16362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4182'.
[  292.241619][T16362] bridge1: entered promiscuous mode
[  292.247075][T16362] bridge1: entered allmulticast mode
[  292.271764][T16364] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  292.290875][T16364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.305798][T16364] syzkaller0: entered promiscuous mode
[  292.309960][T16366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  292.309960][T16366]    program syz.4.4183 not setting count and/or reply_len properly
[  292.311446][T16364] syzkaller0: entered allmulticast mode
[  292.350407][T16364] netlink: 'syz.2.4184': attribute type 1 has an invalid length.
[  292.392413][T16364] tipc: Resetting bearer <eth:syzkaller0>
[  292.399702][T16364] tipc: Disabling bearer <eth:syzkaller0>
[  292.407288][T16372] netlink: 'syz.3.4187': attribute type 13 has an invalid length.
[  292.464046][T16382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16382 comm=syz.4.4190
[  292.476764][T16382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16382 comm=syz.4.4190
[  292.516668][T16385] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  292.532697][T16385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4192'.
[  292.552043][T16389] bridge1: left promiscuous mode
[  292.557111][T16389] bridge1: left allmulticast mode
[  292.737794][T16389] lo speed is unknown, defaulting to 1000
[  292.851210][T16410] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  292.851210][T16410]    program syz.0.4201 not setting count and/or reply_len properly
[  292.888107][T16413] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  292.901289][T16409] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  292.937710][T16409] validate_nla: 1 callbacks suppressed
[  292.937728][T16409] netlink: 'syz.2.4202': attribute type 1 has an invalid length.
[  292.971286][T16422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16422 comm=syz.3.4204
[  292.983937][T16422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16422 comm=syz.3.4204
[  293.040506][T16430] netlink: 'syz.5.4209': attribute type 30 has an invalid length.
[  293.190381][T16444] netlink: 'syz.2.4217': attribute type 30 has an invalid length.
[  293.206742][T16442] lo speed is unknown, defaulting to 1000
[  293.388558][T16448] lo speed is unknown, defaulting to 1000
[  293.435956][T16463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16463 comm=syz.3.4224
[  293.448600][T16463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16463 comm=syz.3.4224
[  293.465184][T16464] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  293.482304][T16454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.498941][T16454] syzkaller0: entered promiscuous mode
[  293.504512][T16454] syzkaller0: entered allmulticast mode
[  293.533969][T16454] netlink: 'syz.4.4221': attribute type 1 has an invalid length.
[  293.572049][T16454] tipc: Resetting bearer <eth:syzkaller0>
[  293.586957][T16454] tipc: Disabling bearer <eth:syzkaller0>
[  293.779072][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4228'.
[  293.927103][T16499] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  293.940738][T16499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4238'.
[  294.074641][T16509] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  294.083788][T16509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  294.097537][T16509] netlink: 'syz.3.4241': attribute type 1 has an invalid length.
[  294.112641][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4245'.
[  294.121724][T16516] netlink: 'syz.2.4245': attribute type 30 has an invalid length.
[  294.134508][ T3600] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.155609][ T3600] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.187111][ T3600] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.195501][T16521] netlink: 'syz.2.4247': attribute type 30 has an invalid length.
[  294.196515][ T3600] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.726391][T16533] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  294.736357][T16536] loop4: detected capacity change from 0 to 512
[  294.743846][T16533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4252'.
[  294.757133][T16534] syz!: rxe_newlink: already configured on team_slave_0
[  294.767798][T16536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.797334][T16534] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4253'.
[  295.258320][T16561] lo speed is unknown, defaulting to 1000
[  295.465241][T16564] netlink: 'syz.5.4265': attribute type 30 has an invalid length.
[  295.627383][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.935205][T16570] loop0: detected capacity change from 0 to 512
[  296.003898][T16570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.030605][T16576] netlink: 'syz.3.4271': attribute type 30 has an invalid length.
[  296.064864][T16570] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4269: corrupted inode contents
[  296.137190][T16570] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4269: mark_inode_dirty error
[  296.177079][T16570] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4269: corrupted inode contents
[  296.198487][   T29] kauditd_printk_skb: 748 callbacks suppressed
[  296.198502][   T29] audit: type=1400 audit(437.187:44238): avc:  denied  { add_name } for  pid=16569 comm="syz.0.4269" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  296.226325][T16582] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4269: corrupted inode contents
[  296.258607][T16582] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4269: mark_inode_dirty error
[  296.296660][T16582] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4269: corrupted inode contents
[  296.309559][   T29] audit: type=1400 audit(437.187:44239): avc:  denied  { create } for  pid=16569 comm="syz.0.4269" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  296.329638][   T29] audit: type=1400 audit(437.277:44240): avc:  denied  { read } for  pid=16586 comm="syz.4.4274" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  296.350382][   T29] audit: type=1400 audit(437.277:44241): avc:  denied  { open } for  pid=16586 comm="syz.4.4274" path="net:[4026532386]" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  296.377069][T16582] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4269: mark_inode_dirty error
[  296.391304][T16592] netlink: 'syz.4.4274': attribute type 13 has an invalid length.
[  296.411813][T16582] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4269: corrupted inode contents
[  296.423977][T16582] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4269: mark_inode_dirty error
[  296.465986][   T29] audit: type=1400 audit(437.457:44242): avc:  denied  { create } for  pid=16569 comm="syz.0.4269" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  296.487409][T16585] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4269: corrupted inode contents
[  296.513750][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.903997][T16605] syz!: rxe_newlink: already configured on team_slave_0
[  296.912319][T16605] __nla_validate_parse: 1 callbacks suppressed
[  296.912356][T16605] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4282'.
[  297.004042][   T29] audit: type=1326 audit(437.987:44243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  297.054162][   T29] audit: type=1326 audit(438.017:44244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  297.077243][   T29] audit: type=1326 audit(438.017:44245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  297.100434][   T29] audit: type=1326 audit(438.017:44246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  297.161783][T16613] loop0: detected capacity change from 0 to 512
[  297.195480][T16613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.273106][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'.
[  297.345861][T16624] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  297.354799][T16624] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.685902][ T3639] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.694456][ T3639] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.999186][T16646] lo speed is unknown, defaulting to 1000
[  298.346638][ T3639] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.355297][ T3639] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.366387][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.428092][T16651] validate_nla: 2 callbacks suppressed
[  298.428114][T16651] netlink: 'syz.0.4299': attribute type 13 has an invalid length.
[  298.575173][T16657] lo speed is unknown, defaulting to 1000
[  298.963652][T16668] loop4: detected capacity change from 0 to 512
[  299.155975][T16668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.182474][T16668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4305: corrupted inode contents
[  299.195096][T16668] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4305: mark_inode_dirty error
[  299.209710][T16668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4305: corrupted inode contents
[  299.223922][T16668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4305: corrupted inode contents
[  299.237651][T16668] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4305: mark_inode_dirty error
[  299.250130][T16668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4305: corrupted inode contents
[  299.262562][T16668] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4305: mark_inode_dirty error
[  299.275093][T16668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4305: corrupted inode contents
[  299.287365][T16668] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4305: mark_inode_dirty error
[  299.314205][T16677] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4305: corrupted inode contents
[  299.348264][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.403495][T16680] loop0: detected capacity change from 0 to 512
[  299.447348][T16680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.486464][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'.
[  299.545385][   T29] audit: type=1326 audit(440.527:44247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16684 comm="syz.3.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  300.669324][T16696] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  300.684151][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.711411][T16696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4312'.
[  300.880728][T16716] lo speed is unknown, defaulting to 1000
[  301.584852][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  301.584906][   T29] audit: type=1326 audit(442.567:44297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.3.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  301.633239][   T29] audit: type=1326 audit(442.567:44298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.3.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  301.656321][   T29] audit: type=1326 audit(442.567:44299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.3.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  301.679360][   T29] audit: type=1326 audit(442.567:44300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.3.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  301.739441][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4329'.
[  301.748499][T16738] netlink: 'syz.2.4329': attribute type 30 has an invalid length.
[  301.759340][T16735] loop0: detected capacity change from 0 to 1024
[  301.765813][   T29] audit: type=1400 audit(442.667:44301): avc:  denied  { write } for  pid=16729 comm="syz.4.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  301.784857][   T29] audit: type=1400 audit(442.667:44302): avc:  denied  { name_bind } for  pid=16729 comm="syz.4.4325" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  301.809194][T16735] EXT4-fs: Ignoring removed orlov option
[  301.832402][T16735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.886710][   T29] audit: type=1400 audit(442.877:44303): avc:  denied  { create } for  pid=16734 comm="syz.0.4328" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  301.906856][   T29] audit: type=1400 audit(442.877:44304): avc:  denied  { write } for  pid=16734 comm="syz.0.4328" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  301.928296][   T29] audit: type=1400 audit(442.877:44305): avc:  denied  { remove_name } for  pid=16734 comm="syz.0.4328" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  301.940348][T16749] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  301.950446][   T29] audit: type=1400 audit(442.877:44306): avc:  denied  { rename } for  pid=16734 comm="syz.0.4328" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  301.978814][T16735] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  301.998636][T16735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4328'.
[  302.021051][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.099102][T16753] lo speed is unknown, defaulting to 1000
[  302.192167][T16731] lo speed is unknown, defaulting to 1000
[  302.513653][T16775] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  302.538378][T16775] netlink: 'syz.3.4344': attribute type 1 has an invalid length.
[  302.635826][T16791] loop4: detected capacity change from 0 to 512
[  302.668877][T16791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.724786][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4350'.
[  302.734511][T16783] lo speed is unknown, defaulting to 1000
[  302.842781][T16806] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  302.842781][T16806]    program syz.0.4356 not setting count and/or reply_len properly
[  302.885311][T16810] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  302.903878][T16810] netlink: 'syz.5.4358': attribute type 1 has an invalid length.
[  302.988149][T16815] loop0: detected capacity change from 0 to 512
[  303.000238][T16815] EXT4-fs (loop0): 1 truncate cleaned up
[  303.006982][T16815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.147665][T16818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4359: bg 0: block 465: padding at end of block bitmap is not set
[  303.165644][T16818] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1364 with error 28
[  303.178269][T16818] EXT4-fs (loop0): This should not happen!! Data will be lost
[  303.178269][T16818] 
[  303.188084][T16818] EXT4-fs (loop0): Total free blocks count 0
[  303.194116][T16818] EXT4-fs (loop0): Free/Dirty block details
[  303.200048][T16818] EXT4-fs (loop0): free_blocks=0
[  303.205164][T16818] EXT4-fs (loop0): dirty_blocks=1368
[  303.210524][T16818] EXT4-fs (loop0): Block reservation details
[  303.216688][T16818] EXT4-fs (loop0): i_reserved_data_blocks=1368
[  303.225262][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4360'.
[  303.308535][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'.
[  303.308751][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.317562][T16826] netlink: 'syz.2.4363': attribute type 30 has an invalid length.
[  303.341554][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.501295][T16842] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  303.512518][T16841] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  303.522136][T16842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4370'.
[  303.546200][T16841] netlink: 'syz.5.4369': attribute type 1 has an invalid length.
[  303.702187][T16857] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  303.717652][T16857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4377'.
[  303.791559][T16868] syz!: rxe_newlink: already configured on team_slave_0
[  303.801145][T16868] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4381'.
[  303.859468][T16876] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  303.868893][T16876] netlink: 'syz.5.4385': attribute type 1 has an invalid length.
[  303.967654][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4389'.
[  303.976876][T16888] netlink: 'syz.5.4389': attribute type 30 has an invalid length.
[  303.995418][ T2846] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  304.014606][ T2846] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  304.023569][ T2846] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  304.032929][ T2846] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  304.455724][T16902] loop0: detected capacity change from 0 to 1024
[  304.462818][T16902] EXT4-fs: Ignoring removed orlov option
[  304.477510][T16902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.505919][T16902] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  304.514974][T16902] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  304.522719][T16902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4395'.
[  304.542516][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.717273][T16911] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  304.737758][T16911] netlink: 'syz.3.4398': attribute type 1 has an invalid length.
[  304.848529][T16918] lo speed is unknown, defaulting to 1000
[  304.936785][T16936] syz!: rxe_newlink: already configured on team_slave_0
[  304.945042][T16936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4406'.
[  305.004002][T16944] netlink: 'syz.5.4410': attribute type 30 has an invalid length.
[  305.057044][T16948] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  305.066646][T16948] netlink: 'syz.3.4412': attribute type 1 has an invalid length.
[  305.140793][T16958] netlink: 'syz.5.4416': attribute type 30 has an invalid length.
[  305.203231][T16964] syz!: rxe_newlink: already configured on team_slave_0
[  305.234128][T16968] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  305.286922][T16974] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  305.296819][T16974] netlink: 'syz.5.4423': attribute type 1 has an invalid length.
[  305.371555][T16992] syz!: rxe_newlink: already configured on team_slave_0
[  305.406462][T16996] syz!: rxe_newlink: already configured on team_slave_0
[  305.512242][T17008] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  305.523726][T17008] syzkaller0: entered promiscuous mode
[  305.529262][T17008] syzkaller0: entered allmulticast mode
[  305.537920][T17008] netlink: 'syz.0.4437': attribute type 1 has an invalid length.
[  305.595234][T17021] netlink: 'syz.5.4444': attribute type 13 has an invalid length.
[  305.603545][T17018] loop4: detected capacity change from 0 to 1024
[  305.612380][T17018] EXT4-fs: Ignoring removed orlov option
[  305.620337][ T3640] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.637803][ T3640] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.667876][T17018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.685661][ T3639] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.700111][ T3639] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.719259][T17018] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  305.746379][T17018] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  305.793891][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.927109][T17051] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  305.996825][T17047] lo speed is unknown, defaulting to 1000
[  306.102294][T17066] futex_wake_op: syz.5.4461 tries to shift op by 32; fix this program
[  306.137047][T17044] lo speed is unknown, defaulting to 1000
[  306.553995][T17070] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  306.716553][   T29] kauditd_printk_skb: 692 callbacks suppressed
[  306.716571][   T29] audit: type=1326 audit(448.706:44999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.0.4472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d7d86f749 code=0x0
[  306.829171][T17096] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  306.966319][   T29] audit: type=1326 audit(448.946:45000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  306.989531][   T29] audit: type=1326 audit(448.956:45001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.012561][   T29] audit: type=1326 audit(448.956:45002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.046242][   T29] audit: type=1326 audit(449.026:45003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.069354][   T29] audit: type=1326 audit(449.026:45004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.092492][   T29] audit: type=1326 audit(449.026:45005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.115702][   T29] audit: type=1326 audit(449.026:45006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.138791][   T29] audit: type=1326 audit(449.026:45007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.153829][T17127] loop4: detected capacity change from 0 to 1024
[  307.161806][   T29] audit: type=1326 audit(449.026:45008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.2.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a34af749 code=0x7ffc0000
[  307.170374][T17127] EXT4-fs: Ignoring removed orlov option
[  307.229213][T17127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.254649][T17127] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  307.278702][T17092] lo speed is unknown, defaulting to 1000
[  307.294849][T17127] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  307.301880][T17135] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  307.305238][T17137] __nla_validate_parse: 11 callbacks suppressed
[  307.305260][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4491'.
[  307.312613][T17127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4489'.
[  307.333259][T17135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4490'.
[  307.373547][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.424945][T17144] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  307.555403][T17165] loop0: detected capacity change from 0 to 1024
[  307.563271][T17165] EXT4-fs: Ignoring removed orlov option
[  307.587445][T17165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.642858][T17168] lo speed is unknown, defaulting to 1000
[  307.661765][T17165] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  307.688675][T17165] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  307.710652][T17173] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  307.726709][T17173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4505'.
[  307.761070][T17165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4503'.
[  307.796064][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4509'.
[  307.813451][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.930387][T17195] loop4: detected capacity change from 0 to 512
[  307.951418][T17195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.008026][T17197] lo speed is unknown, defaulting to 1000
[  308.173407][T17212] syz!: rxe_newlink: already configured on team_slave_0
[  308.181838][T17212] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4521'.
[  308.216618][T17215] syz!: rxe_newlink: already configured on team_slave_0
[  308.224915][T17215] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4522'.
[  308.381881][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4526'.
[  308.714045][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.741944][T17230] bridge1: left promiscuous mode
[  308.745300][T17232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.747103][T17230] bridge1: left allmulticast mode
[  308.761278][ T3425] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  308.770047][T17232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.778535][ T3425] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  308.822497][T17230] lo speed is unknown, defaulting to 1000
[  308.903313][T17241] loop0: detected capacity change from 0 to 1024
[  308.910720][T17241] EXT4-fs: Ignoring removed orlov option
[  308.939810][T17241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.969867][T17241] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  308.979577][T17241] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  308.987370][T17241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4532'.
[  309.007937][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.061703][T17253] validate_nla: 13 callbacks suppressed
[  309.061721][T17253] netlink: 'syz.0.4537': attribute type 30 has an invalid length.
[  309.079208][ T2846] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.088515][ T2846] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  309.104409][ T2846] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  309.122839][ T2846] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  309.150220][T17261] loop0: detected capacity change from 0 to 1024
[  309.159577][T17261] EXT4-fs: Ignoring removed orlov option
[  309.176786][T17261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.196623][T17261] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  309.206119][T17261] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  309.223826][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.844930][T17289] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  310.071048][T17302] lo speed is unknown, defaulting to 1000
[  310.213028][T17313] netlink: 'syz.3.4563': attribute type 13 has an invalid length.
[  310.413096][T17332] lo speed is unknown, defaulting to 1000
[  310.601541][T17345] netlink: 'syz.4.4576': attribute type 30 has an invalid length.
[  310.614719][ T3640] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  310.631306][ T3640] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.650083][ T3640] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.667322][ T3640] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.832072][T17347] 9p: Bad value for 'rfdno'
[  311.287496][T17369] rxe_newlink: 1 callbacks suppressed
[  311.287515][T17369] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  311.343253][T17371] lo speed is unknown, defaulting to 1000
[  311.365756][T17373] netlink: 'syz.2.4589': attribute type 13 has an invalid length.
[  311.471685][T17382] netlink: 'syz.2.4593': attribute type 30 has an invalid length.
[  311.500829][ T3600] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  311.521040][ T3600] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  311.529675][ T3600] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  311.539862][ T3600] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  311.576785][T17394] netlink: 'syz.2.4598': attribute type 30 has an invalid length.
[  311.611266][T17397] loop0: detected capacity change from 0 to 512
[  311.639522][T17397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.707315][ T3639] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.717480][ T3639] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.734291][   T29] kauditd_printk_skb: 908 callbacks suppressed
[  311.734308][   T29] audit: type=1326 audit(454.713:45917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.746106][ T3639] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.764250][   T29] audit: type=1326 audit(454.753:45918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.795636][ T3639] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.819907][   T29] audit: type=1326 audit(454.803:45919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.820096][T17404] lo speed is unknown, defaulting to 1000
[  311.846353][   T29] audit: type=1326 audit(454.833:45920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.871854][   T29] audit: type=1326 audit(454.833:45921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.894925][   T29] audit: type=1326 audit(454.833:45922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.917857][   T29] audit: type=1400 audit(454.833:45923): avc:  denied  { create } for  pid=17391 comm="syz.3.4599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  311.938174][   T29] audit: type=1326 audit(454.833:45924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.961173][   T29] audit: type=1326 audit(454.833:45925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  311.984237][   T29] audit: type=1326 audit(454.833:45926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.3.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f65b96ef749 code=0x7ffc0000
[  312.037015][T17400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap
[  312.087441][T17417] netlink: 'syz.5.4607': attribute type 30 has an invalid length.
[  312.126394][ T3639] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.135219][ T3639] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.171525][T17426] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  312.181013][ T3639] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.205946][ T3639] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.217462][T17428] netlink: 'syz.5.4613': attribute type 13 has an invalid length.
[  312.228444][ T3639] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.249362][ T3639] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.269157][T17432] netlink: 'syz.5.4615': attribute type 30 has an invalid length.
[  312.297270][ T3639] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.313673][ T3639] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.323321][T17430] lo speed is unknown, defaulting to 1000
[  312.389904][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.645726][T17456] syz!: rxe_newlink: already configured on team_slave_0
[  312.653828][T17456] __nla_validate_parse: 11 callbacks suppressed
[  312.653872][T17456] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4624'.
[  312.840121][T17462] lo speed is unknown, defaulting to 1000
[  312.947479][T17469] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  312.955775][T17471] netlink: 'syz.5.4630': attribute type 30 has an invalid length.
[  312.982314][ T3640] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.991340][T17469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.000880][T17469] syzkaller0: entered promiscuous mode
[  313.006425][T17469] syzkaller0: entered allmulticast mode
[  313.020449][ T3640] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  313.054069][T17469] tipc: Resetting bearer <eth:syzkaller0>
[  313.086232][T17469] tipc: Disabling bearer <eth:syzkaller0>
[  313.102131][ T3600] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  313.113218][ T3600] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  313.157363][T17481] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  313.183682][T17481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4635'.
[  313.243039][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4637'.
[  313.330827][ T3640] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.346346][ T3640] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.355397][ T3640] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.364447][ T3640] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.430351][T17497] lo speed is unknown, defaulting to 1000
[  313.462105][T17506] futex_wake_op: syz.4.4646 tries to shift op by 32; fix this program
[  313.522348][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4643'.
[  313.612649][T17514] loop0: detected capacity change from 0 to 1024
[  313.621728][T17514] EXT4-fs: Ignoring removed orlov option
[  313.648037][T17514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.669470][T17514] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  313.679870][T17514] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  313.689464][T17514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4649'.
[  313.710279][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.831835][T17530] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  313.831835][T17530]    program syz.0.4654 not setting count and/or reply_len properly
[  313.861890][T17524] lo speed is unknown, defaulting to 1000
[  313.993406][T17540] lo speed is unknown, defaulting to 1000
[  314.001584][T17546] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  314.009537][T17546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4661'.
[  314.218646][T17561] 9pnet_fd: Insufficient options for proto=fd
[  314.284457][T17563] loop0: detected capacity change from 0 to 512
[  314.312073][T17563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.329593][T17567] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  314.329593][T17567]    program syz.4.4669 not setting count and/or reply_len properly
[  314.374708][T17563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'.
[  314.506390][T17573] validate_nla: 5 callbacks suppressed
[  314.506405][T17573] netlink: 'syz.3.4671': attribute type 30 has an invalid length.
[  314.632733][T17575] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  314.640721][T17575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4672'.
[  314.669767][T17577] netlink: 'syz.3.4673': attribute type 13 has an invalid length.
[  314.753913][T17581] lo speed is unknown, defaulting to 1000
[  314.975808][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.037975][T17597] 9pnet_fd: Insufficient options for proto=fd
[  315.145610][T17601] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  315.164828][T17601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4683'.
[  315.164967][T17605] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  315.187121][T17605] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  315.197963][T17605] netlink: 'syz.2.4685': attribute type 1 has an invalid length.
[  315.268179][T17616] netlink: 'syz.4.4689': attribute type 30 has an invalid length.
[  315.298458][T17610] lo speed is unknown, defaulting to 1000
[  315.318079][T17618] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  315.333068][T17618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4690'.
[  315.538885][T17632] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  315.658357][T17642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17642 comm=syz.2.4701
[  315.671016][T17642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17642 comm=syz.2.4701
[  315.716836][T17627] 9pnet_fd: Insufficient options for proto=fd
[  315.733743][T17645] netlink: 'syz.5.4702': attribute type 13 has an invalid length.
[  315.760513][ T2846] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.781752][ T2846] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.813341][ T2846] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.833683][T17649] futex_wake_op: syz.5.4704 tries to shift op by 32; fix this program
[  315.850144][ T2846] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.859824][T17647] lo speed is unknown, defaulting to 1000
[  316.015331][T17660] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  316.108163][T17670] netlink: 'syz.2.4714': attribute type 13 has an invalid length.
[  316.135795][T17672] netlink: 'syz.2.4715': attribute type 30 has an invalid length.
[  316.151478][ T2846] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.166401][ T2846] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.185893][ T2846] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.195852][ T2846] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.256262][ T3640] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.265311][ T3640] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.274609][ T3640] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.318705][ T3640] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.333727][T17677] lo speed is unknown, defaulting to 1000
[  316.391826][T17676] lo speed is unknown, defaulting to 1000
[  316.512733][T17692] loop4: detected capacity change from 0 to 1024
[  316.520507][T17692] EXT4-fs: Ignoring removed orlov option
[  316.535496][T17694] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  316.535496][T17694]    program syz.0.4724 not setting count and/or reply_len properly
[  316.542220][T17692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.582004][T17692] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  316.590874][T17692] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  316.610455][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.613349][T17698] netlink: 'syz.0.4725': attribute type 30 has an invalid length.
[  316.644325][T17700] loop4: detected capacity change from 0 to 512
[  316.667076][T17700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.695064][T17704] syz!: rxe_newlink: already configured on team_slave_0
[  316.728097][T17700] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4726: corrupted inode contents
[  316.741344][T17700] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4726: mark_inode_dirty error
[  316.752930][   T29] kauditd_printk_skb: 307 callbacks suppressed
[  316.753005][   T29] audit: type=1400 audit(460.738:46234): avc:  denied  { read } for  pid=17707 comm="syz.0.4729" dev="nsfs" ino=4026532445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  316.780779][T17700] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4726: corrupted inode contents
[  316.793475][   T29] audit: type=1400 audit(460.738:46235): avc:  denied  { open } for  pid=17707 comm="syz.0.4729" path="net:[4026532445]" dev="nsfs" ino=4026532445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  316.793652][T17708] netlink: 'syz.0.4729': attribute type 13 has an invalid length.
[  316.816536][   T29] audit: type=1400 audit(460.738:46236): avc:  denied  { ioctl } for  pid=17707 comm="syz.0.4729" path="socket:[56504]" dev="sockfs" ino=56504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  316.849927][T17700] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4726: mark_inode_dirty error
[  316.865894][   T29] audit: type=1400 audit(460.858:46237): avc:  denied  { create } for  pid=17699 comm="syz.4.4726" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  316.900767][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.910717][   T29] audit: type=1326 audit(460.898:46238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17705 comm="syz.5.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  316.934770][   T29] audit: type=1326 audit(460.918:46239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17705 comm="syz.5.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  317.094292][T17731] netlink: 'syz.4.4739': attribute type 30 has an invalid length.
[  317.106606][T17730] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  317.211550][T17735] lo speed is unknown, defaulting to 1000
[  317.279845][   T29] audit: type=1326 audit(461.258:46240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.4.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7385ff749 code=0x7ffc0000
[  317.302987][   T29] audit: type=1326 audit(461.268:46241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.4.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7385ff749 code=0x7ffc0000
[  317.326116][   T29] audit: type=1326 audit(461.268:46242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.4.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7385ff749 code=0x7ffc0000
[  317.425612][   T29] audit: type=1326 audit(461.268:46243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.4.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7385ff749 code=0x7ffc0000
[  317.612232][T17760] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  317.612232][T17760]    program syz.4.4750 not setting count and/or reply_len properly
[  317.782319][T17743] lo speed is unknown, defaulting to 1000
[  317.893029][T17782] syz!: rxe_newlink: already configured on team_slave_0
[  317.901191][T17782] __nla_validate_parse: 5 callbacks suppressed
[  317.901210][T17782] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4760'.
[  318.218486][T17794] futex_wake_op: syz.2.4765 tries to shift op by 32; fix this program
[  318.242526][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4763'.
[  318.368701][T17806] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.378928][T17806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4771'.
[  318.499834][T17815] lo speed is unknown, defaulting to 1000
[  318.702688][T17838] loop4: detected capacity change from 0 to 1024
[  318.726203][T17838] EXT4-fs: Ignoring removed orlov option
[  318.759685][T17838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.779851][T17838] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  318.789016][T17838] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.796674][T17838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4785'.
[  318.818596][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.833666][T17850] loop0: detected capacity change from 0 to 512
[  318.849712][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4783'.
[  318.867149][T17850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.010891][T17861] lo speed is unknown, defaulting to 1000
[  319.181491][T17876] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  319.194082][T17876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4800'.
[  319.398795][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4802'.
[  319.409871][T17886] lo speed is unknown, defaulting to 1000
[  319.560244][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4809'.
[  319.609965][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.642342][T17904] loop4: detected capacity change from 0 to 1024
[  319.656562][T17904] EXT4-fs: Ignoring removed orlov option
[  319.677729][T17904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.692796][T17904] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  319.702383][T17904] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  319.709971][T17904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4811'.
[  319.729593][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.763219][T17910] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  319.772456][T17910] syzkaller0: entered promiscuous mode
[  319.778056][T17910] syzkaller0: entered allmulticast mode
[  319.785284][T17910] validate_nla: 1 callbacks suppressed
[  319.785351][T17910] netlink: 'syz.4.4813': attribute type 1 has an invalid length.
[  319.859489][T17915] netlink: 'syz.0.4815': attribute type 30 has an invalid length.
[  320.061358][T17931] loop0: detected capacity change from 0 to 1024
[  320.076025][T17931] EXT4-fs: Ignoring removed orlov option
[  320.113517][T17931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.153364][T17931] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  320.162613][T17931] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  320.170466][T17931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4823'.
[  320.233744][T17938] lo speed is unknown, defaulting to 1000
[  320.252378][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.352832][T17952] netlink: 'syz.0.4830': attribute type 30 has an invalid length.
[  320.388406][T17956] netlink: 'syz.3.4832': attribute type 30 has an invalid length.
[  320.470246][T17960] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  320.470246][T17960]    program syz.0.4834 not setting count and/or reply_len properly
[  320.551200][T17962] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.563801][T17962] syzkaller0: entered promiscuous mode
[  320.569418][T17962] syzkaller0: entered allmulticast mode
[  320.578641][T17962] netlink: 'syz.0.4835': attribute type 1 has an invalid length.
[  320.845151][T17973] netlink: 'syz.3.4839': attribute type 30 has an invalid length.
[  320.961549][T17981] loop4: detected capacity change from 0 to 1024
[  320.978761][T17981] EXT4-fs: Ignoring removed orlov option
[  320.996834][T17981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.022746][T17981] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  321.041682][T17981] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  321.070427][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.206350][T18000] netlink: 'syz.3.4851': attribute type 30 has an invalid length.
[  321.315799][T18007] netlink: 'syz.3.4854': attribute type 30 has an invalid length.
[  321.355945][T18002] lo speed is unknown, defaulting to 1000
[  321.368257][T18010] syz!: rxe_newlink: already configured on team_slave_0
[  321.611550][T18030] netlink: 'syz.0.4864': attribute type 30 has an invalid length.
[  321.680325][T18034] syz!: rxe_newlink: already configured on team_slave_0
[  321.731492][ T2846] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.742641][ T2846] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.759366][ T2846] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.785676][ T2846] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.813720][T18040] lo speed is unknown, defaulting to 1000
[  322.036960][   T29] kauditd_printk_skb: 561 callbacks suppressed
[  322.036975][   T29] audit: type=1326 audit(471.022:46805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18037 comm="syz.5.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.074418][T18055] 9p: Could not find request transport: fd0x0000000000000005
[  322.130514][   T29] audit: type=1326 audit(471.052:46806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18037 comm="syz.5.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.233274][T18059] loop0: detected capacity change from 0 to 512
[  322.270376][T18059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.417740][   T29] audit: type=1326 audit(471.402:46807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.442040][   T29] audit: type=1326 audit(471.402:46808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.465113][   T29] audit: type=1326 audit(471.422:46809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.488120][   T29] audit: type=1326 audit(472.435:46810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.511112][   T29] audit: type=1326 audit(472.435:46811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.534170][   T29] audit: type=1326 audit(472.435:46812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.557200][   T29] audit: type=1326 audit(472.435:46813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.580220][   T29] audit: type=1326 audit(472.435:46814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18067 comm="syz.5.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  322.646410][T18073] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  322.714918][T18075] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  322.900810][T18089] netlink: 'syz.2.4888': attribute type 30 has an invalid length.
[  322.964190][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.020282][T18090] lo speed is unknown, defaulting to 1000
[  323.026240][T18085] 9p: Could not find request transport: fd0x0000000000000005
[  323.114768][T18101] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  323.122836][T18101] __nla_validate_parse: 9 callbacks suppressed
[  323.122862][T18101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4891'.
[  323.352440][T18111] lo speed is unknown, defaulting to 1000
[  323.590157][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4898'.
[  323.885517][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4902'.
[  323.995336][T18138] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  323.995336][T18138]    program syz.4.4906 not setting count and/or reply_len properly
[  324.056156][T18128] 9p: Could not find request transport: fd0x0000000000000005
[  324.134190][T18151] loop4: detected capacity change from 0 to 1024
[  324.146102][T18151] EXT4-fs: Ignoring removed orlov option
[  324.159021][T18151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.194515][T18151] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  324.205376][T18151] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  324.214563][T18151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4910'.
[  324.254478][T18159] loop0: detected capacity change from 0 to 1024
[  324.265156][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.281289][T18159] EXT4-fs: Ignoring removed orlov option
[  324.317885][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'.
[  324.328497][T18159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.344860][T18159] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  324.354638][T18159] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  324.365391][T18159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4914'.
[  324.480225][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.699200][T18181] lo speed is unknown, defaulting to 1000
[  324.943737][T18185] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  325.008793][T18188] syzkaller0: entered promiscuous mode
[  325.014323][T18188] syzkaller0: entered allmulticast mode
[  325.048031][T18185] validate_nla: 1 callbacks suppressed
[  325.048047][T18185] netlink: 'syz.0.4923': attribute type 1 has an invalid length.
[  325.313929][T18202] loop4: detected capacity change from 0 to 1024
[  325.333502][T18202] EXT4-fs: Ignoring removed orlov option
[  325.356463][T18202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.404068][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'.
[  325.415933][T18202] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  325.466366][T18203] 9pnet_fd: Insufficient options for proto=fd
[  325.467546][T18210] lo speed is unknown, defaulting to 1000
[  325.478899][T18202] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  325.507610][T18202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4929'.
[  325.606239][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.636863][T18218] loop0: detected capacity change from 0 to 512
[  325.673736][T18222] netlink: 'syz.4.4937': attribute type 30 has an invalid length.
[  325.687969][T18218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.696856][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4935'.
[  327.148248][   T29] kauditd_printk_skb: 350 callbacks suppressed
[  327.148267][   T29] audit: type=1326 audit(480.133:47165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.198478][T18243] lo speed is unknown, defaulting to 1000
[  327.234723][   T29] audit: type=1326 audit(480.133:47166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.257916][   T29] audit: type=1326 audit(480.163:47167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.280922][   T29] audit: type=1326 audit(480.163:47168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.304011][   T29] audit: type=1326 audit(480.163:47169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.327080][   T29] audit: type=1326 audit(480.163:47170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.350199][   T29] audit: type=1326 audit(480.163:47171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.373222][   T29] audit: type=1326 audit(480.163:47172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.396236][   T29] audit: type=1326 audit(480.163:47173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.419258][   T29] audit: type=1326 audit(480.163:47174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866e60f749 code=0x7ffc0000
[  327.495846][T18258] loop4: detected capacity change from 0 to 512
[  327.541817][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4947'.
[  327.545626][T18258] EXT4-fs (loop4): 1 truncate cleaned up
[  327.559903][T18248] 9pnet_fd: Insufficient options for proto=fd
[  327.583421][T18258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.668822][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.743029][T18268] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4950: bg 0: block 465: padding at end of block bitmap is not set
[  327.763543][T18268] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1884 with error 28
[  327.776230][T18268] EXT4-fs (loop4): This should not happen!! Data will be lost
[  327.776230][T18268] 
[  327.785978][T18268] EXT4-fs (loop4): Total free blocks count 0
[  327.792028][T18268] EXT4-fs (loop4): Free/Dirty block details
[  327.797989][T18268] EXT4-fs (loop4): free_blocks=0
[  327.802961][T18268] EXT4-fs (loop4): dirty_blocks=1888
[  327.808388][T18268] EXT4-fs (loop4): Block reservation details
[  327.814404][T18268] EXT4-fs (loop4): i_reserved_data_blocks=1888
[  327.821797][T18274] loop0: detected capacity change from 0 to 512
[  327.842839][T18274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.903618][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.924621][T18282] netlink: 'syz.4.4955': attribute type 30 has an invalid length.
[  328.218588][T18289] lo speed is unknown, defaulting to 1000
[  328.310801][T18293] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.319395][T18293] __nla_validate_parse: 1 callbacks suppressed
[  328.319413][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4959'.
[  328.413399][T18297] lo speed is unknown, defaulting to 1000
[  328.419763][T18299] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.428600][T18299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4962'.
[  328.480922][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4964'.
[  328.490134][T18304] netlink: 'syz.3.4964': attribute type 30 has an invalid length.
[  328.543542][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.591457][T18312] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.599704][T18312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4968'.
[  328.623357][T18314] netlink: 'syz.0.4967': attribute type 13 has an invalid length.
[  328.742938][T18327] loop0: detected capacity change from 0 to 512
[  328.760543][T18327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.927228][T18331] loop4: detected capacity change from 0 to 1024
[  328.934266][T18331] EXT4-fs: Ignoring removed orlov option
[  328.949213][T18331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.967248][T18331] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  328.977143][T18331] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.985640][T18331] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4973'.
[  329.004825][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.315321][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4977'.
[  329.324306][T18341] netlink: 'syz.2.4977': attribute type 30 has an invalid length.
[  329.435740][T18348] netlink: 'syz.5.4980': attribute type 13 has an invalid length.
[  329.467760][T18350] syz!: rxe_newlink: already configured on team_slave_0
[  329.476319][T18350] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4981'.
[  329.528342][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.555989][ T3492] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  329.563760][T18356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.573407][T18356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.581547][ T3492] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  329.599125][T18354] lo speed is unknown, defaulting to 1000
[  329.786849][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'.
[  330.233855][T18381] netlink: 'syz.2.4992': attribute type 30 has an invalid length.
[  330.379016][T18396] netlink: 'syz.3.4999': attribute type 30 has an invalid length.
[  330.435698][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'.
[  330.444744][T18398] netlink: 'syz.0.5000': attribute type 30 has an invalid length.
[  330.503513][T18402] loop0: detected capacity change from 0 to 1024
[  330.513865][T18402] EXT4-fs: Ignoring removed orlov option
[  330.528767][T18402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.554040][T18402] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  330.570522][T18402] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  330.579093][T18402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5002'.
[  330.591600][T18407] netlink: 'syz.3.5003': attribute type 30 has an invalid length.
[  330.620005][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.829781][T18426] netlink: 'syz.0.5011': attribute type 30 has an invalid length.
[  330.935441][T18431] loop0: detected capacity change from 0 to 512
[  330.965504][T18431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.165750][T18437] netlink: 'syz.5.5015': attribute type 30 has an invalid length.
[  331.348183][T18454] netlink: 'syz.3.5023': attribute type 30 has an invalid length.
[  331.717855][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.755960][T18462] netlink: 'syz.4.5027': attribute type 30 has an invalid length.
[  332.091375][T18480] netlink: 'syz.3.5034': attribute type 30 has an invalid length.
[  332.126101][ T3492] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  332.133975][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.153818][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.162011][ T3492] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  332.202998][ T3604] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.223122][   T29] kauditd_printk_skb: 279 callbacks suppressed
[  332.223151][   T29] audit: type=1400 audit(486.208:47454): avc:  denied  { create } for  pid=18486 comm="syz.5.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  332.256234][ T3604] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.274967][T18485] fido_id[18485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  332.290924][ T3604] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.313512][ T3604] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.331199][   T29] audit: type=1400 audit(486.238:47455): avc:  denied  { write } for  pid=18486 comm="syz.5.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  332.351247][   T29] audit: type=1400 audit(486.238:47456): avc:  denied  { read } for  pid=18486 comm="syz.5.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  332.371240][   T29] audit: type=1400 audit(486.278:47457): avc:  denied  { create } for  pid=18489 comm="syz.3.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  332.390748][   T29] audit: type=1400 audit(486.278:47458): avc:  denied  { connect } for  pid=18489 comm="syz.3.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  332.410203][   T29] audit: type=1400 audit(486.288:47459): avc:  denied  { read } for  pid=18489 comm="syz.3.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  332.429421][   T29] audit: type=1400 audit(486.288:47460): avc:  denied  { create } for  pid=18489 comm="syz.3.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  332.448537][   T29] audit: type=1400 audit(486.298:47461): avc:  denied  { bind } for  pid=18489 comm="syz.3.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  332.476347][T18492] netlink: 'syz.5.5039': attribute type 13 has an invalid length.
[  332.615675][   T29] audit: type=1400 audit(486.338:47462): avc:  denied  { allowed } for  pid=18489 comm="syz.3.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  332.634648][   T29] audit: type=1400 audit(486.358:47463): avc:  denied  { create } for  pid=18489 comm="syz.3.5038" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  332.944618][T18507] loop0: detected capacity change from 0 to 512
[  332.971144][T18507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.058254][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.063959][T18514] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  333.076484][T18514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.083564][T18514] syzkaller0: entered promiscuous mode
[  333.089236][T18514] syzkaller0: entered allmulticast mode
[  333.099041][T18514] tipc: Resetting bearer <eth:syzkaller0>
[  333.118569][T18514] tipc: Disabling bearer <eth:syzkaller0>
[  333.154208][ T3627] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  333.174244][ T3627] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  333.189645][T28688] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  333.197914][ T3627] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  333.211932][T18522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.218307][ T3492] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  333.228563][T18526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.237014][T28688] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  333.245809][T18526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.247417][ T3670] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  333.257572][ T3492] hid-generic 0000:0000:0000.0008: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  333.273244][T18522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.519864][T18544] __nla_validate_parse: 7 callbacks suppressed
[  333.519881][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5061'.
[  333.548171][ T3670] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.558976][ T3670] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.567868][ T3670] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.576441][ T3670] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.596365][T18547] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  333.604224][T18547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5062'.
[  333.634154][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5065'.
[  333.634533][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'.
[  333.685022][T18559] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  333.693422][T18559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5068'.
[  333.794596][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5072'.
[  333.930434][T18573] lo speed is unknown, defaulting to 1000
[  333.945813][T18580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18580 comm=syz.5.5075
[  333.973042][T18577] loop4: detected capacity change from 0 to 1024
[  333.993957][T18577] EXT4-fs: Ignoring removed orlov option
[  334.021514][T18577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.039723][T18577] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  334.056381][T18577] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  334.063602][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5078'.
[  334.071991][T18577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5076'.
[  334.106232][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5079'.
[  334.116053][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.230551][T18596] loop0: detected capacity change from 0 to 1024
[  334.245434][T18596] EXT4-fs: Ignoring removed orlov option
[  334.270418][T18596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.304801][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  334.317650][T18596] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  334.332846][T18596] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  334.361325][T18606] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  334.361325][T18606]    program syz.4.5086 not setting count and/or reply_len properly
[  334.382498][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.481980][T18616] loop4: detected capacity change from 0 to 1024
[  334.488980][T18616] EXT4-fs: Ignoring removed orlov option
[  334.497645][T18616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.512760][T18616] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  334.522177][T18616] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  334.543631][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.632582][ T3425] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  334.643594][T18627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.658600][ T3425] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  334.670165][T18627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.910888][T18647] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  335.282867][ T3425] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  335.291234][T18670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.300467][ T3425] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  335.310421][T18670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.457235][T18679] futex_wake_op: syz.3.5116 tries to shift op by 32; fix this program
[  335.557576][T18683] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  335.557576][T18683]    program syz.0.5118 not setting count and/or reply_len properly
[  335.608198][T18685] pim6reg: entered allmulticast mode
[  335.616313][T18684] pim6reg: left allmulticast mode
[  335.739767][T28688] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  335.748390][T18694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.761436][T18694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.772786][T28688] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  335.923965][T18710] loop4: detected capacity change from 0 to 512
[  335.946286][T18710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.528938][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.593976][T18741] loop4: detected capacity change from 0 to 512
[  336.627816][T18741] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5142: bad orphan inode 11862016
[  336.639206][T18741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  336.647190][T18747] futex_wake_op: syz.3.5144 tries to shift op by 32; fix this program
[  337.268036][   T29] kauditd_printk_skb: 456 callbacks suppressed
[  337.268054][   T29] audit: type=1400 audit(494.256:47920): avc:  denied  { remount } for  pid=18772 comm="syz.5.5157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  337.275900][T18773] syz!: rxe_newlink: already configured on team_slave_0
[  337.294067][   T29] audit: type=1400 audit(494.256:47921): avc:  denied  { create } for  pid=18772 comm="syz.5.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  337.320675][   T29] audit: type=1400 audit(494.266:47922): avc:  denied  { write } for  pid=18772 comm="syz.5.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  337.362641][   T29] audit: type=1400 audit(494.346:47923): avc:  denied  { read } for  pid=18774 comm="syz.0.5158" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  337.392943][   T29] audit: type=1400 audit(494.346:47924): avc:  denied  { open } for  pid=18774 comm="syz.0.5158" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  337.415805][   T29] audit: type=1400 audit(494.376:47925): avc:  denied  { create } for  pid=18776 comm="syz.5.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  337.449499][   T29] audit: type=1400 audit(494.436:47926): avc:  denied  { unmount } for  pid=12949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  337.469525][   T29] audit: type=1400 audit(494.436:47927): avc:  denied  { ioctl } for  pid=18774 comm="syz.0.5158" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  337.495801][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  337.505176][   T29] audit: type=1400 audit(494.486:47928): avc:  denied  { name_bind } for  pid=18776 comm="syz.5.5159" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  337.526486][   T29] audit: type=1400 audit(494.486:47929): avc:  denied  { node_bind } for  pid=18776 comm="syz.5.5159" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  337.581358][T18784] FAULT_INJECTION: forcing a failure.
[  337.581358][T18784] name failslab, interval 1, probability 0, space 0, times 0
[  337.594098][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.4.5161 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  337.594134][T18784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.594151][T18784] Call Trace:
[  337.594189][T18784]  <TASK>
[  337.594197][T18784]  __dump_stack+0x1d/0x30
[  337.594221][T18784]  dump_stack_lvl+0xe8/0x140
[  337.594301][T18784]  dump_stack+0x15/0x1b
[  337.594319][T18784]  should_fail_ex+0x265/0x280
[  337.594342][T18784]  should_failslab+0x8c/0xb0
[  337.594363][T18784]  __kmalloc_cache_noprof+0x65/0x4c0
[  337.594386][T18784]  ? sctp_auth_set_key+0x115/0x4f0
[  337.594455][T18784]  sctp_auth_set_key+0x115/0x4f0
[  337.594479][T18784]  ? _raw_spin_lock_bh+0x56/0xb0
[  337.594571][T18784]  sctp_setsockopt_auth_key+0x2d7/0x3e0
[  337.594593][T18784]  sctp_setsockopt+0x4ba/0xe30
[  337.594622][T18784]  sock_common_setsockopt+0x69/0x80
[  337.594680][T18784]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  337.594701][T18784]  __sys_setsockopt+0x184/0x200
[  337.594779][T18784]  __x64_sys_setsockopt+0x64/0x80
[  337.594806][T18784]  x64_sys_call+0x21d5/0x3000
[  337.594830][T18784]  do_syscall_64+0xd8/0x2c0
[  337.594944][T18784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.594979][T18784] RIP: 0033:0x7fd7385ff749
[  337.594993][T18784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.595039][T18784] RSP: 002b:00007fd73705f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  337.595056][T18784] RAX: ffffffffffffffda RBX: 00007fd738855fa0 RCX: 00007fd7385ff749
[  337.595068][T18784] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003
[  337.595080][T18784] RBP: 00007fd73705f090 R08: 0000000000000009 R09: 0000000000000000
[  337.595118][T18784] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  337.595129][T18784] R13: 00007fd738856038 R14: 00007fd738855fa0 R15: 00007ffef4b4fe78
[  337.595147][T18784]  </TASK>
[  337.853475][T28688] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  337.870854][T28688] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  337.897142][T18790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.935764][T18790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.146226][T18817] validate_nla: 10 callbacks suppressed
[  338.146246][T18817] netlink: 'syz.3.5170': attribute type 30 has an invalid length.
[  338.517425][T18827] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  338.626551][T18829] loop0: detected capacity change from 0 to 8192
[  338.888537][T18845] __nla_validate_parse: 12 callbacks suppressed
[  338.888557][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'.
[  338.903889][T18845] netlink: 'syz.0.5181': attribute type 30 has an invalid length.
[  338.943863][T18844] loop4: detected capacity change from 0 to 1024
[  338.966987][T18844] EXT4-fs: Ignoring removed orlov option
[  338.990361][T18850] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  338.990361][T18850]    program syz.0.5184 not setting count and/or reply_len properly
[  339.028135][T18844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.054805][T18861] netlink: 'syz.2.5187': attribute type 12 has an invalid length.
[  339.083445][T18844] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  339.117195][T18844] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  339.141821][T18844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5182'.
[  339.207104][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.293190][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'.
[  339.302213][T18879] netlink: 'syz.0.5194': attribute type 30 has an invalid length.
[  339.450616][T18893] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  339.450616][T18893]    program syz.4.5200 not setting count and/or reply_len properly
[  339.514158][T18897] loop0: detected capacity change from 0 to 1024
[  339.521069][T18897] EXT4-fs: inline encryption not supported
[  339.527641][T18897] EXT4-fs: quotafile must be on filesystem root
[  339.536476][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5202'.
[  339.545429][T18899] loop4: detected capacity change from 0 to 1024
[  339.553211][T18899] EXT4-fs: Ignoring removed orlov option
[  339.567264][T18899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.586852][T18899] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  339.600062][T18899] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  339.608090][T18899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5203'.
[  339.631011][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.766586][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5208'.
[  339.775640][T18915] netlink: 'syz.2.5208': attribute type 30 has an invalid length.
[  339.892314][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5214'.
[  339.924849][T28688] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  339.936492][T18930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.960324][T18928] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  339.968580][T28688] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  339.980433][T18930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.990544][T18928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5215'.
[  340.055833][T18934] fido_id[18934]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  340.197577][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5222'.
[  340.206557][T18945] netlink: 'syz.5.5222': attribute type 30 has an invalid length.
[  340.304169][T18950] infiniband syz0: set down
[  340.308802][T18950] infiniband syz0: added bond0
[  340.314947][T18950] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  340.315328][T18950] infiniband syz0: Couldn't open port 1
[  340.345610][T18950] RDS/IB: syz0: added
[  340.350247][T18950] smc: adding ib device syz0 with port count 1
[  340.366448][T18950] smc:    ib device syz0 port 1 has no pnetid
[  340.608981][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5227'.
[  340.798540][ T3425] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  340.799594][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.816828][ T3425] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  340.827229][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.870550][T18984] loop0: detected capacity change from 0 to 512
[  340.887365][T18984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.210741][T19007] futex_wake_op: syz.3.5246 tries to shift op by 32; fix this program
[  341.424602][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.541272][T19024] loop4: detected capacity change from 0 to 1024
[  341.556237][T19024] EXT4-fs: Ignoring removed orlov option
[  341.587751][T19024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.607788][T19024] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  341.616421][T19032] netlink: 'syz.2.5257': attribute type 30 has an invalid length.
[  341.626536][T19024] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  341.650424][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.681082][T19037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=19037 comm=syz.5.5258
[  341.694594][T19036] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=19036 comm=+}[@
[  341.993824][T28688] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  341.998888][T19049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.009889][T28688] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  342.009950][T19049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.327261][T19064] netlink: 'syz.0.5270': attribute type 30 has an invalid length.
[  342.350989][   T29] kauditd_printk_skb: 270 callbacks suppressed
[  342.351009][   T29] audit: type=1400 audit(500.337:48200): avc:  denied  { remount } for  pid=19065 comm="syz.5.5271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  342.377372][T19066] syz!: rxe_newlink: already configured on team_slave_0
[  342.421760][   T29] audit: type=1400 audit(500.397:48201): avc:  denied  { create } for  pid=19070 comm="syz.5.5274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  342.481594][   T29] audit: type=1400 audit(500.467:48202): avc:  denied  { block_suspend } for  pid=19079 comm="syz.0.5278" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  342.515294][   T29] audit: type=1326 audit(500.497:48203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.2.5275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1a34af749 code=0x0
[  342.565343][   T29] audit: type=1400 audit(500.547:48204): avc:  denied  { create } for  pid=19079 comm="syz.0.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  342.588335][   T29] audit: type=1400 audit(500.547:48205): avc:  denied  { execmem } for  pid=19079 comm="syz.0.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  342.607363][   T29] audit: type=1400 audit(500.547:48206): avc:  denied  { setopt } for  pid=19079 comm="syz.0.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  342.658070][   T29] audit: type=1400 audit(500.637:48207): avc:  denied  { write } for  pid=19090 comm="syz.4.5283" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  342.680961][T19091] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  342.680961][T19091]    program syz.4.5283 not setting count and/or reply_len properly
[  342.681542][   T29] audit: type=1400 audit(500.647:48208): avc:  denied  { open } for  pid=19090 comm="syz.4.5283" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  342.681605][   T29] audit: type=1400 audit(500.667:48209): avc:  denied  { ioctl } for  pid=19090 comm="syz.4.5283" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  342.809592][T19097] loop0: detected capacity change from 0 to 1024
[  342.817270][T19097] EXT4-fs: Ignoring removed orlov option
[  342.840160][T19097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.857883][T19097] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  342.869524][T19097] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  342.889956][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.958524][T28688] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  342.969241][T19106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.979174][T28688] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  342.992459][T19106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.061026][T19110] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  343.329494][T19130] netlink: 'syz.3.5296': attribute type 30 has an invalid length.
[  343.525584][T19147] futex_wake_op: syz.3.5304 tries to shift op by 32; fix this program
[  343.555416][T19151] netlink: 'syz.5.5306': attribute type 1 has an invalid length.
[  343.653769][T19157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19157 comm=syz.0.5308
[  343.800685][T19161] netlink: 'syz.0.5310': attribute type 30 has an invalid length.
[  343.838513][T19162] IPVS: stopping backup sync thread 19165 ...
[  343.839529][T19165] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[  343.940634][T19167] loop0: detected capacity change from 0 to 1024
[  343.963195][T19167] EXT4-fs: Ignoring removed orlov option
[  344.016242][T19167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.056632][T19167] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  344.077054][T19167] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  344.097604][T19167] __nla_validate_parse: 17 callbacks suppressed
[  344.097627][T19167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5312'.
[  344.165912][T19182] loop4: detected capacity change from 0 to 8192
[  344.174317][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.202858][T19186] loop0: detected capacity change from 0 to 512
[  344.210537][T19186] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  344.226412][T15925]  loop4: p1 p2 p3 p4
[  344.236187][T15925] loop4: p1 size 196608 extends beyond EOD, truncated
[  344.253880][T19186] loop0: detected capacity change from 0 to 2048
[  344.266482][T15925] loop4: p2 start 164919041 is beyond EOD, truncated
[  344.273246][T15925] loop4: p3 size 66846464 extends beyond EOD, truncated
[  344.282054][T15925] loop4: p4 size 37048832 extends beyond EOD, truncated
[  344.293449][T19182]  loop4: p1 p2 p3 p4
[  344.299236][T19182] loop4: p1 size 196608 extends beyond EOD, truncated
[  344.299970][T19186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.307134][T19182] loop4: p2 start 164919041 is beyond EOD, truncated
[  344.324952][T19182] loop4: p3 size 66846464 extends beyond EOD, truncated
[  344.340945][T19182] loop4: p4 size 37048832 extends beyond EOD, truncated
[  344.403169][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.428181][T19182] ALSA: seq fatal error: cannot create timer (-19)
[  344.498433][ T3425] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  344.519120][T19194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.542447][ T3425] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  344.554167][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5322'.
[  344.563191][T19196] netlink: 'syz.4.5322': attribute type 30 has an invalid length.
[  344.571778][T19194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.633237][T19201] FAULT_INJECTION: forcing a failure.
[  344.633237][T19201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.646549][T19201] CPU: 0 UID: 0 PID: 19201 Comm: syz.4.5324 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  344.646640][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  344.646653][T19201] Call Trace:
[  344.646660][T19201]  <TASK>
[  344.646670][T19201]  __dump_stack+0x1d/0x30
[  344.646702][T19201]  dump_stack_lvl+0xe8/0x140
[  344.646733][T19201]  dump_stack+0x15/0x1b
[  344.646762][T19201]  should_fail_ex+0x265/0x280
[  344.646936][T19201]  should_fail+0xb/0x20
[  344.646969][T19201]  should_fail_usercopy+0x1a/0x20
[  344.647003][T19201]  _copy_from_iter+0xcf/0xe70
[  344.647038][T19201]  ? __alloc_skb+0x3bb/0x4d0
[  344.647142][T19201]  ? __alloc_skb+0x24d/0x4d0
[  344.647177][T19201]  netlink_sendmsg+0x471/0x6b0
[  344.647251][T19201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.647314][T19201]  __sock_sendmsg+0x145/0x180
[  344.647342][T19201]  ____sys_sendmsg+0x31e/0x4a0
[  344.647422][T19201]  ___sys_sendmsg+0x17b/0x1d0
[  344.647472][T19201]  __x64_sys_sendmsg+0xd4/0x160
[  344.647573][T19201]  x64_sys_call+0x17ba/0x3000
[  344.647604][T19201]  do_syscall_64+0xd8/0x2c0
[  344.647773][T19201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.647794][T19201] RIP: 0033:0x7fd7385ff749
[  344.647808][T19201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.647830][T19201] RSP: 002b:00007fd73705f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  344.647854][T19201] RAX: ffffffffffffffda RBX: 00007fd738855fa0 RCX: 00007fd7385ff749
[  344.647869][T19201] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003
[  344.647882][T19201] RBP: 00007fd73705f090 R08: 0000000000000000 R09: 0000000000000000
[  344.647910][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.647922][T19201] R13: 00007fd738856038 R14: 00007fd738855fa0 R15: 00007ffef4b4fe78
[  344.647950][T19201]  </TASK>
[  344.658554][T15925] udevd[15925]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  344.708920][T19203] SELinux:  Context system_u:object_r:setrans_var_run_t:s0 is not valid (left unmapped).
[  344.715185][T15935] udevd[15935]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  344.759856][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5325'.
[  344.817569][T15934] udevd[15934]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  344.967357][T15935] udevd[15935]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  344.978428][T15925] udevd[15925]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  345.003466][T15934] udevd[15934]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  345.042059][T19218] loop4: detected capacity change from 0 to 1024
[  345.065867][T19218] EXT4-fs: inline encryption not supported
[  345.136843][T19218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.190614][T19218] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.5330: Allocating blocks 385-513 which overlap fs metadata
[  345.643703][T19218] EXT4-fs (loop4): pa ffff888107a32e00: logic 16, phys. 129, len 24
[  345.651918][T19218] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  345.664248][T19218] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  345.676816][T19218] EXT4-fs (loop4): This should not happen!! Data will be lost
[  345.676816][T19218] 
[  345.686495][T19218] EXT4-fs (loop4): Total free blocks count 0
[  345.692491][T19218] EXT4-fs (loop4): Free/Dirty block details
[  345.698415][T19218] EXT4-fs (loop4): free_blocks=128
[  345.703543][T19218] EXT4-fs (loop4): dirty_blocks=0
[  345.708594][T19218] EXT4-fs (loop4): Block reservation details
[  345.714583][T19218] EXT4-fs (loop4): i_reserved_data_blocks=0
[  346.222612][T19248] loop4: detected capacity change from 0 to 1024
[  346.244625][T19248] EXT4-fs: Ignoring removed orlov option
[  346.359187][T19248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.414477][T19244] lo speed is unknown, defaulting to 1000
[  346.421154][ T3670] batadv1: left allmulticast mode
[  346.426324][ T3670] batadv1: left promiscuous mode
[  346.431392][ T3670] bridge0: port 4(batadv1) entered disabled state
[  346.450381][T19248] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  346.477395][ T3670] batadv0: left allmulticast mode
[  346.482578][ T3670] batadv0: left promiscuous mode
[  346.487694][ T3670] bridge0: port 3(batadv0) entered disabled state
[  346.534697][ T3670] bridge_slave_1: left allmulticast mode
[  346.540531][ T3670] bridge_slave_1: left promiscuous mode
[  346.546196][ T3670] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.571658][ T3670] bridge_slave_0: left promiscuous mode
[  346.577451][ T3670] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.587647][T19262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5338'.
[  346.900024][ T3670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.919358][ T3670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.933969][T19271] loop0: detected capacity change from 0 to 512
[  346.944078][ T3670] bond0 (unregistering): Released all slaves
[  346.976115][T19271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.092076][ T3640] smc: removing ib device syz0
[  347.098601][T19258] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  347.221341][T19279] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  347.236011][T12949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.252498][T19279] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  347.310155][T19244] chnl_net:caif_netlink_parms(): no params data found
[  347.317626][T19279] netlink: 'syz.3.5348': attribute type 1 has an invalid length.
[  347.348264][T19291] netlink: 'syz.4.5350': attribute type 13 has an invalid length.
[  347.383493][T19291] gretap0: refused to change device tx_queue_len
[  347.401415][T19291] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  347.417718][   T29] kauditd_printk_skb: 417 callbacks suppressed
[  347.417734][   T29] audit: type=1400 audit(506.408:48627): avc:  denied  { add_name } for  pid=19277 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  347.451339][   T29] audit: type=1400 audit(506.408:48628): avc:  denied  { create } for  pid=19277 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  347.473442][   T29] audit: type=1400 audit(506.408:48629): avc:  denied  { write } for  pid=19277 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth6.link" dev="tmpfs" ino=13850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  347.499300][   T29] audit: type=1400 audit(506.408:48630): avc:  denied  { append } for  pid=19277 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" dev="tmpfs" ino=13850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  347.536018][   T29] audit: type=1400 audit(506.458:48631): avc:  denied  { create } for  pid=19304 comm="syz.3.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  347.556333][   T29] audit: type=1400 audit(506.458:48632): avc:  denied  { read } for  pid=19304 comm="syz.3.5352" path="socket:[60902]" dev="sockfs" ino=60902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  347.580315][   T29] audit: type=1400 audit(506.518:48633): avc:  denied  { remove_name } for  pid=19306 comm="rm" name="resolv.conf.eth6.link" dev="tmpfs" ino=13850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  347.603421][   T29] audit: type=1400 audit(506.518:48634): avc:  denied  { unlink } for  pid=19306 comm="rm" name="resolv.conf.eth6.link" dev="tmpfs" ino=13850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  347.638044][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.653124][T19244] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.660485][T19244] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.672822][T19244] bridge_slave_0: entered allmulticast mode
[  347.680080][T19244] bridge_slave_0: entered promiscuous mode
[  347.692927][   T29] audit: type=1326 audit(506.678:48635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7385ff749 code=0x7ffc0000
[  347.702301][T19244] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.716089][   T29] audit: type=1326 audit(506.678:48636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7385ff749 code=0x7ffc0000
[  347.746536][T19244] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.755169][T19244] bridge_slave_1: entered allmulticast mode
[  347.762030][T19244] bridge_slave_1: entered promiscuous mode
[  347.769100][ T3670] tipc: Disabling bearer <udp:syz2>
[  347.774426][ T3670] tipc: Left network mode
[  347.797795][T19244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.841474][T19244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.858111][T19320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5356'.
[  347.888588][ T3670] hsr_slave_0: left promiscuous mode
[  347.945053][ T3670] team0 (unregistering): Port device team_slave_1 removed
[  347.956821][ T3670] team0 (unregistering): Port device team_slave_0 removed
[  347.968334][ T3600] smc: removing ib device syz!
[  348.054592][T19244] team0: Port device team_slave_0 added
[  348.077226][T19244] team0: Port device team_slave_1 added
[  348.137473][T19339] loop0: detected capacity change from 0 to 512
[  348.156801][T19244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.163819][T19244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.189888][T19244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.234274][T19339] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  348.252922][T19339] EXT4-fs (loop0): orphan cleanup on readonly fs
[  348.267309][T19339] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5359: corrupted inode contents
[  348.289163][T19244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.296190][T19244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.322155][T19244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.344775][T19339] EXT4-fs (loop0): Remounting filesystem read-only
[  348.366809][T19339] EXT4-fs (loop0): 1 truncate cleaned up
[  348.372861][ T3663] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  348.383485][ T3663] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  348.416085][ T3663] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  348.447563][T19339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  348.501353][T19244] hsr_slave_0: entered promiscuous mode
[  348.527187][T19244] hsr_slave_1: entered promiscuous mode
[  348.535101][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.546171][T19357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5360'.
[  348.583743][T19360] futex_wake_op: syz.0.5361 tries to shift op by 32; fix this program
[  348.595196][T19352] infiniband syz!: set down
[  348.599813][T19352] infiniband syz!: added team_slave_0
[  348.627677][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5362'.
[  348.632738][T19352] RDS/IB: syz!: added
[  348.636643][T19363] netlink: 'syz.4.5362': attribute type 30 has an invalid length.
[  348.658057][T19352] smc: adding ib device syz! with port count 1
[  348.684946][T19352] smc:    ib device syz! port 1 has no pnetid
[  348.915930][T19244] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  348.936273][T19244] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  348.955376][T19244] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  348.964939][T19244] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  349.040730][T19244] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.058398][T19244] 8021q: adding VLAN 0 to HW filter on device team0
[  349.077515][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.084762][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.101269][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.108417][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.147446][T19244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  349.258795][T19244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.729771][T19244] veth0_vlan: entered promiscuous mode
[  349.747391][T19244] veth1_vlan: entered promiscuous mode
[  349.761406][T19452] Set syz1 is full, maxelem 65536 reached
[  349.809040][T19244] veth0_macvtap: entered promiscuous mode
[  349.817347][T19244] veth1_macvtap: entered promiscuous mode
[  349.854105][T19244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.875192][T19244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.906829][ T3600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.938704][ T3640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.955981][ T3640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.970253][T19493] syz!: rxe_newlink: already configured on team_slave_0
[  349.985124][ T3640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.012880][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5375'.
[  350.333611][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'.
[  350.343042][T19513] netlink: 'syz.4.5381': attribute type 30 has an invalid length.
[  350.442726][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.451762][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.855616][T19535] syz!: rxe_newlink: already configured on team_slave_0
[  350.870846][T19535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5389'.
[  350.914965][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5392'.
[  350.923953][T19542] netlink: 'syz.3.5392': attribute type 30 has an invalid length.
[  351.195856][T19568] loop0: detected capacity change from 0 to 1024
[  351.213278][T19568] EXT4-fs: Ignoring removed orlov option
[  351.246445][T19568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.296246][T19568] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  351.317296][T19568] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  351.337724][T19568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5403'.
[  351.349617][T19579] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  351.349617][T19579]    program syz.5.5406 not setting count and/or reply_len properly
[  351.395914][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.438046][T19585] loop0: detected capacity change from 0 to 512
[  351.444740][T19585] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  351.488776][T19587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5410'.
[  351.497824][T19587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5410'.
[  351.506811][T19587] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5410'.
[  351.558018][ T3492] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  351.567630][T19593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.578806][ T3492] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  351.588766][T19593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.727896][T19610] FAULT_INJECTION: forcing a failure.
[  351.727896][T19610] name failslab, interval 1, probability 0, space 0, times 0
[  351.740719][T19610] CPU: 0 UID: 0 PID: 19610 Comm: syz.0.5418 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  351.740745][T19610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  351.740760][T19610] Call Trace:
[  351.740769][T19610]  <TASK>
[  351.740778][T19610]  __dump_stack+0x1d/0x30
[  351.740807][T19610]  dump_stack_lvl+0xe8/0x140
[  351.740881][T19610]  dump_stack+0x15/0x1b
[  351.740939][T19610]  should_fail_ex+0x265/0x280
[  351.740970][T19610]  should_failslab+0x8c/0xb0
[  351.740995][T19610]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  351.741095][T19610]  ? __alloc_skb+0x324/0x4d0
[  351.741195][T19610]  __alloc_skb+0x324/0x4d0
[  351.741216][T19610]  ? __alloc_skb+0x24d/0x4d0
[  351.741238][T19610]  audit_log_start+0x3a0/0x720
[  351.741257][T19610]  ? strnchr+0x1e/0x40
[  351.741273][T19610]  ? bpf_bprintf_prepare+0xc70/0xd90
[  351.741344][T19610]  audit_seccomp+0x48/0x100
[  351.741374][T19610]  ? __seccomp_filter+0x832/0x1260
[  351.741471][T19610]  __seccomp_filter+0x843/0x1260
[  351.741511][T19610]  ? __rcu_read_unlock+0x4f/0x70
[  351.741529][T19610]  ? __fget_files+0x184/0x1c0
[  351.741556][T19610]  __secure_computing+0x82/0x150
[  351.741666][T19610]  syscall_trace_enter+0xcf/0x1e0
[  351.741712][T19610]  do_syscall_64+0xb2/0x2c0
[  351.741753][T19610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.741772][T19610] RIP: 0033:0x7f4d7d86e15c
[  351.741785][T19610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  351.741854][T19610] RSP: 002b:00007f4d7c2cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  351.741870][T19610] RAX: ffffffffffffffda RBX: 00007f4d7dac5fa0 RCX: 00007f4d7d86e15c
[  351.741881][T19610] RDX: 000000000000000f RSI: 00007f4d7c2cf0a0 RDI: 0000000000000006
[  351.741891][T19610] RBP: 00007f4d7c2cf090 R08: 0000000000000000 R09: 0000000000000000
[  351.741960][T19610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.741971][T19610] R13: 00007f4d7dac6038 R14: 00007f4d7dac5fa0 R15: 00007ffd39f8fab8
[  351.741987][T19610]  </TASK>
[  351.987229][T19612] loop0: detected capacity change from 0 to 1024
[  351.995816][T19612] EXT4-fs: Ignoring removed orlov option
[  352.007178][T19612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.014204][T19614] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  352.014204][T19614]    program syz.4.5420 not setting count and/or reply_len properly
[  352.037378][T19612] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  352.047036][T19612] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  352.054813][T19612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5419'.
[  352.079388][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.127562][T19620] loop0: detected capacity change from 0 to 1024
[  352.134416][T19620] EXT4-fs: Ignoring removed orlov option
[  352.152343][T19620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.177607][T19623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.186613][ T3492] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  352.195764][T19623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.198080][ T3492] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  352.277478][T19627] syzkaller0: entered allmulticast mode
[  352.300270][T19627] 9p: Could not find request transport: 
[  352.312417][T19627] syzkaller0 (unregistering): left allmulticast mode
[  352.332150][T19629] ==================================================================
[  352.340273][T19629] BUG: KCSAN: data-race in __writeback_single_inode / xas_clear_mark
[  352.348392][T19629] 
[  352.350720][T19629] write to 0xffff88811b48e164 of 4 bytes by task 19620 on cpu 1:
[  352.358438][T19629]  xas_clear_mark+0x16b/0x180
[  352.363141][T19629]  __folio_start_writeback+0x231/0x340
[  352.368630][T19629]  ext4_bio_write_folio+0x5ad/0x9f0
[  352.373856][T19629]  mpage_process_page_bufs+0x4a1/0x620
[  352.379315][T19629]  mpage_prepare_extent_to_map+0x7a3/0xc20
[  352.385118][T19629]  ext4_do_writepages+0x9f6/0x27e0
[  352.390235][T19629]  ext4_writepages+0x179/0x300
[  352.395004][T19629]  do_writepages+0x1c6/0x310
[  352.399600][T19629]  file_write_and_wait_range+0x156/0x2c0
[  352.405228][T19629]  generic_buffers_fsync_noflush+0x45/0x130
[  352.411129][T19629]  ext4_sync_file+0x1ab/0x690
[  352.415815][T19629]  vfs_fsync_range+0x10d/0x130
[  352.420585][T19629]  ext4_buffered_write_iter+0x34f/0x3c0
[  352.426137][T19629]  ext4_file_write_iter+0x387/0xf60
[  352.431367][T19629]  iter_file_splice_write+0x66b/0xa20
[  352.436743][T19629]  direct_splice_actor+0x156/0x2a0
[  352.441864][T19629]  splice_direct_to_actor+0x312/0x680
[  352.447239][T19629]  do_splice_direct+0xda/0x150
[  352.452094][T19629]  do_sendfile+0x380/0x650
[  352.456691][T19629]  __x64_sys_sendfile64+0x105/0x150
[  352.461991][T19629]  x64_sys_call+0x2db1/0x3000
[  352.466683][T19629]  do_syscall_64+0xd8/0x2c0
[  352.471204][T19629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.477098][T19629] 
[  352.479422][T19629] read to 0xffff88811b48e164 of 4 bytes by task 19629 on cpu 0:
[  352.487055][T19629]  __writeback_single_inode+0x201/0x7c0
[  352.492625][T19629]  writeback_single_inode+0x16d/0x3f0
[  352.498004][T19629]  sync_inode_metadata+0x5b/0x90
[  352.502958][T19629]  generic_buffers_fsync_noflush+0xee/0x130
[  352.508873][T19629]  ext4_sync_file+0x1ab/0x690
[  352.513545][T19629]  vfs_fsync_range+0x10d/0x130
[  352.518321][T19629]  ext4_buffered_write_iter+0x34f/0x3c0
[  352.523878][T19629]  ext4_file_write_iter+0x387/0xf60
[  352.529086][T19629]  iter_file_splice_write+0x66b/0xa20
[  352.534451][T19629]  direct_splice_actor+0x156/0x2a0
[  352.539555][T19629]  splice_direct_to_actor+0x312/0x680
[  352.544926][T19629]  do_splice_direct+0xda/0x150
[  352.549685][T19629]  do_sendfile+0x380/0x650
[  352.554147][T19629]  __x64_sys_sendfile64+0x105/0x150
[  352.559343][T19629]  x64_sys_call+0x2db1/0x3000
[  352.564023][T19629]  do_syscall_64+0xd8/0x2c0
[  352.568544][T19629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.574452][T19629] 
[  352.576768][T19629] value changed: 0x0e000021 -> 0x00000021
[  352.582483][T19629] 
[  352.584798][T19629] Reported by Kernel Concurrency Sanitizer on:
[  352.590941][T19629] CPU: 0 UID: 0 PID: 19629 Comm: syz.0.5422 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  352.600744][T19629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.610800][T19629] ==================================================================
[  352.964973][  T982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.