last executing test programs:

4.889195865s ago: executing program 0 (id=984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendfile(r4, r5, &(0x7f0000000480)=0x2, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x64, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x19e5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x64}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x811}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd7, &(0x7f00000004c0)=""/215, 0x41100, 0x2, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r10, r10, r10, r10, r9, r10], 0x0, 0x10, 0xd0ad}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
close(r0)

4.639939458s ago: executing program 2 (id=985):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r5, 0x2)

4.348000193s ago: executing program 0 (id=986):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000800810000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4.318451693s ago: executing program 0 (id=987):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/12], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)

4.236261254s ago: executing program 0 (id=989):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0)

4.148234445s ago: executing program 3 (id=990):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x200000c4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x33a, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0xd8000000, {0x9402}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
gettid()
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
process_vm_writev(r3, &(0x7f0000000000), 0x1, &(0x7f0000121000)=[{&(0x7f0000000540)=""/237, 0xffffffad}], 0x23a, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

4.121831976s ago: executing program 1 (id=991):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")

3.776581551s ago: executing program 1 (id=993):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040))
dup3(r0, r0, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7, 0x0, 0x276, 0xa70b, {{0x5, 0x4, 0x1, 0x2e, 0x14, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @broadcast, @multicast2}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'xfrm0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r5=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)

3.699541142s ago: executing program 2 (id=994):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
unshare(0x60480)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x0, 0x8, 0x20205, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone3(&(0x7f0000000900)={0x20004100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)=0x7ffd)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x20, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = creat(0x0, 0x0)
ftruncate(r6, 0x81fd)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

3.494131365s ago: executing program 1 (id=996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r2, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=<r4=>0x0)
getpgid(r4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="5300000100000080000000000000000001000000000000", @ANYBLOB="0000000000000000000000000000000000000000ac1fef52d8a44a38d213bf4a42c311900c3edb8898546a0cc8a6df8f6198a47e38c97b745a46b92a92945b629ddc3bb699ef5ed158f76b4161349c99c87ca534c2d2dc91a0650189fe724ff81d3586a0cc69f90f1624aff7ebaa05f4d6cb23f53e874d114252eb04cd7289f00a308fb18326b17f843ba9c99e1193312e4217c24d55c43a8f856eb409b1e65b0fc27ff72e2ca7e576c7ee128fac43fbf95b9ed0eb4d100e25e9bf43f8fd015bc21c8dc31cf2b68a4c42d1955ae0d1239a72e2d973313c5e29af573cb9741bb2dfd92238578a66ca", @ANYRES64=r2, @ANYRES32, @ANYBLOB="0040000002000000070000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000011002901800000000000", @ANYRES32, @ANYBLOB="000000000000fdff1b001a800800038004000500080000003e"], 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="220100fe1f327c6ae936c67760f7ee1a07cdb8b323cd9e03000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES32=r5], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

3.352405967s ago: executing program 0 (id=997):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_getscheduler(0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500000088140000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2)
madvise(&(0x7f00009fc000/0x4000)=nil, 0x4000, 0x4)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
dup(0xffffffffffffffff)

3.308403039s ago: executing program 3 (id=998):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080008008100000006"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.253121769s ago: executing program 4 (id=999):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$eJzs3EtPE10YwPGnV9oSaBdv3jevieFEN7qZQHWtNAYSYxMJUuMlMRlgqk3HlnQaTI3xsnJr/BAuCEt2JMoXYONON27csTFxIQtjTedCoQwgbWkR/r+EzMOc88ycc1qa5zS0G3fePC7mLS2vVyUYUxIQEdkUSUlQPAH3GLTjqGz3Ui4Ofv909tbdezcy2ezEtFKTmZlLaaXU8Mj7J8/ibrfVAVlPPdj4lv66/u/6/xu/Zh4VLFWwVKlcVbqaLX+p6rOmoeYLVlFTaso0dMtQhZJlVJz2stOeN8sLCzWll+aHEgsVw7KUXqqpolFT1bKqVmoq9FAvlJSmaWooIThIbml6Ws+0mTzX5cHgiFQqGT0kIvFdLbmlvgwIAAD0VWv9HxTVzfp/+dxadfD2yrBb/69G/er/y5+da+2o/2Mi4lv/e/f3rf/1w9X/uyui06Wj+h/Hw0h016lAM2w0VjJ6wv37tb26vzxqB9T/AAAAAAAAAAAAAAAAAAAAAAD8DTbr9WS9Xk96R+9nQERiIuL97pMaEpGrfRgyuqiDxx8nQPODe+FhEfP1Ym4x5xzdDmsiYooho5KUn/bzwdWIvU8eqYaUfDBfOPkD7suDSCYvBTt/TJIRaeaH3HjyenZiTDma+Y1jRBLb89OSlH9a7+/kp33zo3Lh/LZ8TZLycU7KYsq8fe9m/vMxpa7dzLbkx+1+AAAAAACcBJraktq5/3X275q2V7uTv7W/bn1/INTcX4/67s/Dcibc37kDAAAAAHBaWLWnRd00jco+QVwO7tN+ED6iK3sz/NMs738Zjm6m+wTezXc0xdyTnVw54rcsgUMsyx5BUNrJGmnMRnW6Yt7bRnv1kanx3j+CdvDf23c/ureYV1ZiB8y0/SC0/xMg0rMXIAAAAAA90yz6vTPj/R0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnUC++Ha3fcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOi98BAAD//xPfAEw=")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/12], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)

3.147567321s ago: executing program 2 (id=1000):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/12], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)

3.010635453s ago: executing program 3 (id=1001):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

2.927157974s ago: executing program 1 (id=1002):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
shmctl$IPC_RMID(r1, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x8, 0x80000, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
unshare(0x42000000)
syz_usb_disconnect(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000140)='cgQh\xeaA-\x04t\xd8:\xa8\xd9\xf0\x00'/24}, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYBLOB])
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0xe301, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

2.404356103s ago: executing program 4 (id=1003):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/12], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)

2.248476745s ago: executing program 3 (id=1004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r5, 0x2)

2.127424877s ago: executing program 2 (id=1005):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")

1.980439009s ago: executing program 4 (id=1006):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r5, 0x0, 0xfffffeea)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}})
syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
utimes(0x0, 0x0)
readlink(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0)

1.843576601s ago: executing program 2 (id=1007):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mount$nfs(&(0x7f0000000280)='$\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40, &(0x7f0000000340)={[{'\x00'}, {}, {'].)*-$,./.@'}, {'.]\xda'}, {'\x00'}, {}], [{@smackfshat={'smackfshat', 0x3d, '/dev/input/event#\x00'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x1, 0x30, 0x35, 0x35, 0x61, 0x34, 0x66], 0x2d, [0x33, 0x38, 0x36, 0x32], 0x2d, [0x63, 0x0, 0x65, 0x36], 0x2d, [0x30, 0x5, 0x33, 0x62], 0x2d, [0x39, 0x23, 0x62, 0x65, 0x64, 0x65, 0x65, 0x61]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@audit}]})
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0xc, 0xd, 0xc4, 0x0})
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r7, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000b00)=""/4107, 0x100b}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000380)=""/163, 0xa3}], 0x8}, 0x1}], 0x400010d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x10, 0xc}, 0x50)
syz_usb_disconnect(r3)
sendmsg$nl_route_sched(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf8}}, 0x0)

1.699542163s ago: executing program 4 (id=1008):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0)

1.523925096s ago: executing program 1 (id=1009):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x200000c4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x33a, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0xd8000000, {0x9402}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
gettid()
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
process_vm_writev(r3, &(0x7f0000000000), 0x1, &(0x7f0000121000)=[{&(0x7f0000000540)=""/237, 0xffffffad}], 0x23a, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

1.067880213s ago: executing program 3 (id=1010):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20)
r4 = syz_pidfd_open(r0, 0x0)
setns(r4, 0x24020000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[])
syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.022771083s ago: executing program 0 (id=1011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="9e6d12d4ecccdf9b0f018b7a2d4aa6b00bc989ae3f4e84617813d86793d24e4d5af6f3ee79496869fa3e048e099b6b26ae28a328e0c90f12d6f432febd21e0bec24b041af3945a0efa76f311a757945472f5d52651e123", @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18)
getgid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f0000000bc0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x7ffff000)
fallocate(r5, 0x0, 0x0, 0x1001f0)

998.052084ms ago: executing program 1 (id=1012):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9", 0x2a, r7)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0)

685.287189ms ago: executing program 4 (id=1013):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000740)={0x0, 0x31, 0xe, 0x0, 0x60, 0xcee4, &(0x7f0000000640)="1e9fc968fcf4d190feea5d0fdb75203e2a66c8f67ef139455192bc11bf539839814399178dc2d32230cc7dc2c06ff03c86256c920b1c725a31bb7d3322f132122e1b25e945816f65880ff709956d1b40b7a8b9f7b0ecc1e3592d19b250fea17e"})
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800)
sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000000c5e96d930fe3d0301bcfde363f36a357a06e0c5fce32648232cef3e788a3131828ef1cd765a27e59b36f24"], 0x50)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10)

507.090952ms ago: executing program 2 (id=1014):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/12], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)

42.470479ms ago: executing program 3 (id=1015):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

0s ago: executing program 4 (id=1016):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5")
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r5, 0x2)

kernel console output (not intermixed with test programs):

 98.254663][ T5256] loop4: p2 start 4294967295 is beyond EOD, truncated
[   99.195411][ T5277] loop2: detected capacity change from 0 to 8192
[   99.261244][ T5277] netlink: 'syz.2.476': attribute type 8 has an invalid length.
[   99.333518][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   99.349345][ T5296] pimreg: entered allmulticast mode
[   99.355499][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   99.387740][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   99.402813][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   99.432132][ T5296] netlink: 'syz.1.480': attribute type 10 has an invalid length.
[   99.440221][ T5294] loop0: detected capacity change from 0 to 8192
[   99.466933][ T5296] netlink: 'syz.1.480': attribute type 10 has an invalid length.
[   99.488068][ T5299] loop2: detected capacity change from 0 to 1024
[   99.500044][ T5301] loop3: detected capacity change from 0 to 1024
[   99.506647][ T5296] pimreg: left allmulticast mode
[   99.507407][ T5299] EXT4-fs: Ignoring removed nobh option
[   99.522430][ T5294] netlink: 'syz.0.490': attribute type 8 has an invalid length.
[   99.531576][ T5299] EXT4-fs: Ignoring removed bh option
[   99.575020][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.588141][ T5301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.634274][ T5299] futex_wake_op: syz.2.482 tries to shift op by -1; fix this program
[   99.643264][ T5301] netlink: 'syz.3.483': attribute type 1 has an invalid length.
[   99.656324][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.715462][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.730155][ T5313] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   99.748231][ T5312] loop2: detected capacity change from 0 to 1024
[   99.755096][ T5313] SELinux: failed to load policy
[   99.764220][ T5312] EXT4-fs: Ignoring removed oldalloc option
[   99.772050][ T5312] EXT4-fs: Ignoring removed orlov option
[   99.793601][ T5312] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   99.805136][ T5315] loop3: detected capacity change from 0 to 1024
[   99.811991][ T5311] loop4: detected capacity change from 0 to 8192
[   99.814941][ T5315] EXT4-fs: Ignoring removed orlov option
[   99.849996][ T5315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.871278][ T5311] netlink: 'syz.4.486': attribute type 8 has an invalid length.
[   99.880047][ T5312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.892944][ T5318] loop1: detected capacity change from 0 to 512
[   99.926897][ T5318] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   99.941270][ T5318] EXT4-fs (loop1): orphan cleanup on readonly fs
[   99.955331][ T5318] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.487: corrupted inode contents
[   99.978509][ T5318] EXT4-fs (loop1): Remounting filesystem read-only
[   99.986194][ T5318] EXT4-fs (loop1): 1 truncate cleaned up
[   99.986550][   T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  100.002548][   T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  100.014822][   T51] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  100.026150][ T5318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.040679][ T5318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.041251][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.152511][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.163859][ T5327] loop0: detected capacity change from 0 to 128
[  100.184776][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'.
[  100.200507][ T5328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.237460][ T5330] loop3: detected capacity change from 0 to 128
[  100.275822][ T5328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.451996][ T5328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.630915][ T5327] bio_check_eod: 8 callbacks suppressed
[  100.631071][ T5327] syz.0.489: attempt to access beyond end of device
[  100.631071][ T5327] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[  100.659948][ T5328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.705034][ T5327] syz.0.489: attempt to access beyond end of device
[  100.705034][ T5327] loop0: rw=2049, sector=169, nr_sectors = 16 limit=128
[  100.804615][ T5328] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.825248][ T5327] syz.0.489: attempt to access beyond end of device
[  100.825248][ T5327] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128
[  100.853763][ T5328] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.863314][   T37] kworker/u8:2: attempt to access beyond end of device
[  100.863314][   T37] loop3: rw=1, sector=145, nr_sectors = 16 limit=128
[  100.866274][ T5328] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.877065][   T37] kworker/u8:2: attempt to access beyond end of device
[  100.877065][   T37] loop3: rw=1, sector=169, nr_sectors = 16 limit=128
[  100.899371][   T37] kworker/u8:2: attempt to access beyond end of device
[  100.899371][   T37] loop3: rw=1, sector=193, nr_sectors = 8 limit=128
[  100.909571][ T5327] syz.0.489: attempt to access beyond end of device
[  100.909571][ T5327] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128
[  100.919256][   T37] kworker/u8:2: attempt to access beyond end of device
[  100.919256][   T37] loop3: rw=1, sector=209, nr_sectors = 8 limit=128
[  100.943885][   T37] kworker/u8:2: attempt to access beyond end of device
[  100.943885][   T37] loop3: rw=1, sector=225, nr_sectors = 8 limit=128
[  100.958566][   T37] kworker/u8:2: attempt to access beyond end of device
[  100.958566][   T37] loop3: rw=1, sector=241, nr_sectors = 8 limit=128
[  100.977188][ T5328] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.109761][ T5350] loop1: detected capacity change from 0 to 2048
[  101.118480][ T5348] loop4: detected capacity change from 0 to 1024
[  101.126174][ T5348] EXT4-fs: Ignoring removed nobh option
[  101.131867][ T5348] EXT4-fs: Ignoring removed bh option
[  101.164146][ T5352] loop2: detected capacity change from 0 to 1024
[  101.187789][ T5352] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  101.231766][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.247619][ T5350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.268938][ T5348] futex_wake_op: syz.4.497 tries to shift op by -1; fix this program
[  101.279710][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'.
[  101.299863][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.318241][ T5361] loop0: detected capacity change from 0 to 512
[  101.443210][ T5361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.305557][   T29] kauditd_printk_skb: 729 callbacks suppressed
[  102.305574][   T29] audit: type=1400 audit(104.891:13911): avc:  denied  { create } for  pid=5373 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.348260][ T5361] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm +}[@: corrupted inode contents
[  102.366560][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  102.380560][   T29] audit: type=1400 audit(104.944:13912): avc:  denied  { setopt } for  pid=5373 comm="syz.3.503" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.384215][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.400292][   T29] audit: type=1400 audit(104.944:13913): avc:  denied  { create } for  pid=5373 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  102.429883][   T29] audit: type=1400 audit(104.944:13914): avc:  denied  { add_name } for  pid=5360 comm="+}[@" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  102.439084][ T5361] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm +}[@: mark_inode_dirty error
[  102.449926][   T29] audit: type=1400 audit(104.944:13915): avc:  denied  { create } for  pid=5360 comm="+}[@" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  102.479973][   T29] audit: type=1400 audit(104.954:13916): avc:  denied  { write } for  pid=5373 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  102.499838][   T29] audit: type=1400 audit(104.954:13917): avc:  denied  { read } for  pid=5373 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  102.507610][ T5361] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm +}[@: corrupted inode contents
[  102.521668][   T29] audit: type=1400 audit(104.975:13918): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  102.550589][   T29] audit: type=1400 audit(105.028:13919): avc:  denied  { write } for  pid=5373 comm="syz.3.503" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.570723][   T29] audit: type=1400 audit(105.028:13920): avc:  denied  { firmware_load } for  pid=5373 comm="syz.3.503" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  102.611376][ T5361] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm +}[@: mark_inode_dirty error
[  102.683878][ T5381] loop1: detected capacity change from 0 to 8192
[  102.690358][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.709847][ T5381] netlink: 'syz.1.504': attribute type 8 has an invalid length.
[  102.723534][ T5377] loop4: detected capacity change from 0 to 512
[  102.742909][ T5377] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  102.759103][ T5385] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  102.776001][ T5383] loop3: detected capacity change from 0 to 128
[  103.002427][ T5392] loop3: detected capacity change from 0 to 8192
[  103.017862][ T5392] netlink: 'syz.3.509': attribute type 8 has an invalid length.
[  103.147723][ T5398] loop4: detected capacity change from 0 to 8192
[  103.171530][ T5398] netlink: 'syz.4.511': attribute type 8 has an invalid length.
[  103.226460][ T5401] loop4: detected capacity change from 0 to 128
[  103.654573][ T5405] loop4: detected capacity change from 0 to 1024
[  103.662638][ T5405] ext4: Unknown parameter 'uid<00000000000000000000'
[  103.701080][ T5409] loop1: detected capacity change from 0 to 128
[  103.812353][ T5412] loop4: detected capacity change from 0 to 8192
[  103.855557][ T5412] netlink: 'syz.4.516': attribute type 8 has an invalid length.
[  103.940389][ T5418] loop0: detected capacity change from 0 to 2048
[  103.968769][ T5420] loop1: detected capacity change from 0 to 512
[  103.971570][ T5418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.008270][ T5420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.520: bg 0: block 248: padding at end of block bitmap is not set
[  104.023757][ T5420] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.520: Failed to acquire dquot type 1
[  104.049123][ T5427] loop2: detected capacity change from 0 to 764
[  104.052128][ T5420] EXT4-fs (loop1): 1 truncate cleaned up
[  104.064103][ T5427] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  104.076092][ T5420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.357299][ T5439] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  104.415693][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.483958][ T5441] loop1: detected capacity change from 0 to 8192
[  104.500190][ T5441] netlink: 'syz.1.524': attribute type 8 has an invalid length.
[  104.728093][ T5452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.528'.
[  104.739011][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'.
[  104.748063][ T5452] netlink: 196 bytes leftover after parsing attributes in process `syz.2.528'.
[  104.758612][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'.
[  104.768573][ T5452] netlink: 196 bytes leftover after parsing attributes in process `syz.2.528'.
[  104.770828][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.839571][ T5455] loop4: detected capacity change from 0 to 1024
[  104.861796][ T5456] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  104.970808][ T5452] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  104.986593][ T5456] SELinux: failed to load policy
[  105.219391][ T5455] lo speed is unknown, defaulting to 1000
[  106.783551][ T5470] SELinux: syz.1.532 (5470) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  106.908611][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  106.943426][ T3393] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  106.978313][ T5483] loop0: detected capacity change from 0 to 512
[  107.027622][ T5483] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  107.072549][   T29] kauditd_printk_skb: 1289 callbacks suppressed
[  107.072563][   T29] audit: type=1326 audit(109.889:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f00aa58e7 code=0x7ffc0000
[  107.102175][   T29] audit: type=1326 audit(109.889:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f00a4ab19 code=0x7ffc0000
[  107.125004][   T29] audit: type=1326 audit(109.889:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  107.249742][ T5486] loop1: detected capacity change from 0 to 8192
[  107.320717][ T5486] netlink: 'syz.1.536': attribute type 8 has an invalid length.
[  107.452388][   T29] audit: type=1326 audit(110.004:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f00aa58e7 code=0x7ffc0000
[  107.475326][   T29] audit: type=1326 audit(110.004:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f00a4ab19 code=0x7ffc0000
[  107.498181][   T29] audit: type=1326 audit(110.004:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  107.521093][   T29] audit: type=1326 audit(110.015:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01b451d290 code=0x7ffc0000
[  107.543962][   T29] audit: type=1326 audit(110.015:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01b451e52b code=0x7ffc0000
[  107.566751][   T29] audit: type=1326 audit(110.015:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f01b451d58a code=0x7ffc0000
[  107.589430][   T29] audit: type=1326 audit(110.015:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  108.280789][ T5500] loop1: detected capacity change from 0 to 512
[  108.842928][ T5500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.539: bg 0: block 131: padding at end of block bitmap is not set
[  108.899328][ T5500] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  108.932840][ T5500] EXT4-fs (loop1): 1 truncate cleaned up
[  108.958466][ T5500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.174404][ T5514] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.344841][ T5520] loop2: detected capacity change from 0 to 8192
[  109.375084][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.411064][ T5520] netlink: 'syz.2.545': attribute type 8 has an invalid length.
[  110.172190][ T5530] loop3: detected capacity change from 0 to 8192
[  110.185028][ T5533] xt_hashlimit: max too large, truncated to 1048576
[  110.188109][ T5530] netlink: 'syz.3.547': attribute type 8 has an invalid length.
[  110.204004][ T5533] loop0: detected capacity change from 0 to 2048
[  110.290809][ T5534] loop2: detected capacity change from 0 to 1024
[  110.298505][ T5533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.311788][ T5538] SELinux: failed to load policy
[  110.349659][ T5534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.396530][ T5534] vhci_hcd: invalid port number 96
[  110.401742][ T5534] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  110.433338][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.457395][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.497002][ T5551] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  110.539293][ T5554] loop0: detected capacity change from 0 to 8192
[  110.552708][ T5554] netlink: 'syz.0.555': attribute type 8 has an invalid length.
[  110.627397][ T5560] loop0: detected capacity change from 0 to 128
[  111.333436][ T5569] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  111.350128][ T5564] mmap: syz.3.559 (5564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.375800][ T5564] netlink: 'syz.3.559': attribute type 10 has an invalid length.
[  111.385463][ T5564] dummy0: left promiscuous mode
[  111.413908][ T5564] dummy0: entered promiscuous mode
[  111.428845][ T5564] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  111.599051][ T5578] loop2: detected capacity change from 0 to 1024
[  111.606332][ T5578] EXT4-fs: Ignoring removed orlov option
[  111.617450][ T5578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.846985][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.012112][   T29] kauditd_printk_skb: 699 callbacks suppressed
[  112.012204][   T29] audit: type=1400 audit(115.085:15917): avc:  denied  { create } for  pid=5587 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  112.038986][   T29] audit: type=1400 audit(115.085:15918): avc:  denied  { ioctl } for  pid=5587 comm="syz.3.566" path="socket:[10546]" dev="sockfs" ino=10546 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  112.064458][   T29] audit: type=1400 audit(115.106:15919): avc:  denied  { sys_module } for  pid=5587 comm="syz.3.566" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  112.088999][   T29] audit: type=1400 audit(115.159:15920): avc:  denied  { read write } for  pid=5584 comm="syz.2.565" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.104040][ T5586] lo speed is unknown, defaulting to 1000
[  112.142391][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'.
[  112.151377][   T29] audit: type=1400 audit(115.159:15921): avc:  denied  { open } for  pid=5584 comm="syz.2.565" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.174297][   T29] audit: type=1400 audit(115.222:15922): avc:  denied  { create } for  pid=5587 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1
[  112.194828][   T29] audit: type=1400 audit(115.222:15923): avc:  denied  { write } for  pid=5587 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1
[  112.211273][ T5593] loop1: detected capacity change from 0 to 128
[  112.215047][   T29] audit: type=1400 audit(115.222:15924): avc:  denied  { create } for  pid=5587 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1
[  112.215177][   T29] audit: type=1400 audit(115.222:15925): avc:  denied  { write } for  pid=5587 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  112.342928][ T5596] loop3: detected capacity change from 0 to 8192
[  112.396504][   T29] audit: type=1326 audit(115.484:15926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  112.440464][ T5598] loop4: detected capacity change from 0 to 8192
[  112.457440][ T5593] bio_check_eod: 35 callbacks suppressed
[  112.457575][ T5593] syz.1.567: attempt to access beyond end of device
[  112.457575][ T5593] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  112.485566][ T5596] netlink: 'syz.3.568': attribute type 8 has an invalid length.
[  112.489370][ T5598] netlink: 'syz.4.569': attribute type 8 has an invalid length.
[  112.493947][ T5593] syz.1.567: attempt to access beyond end of device
[  112.493947][ T5593] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128
[  112.517874][ T5593] syz.1.567: attempt to access beyond end of device
[  112.517874][ T5593] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128
[  112.532696][ T5601] loop0: detected capacity change from 0 to 8192
[  112.535326][ T5593] syz.1.567: attempt to access beyond end of device
[  112.535326][ T5593] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[  112.552010][ T5601] vfat: Unknown parameter 'ÿÿÿÿ'
[  112.557263][ T5593] syz.1.567: attempt to access beyond end of device
[  112.557263][ T5593] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[  112.576384][ T5593] syz.1.567: attempt to access beyond end of device
[  112.576384][ T5593] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[  112.592364][ T5593] syz.1.567: attempt to access beyond end of device
[  112.592364][ T5593] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[  112.611566][ T5593] syz.1.567: attempt to access beyond end of device
[  112.611566][ T5593] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[  112.627536][ T5593] syz.1.567: attempt to access beyond end of device
[  112.627536][ T5593] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128
[  112.745432][ T5608] loop2: detected capacity change from 0 to 128
[  112.779321][ T5608] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.800165][ T5608] only policy match revision 0 supported
[  112.800179][ T5608] unable to load match
[  112.815178][ T5608] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.863538][ T5612] geneve0: entered allmulticast mode
[  112.891164][ T5608] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.364428][ T5608] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.394919][ T5613] lo speed is unknown, defaulting to 1000
[  113.446686][ T5617] syzkaller1: entered promiscuous mode
[  113.452322][ T5617] syzkaller1: entered allmulticast mode
[  113.471171][ T5608] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.649741][ T5625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'.
[  113.723180][ T5627] loop4: detected capacity change from 0 to 128
[  113.764099][ T5608] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.872846][ T5608] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.945937][ T5608] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.985341][ T5627] syz.4.577: attempt to access beyond end of device
[  113.985341][ T5627] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  113.993884][ T5608] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.011802][ T5632] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  114.040913][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.072823][ T5634] xt_hashlimit: max too large, truncated to 1048576
[  114.091302][ T5634] loop4: detected capacity change from 0 to 2048
[  114.111200][ T5634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.135509][ T5640] loop2: detected capacity change from 0 to 1024
[  114.142540][ T5640] EXT4-fs: Ignoring removed nobh option
[  114.148218][ T5640] EXT4-fs: Ignoring removed bh option
[  114.198361][ T5640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.238926][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.294549][ T5645] loop3: detected capacity change from 0 to 512
[  114.324303][ T5648] loop4: detected capacity change from 0 to 128
[  114.339822][ T5645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.362871][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[  114.414104][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'.
[  114.437514][ T5654] loop7: detected capacity change from 0 to 16384
[  114.451041][ T5659] netlink: 'syz.0.585': attribute type 13 has an invalid length.
[  114.496103][ T5654] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
[  114.526778][ T5645] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  114.538060][ T5659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.545205][ T5654] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.563316][ T5654] buffer_io_error: 31030 callbacks suppressed
[  114.563332][ T5654] Buffer I/O error on dev loop7, logical block 257, async page read
[  114.579743][ T5654] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.589230][ T5654] Buffer I/O error on dev loop7, logical block 257, async page read
[  114.598014][ T5654] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.607580][ T5654] Buffer I/O error on dev loop7, logical block 257, async page read
[  114.618099][ T5664] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  114.677017][ T5664] netlink: 'syz.4.586': attribute type 13 has an invalid length.
[  114.685442][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.721250][ T5668] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  114.750913][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.758195][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.759556][ T5668] SELinux: failed to load policy
[  114.780854][ T5670] loop3: detected capacity change from 0 to 128
[  114.878823][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.933685][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'.
[  114.967330][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.980494][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.011706][ T5681] loop1: detected capacity change from 0 to 128
[  115.034465][ T5684] loop3: detected capacity change from 0 to 256
[  115.078937][ T5664] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.087487][ T5664] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.095963][ T5664] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.104459][ T5664] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.305083][ T5692] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  115.812620][ T5700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.597'.
[  115.839004][ T5700] : renamed from lo (while UP)
[  115.868880][ T5698] loop3: detected capacity change from 0 to 8192
[  115.947066][ T5702] loop0: detected capacity change from 0 to 8192
[  115.962007][ T5698] netlink: 'syz.3.596': attribute type 8 has an invalid length.
[  115.993275][ T5702] netlink: 'syz.0.598': attribute type 8 has an invalid length.
[  116.060254][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.084170][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.239823][ T5713] loop4: detected capacity change from 0 to 128
[  116.331220][ T5655] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  116.339855][ T5715] lo speed is unknown, defaulting to 1000
[  116.341194][ T5655] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  116.355115][ T5655] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  116.363565][ T5655] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  116.371975][ T5655] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  116.380414][ T5655] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  116.388926][ T5655] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  116.397327][ T5655] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  116.431397][ T5655] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  116.444285][ T5655] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  116.621518][ T5723] netlink: 'syz.3.605': attribute type 10 has an invalid length.
[  116.753962][ T5727] loop0: detected capacity change from 0 to 128
[  116.814779][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'.
[  116.893224][   T29] kauditd_printk_skb: 1499 callbacks suppressed
[  116.893241][   T29] audit: type=1326 audit(120.208:17426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  116.944327][   T29] audit: type=1326 audit(120.240:17427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  116.967303][   T29] audit: type=1326 audit(120.240:17428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  116.990276][   T29] audit: type=1326 audit(120.240:17429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.013205][   T29] audit: type=1326 audit(120.250:17430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.036284][   T29] audit: type=1326 audit(120.250:17431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.059193][   T29] audit: type=1326 audit(120.250:17432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.082083][   T29] audit: type=1326 audit(120.250:17433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.104905][   T29] audit: type=1326 audit(120.250:17434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.127829][   T29] audit: type=1326 audit(120.250:17435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  117.179596][ T5733] IPv6: Can't replace route, no match found
[  117.188160][ T5733] netlink: 'syz.1.609': attribute type 13 has an invalid length.
[  117.216864][ T5733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.716886][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  117.730536][ T5748] vlan0: entered allmulticast mode
[  118.134088][ T5750] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  118.194481][ T5752] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.613' sets config #0
[  118.208331][ T5754] xt_hashlimit: max too large, truncated to 1048576
[  118.227704][ T5754] loop3: detected capacity change from 0 to 2048
[  118.240768][ T5747] netlink: 104 bytes leftover after parsing attributes in process `syz.2.610'.
[  118.258485][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.405372][ T5763] xt_hashlimit: max too large, truncated to 1048576
[  118.421816][ T5763] loop4: detected capacity change from 0 to 2048
[  118.501900][ T5763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.574579][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.712905][ T5769] loop3: detected capacity change from 0 to 512
[  118.757610][ T5769] journal_path: Lookup failure for './file0/../file0'
[  118.764505][ T5769] EXT4-fs: error: could not find journal device path
[  118.847728][ T5769] Process accounting resumed
[  118.856472][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.890259][ T5773] loop1: detected capacity change from 0 to 128
[  119.047350][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[  119.069139][ T5779] vti0: entered promiscuous mode
[  119.160539][ T5773] bio_check_eod: 53 callbacks suppressed
[  119.160575][ T5773] syz.1.622: attempt to access beyond end of device
[  119.160575][ T5773] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  119.198604][ T5752] Set syz1 is full, maxelem 65536 reached
[  119.214917][ T5773] syz.1.622: attempt to access beyond end of device
[  119.214917][ T5773] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128
[  119.230952][ T5773] syz.1.622: attempt to access beyond end of device
[  119.230952][ T5773] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128
[  119.246435][ T5773] syz.1.622: attempt to access beyond end of device
[  119.246435][ T5773] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[  119.268003][ T5786] loop0: detected capacity change from 0 to 1024
[  119.275085][ T5773] syz.1.622: attempt to access beyond end of device
[  119.275085][ T5773] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[  119.290990][ T5786] EXT4-fs: Ignoring removed orlov option
[  119.297942][ T5773] syz.1.622: attempt to access beyond end of device
[  119.297942][ T5773] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[  119.314307][ T5773] syz.1.622: attempt to access beyond end of device
[  119.314307][ T5773] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[  119.315198][ T5786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.328841][ T5773] syz.1.622: attempt to access beyond end of device
[  119.328841][ T5773] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[  119.357557][ T5773] syz.1.622: attempt to access beyond end of device
[  119.357557][ T5773] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128
[  119.388770][ T5784] loop4: detected capacity change from 0 to 8192
[  119.403052][ T5784] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.577656][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  119.587538][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'.
[  119.589127][ T3393] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  120.125294][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.493739][ T5807] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  120.610270][ T5811] xt_hashlimit: max too large, truncated to 1048576
[  120.658720][ T5811] loop2: detected capacity change from 0 to 2048
[  120.693311][ T5811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.756625][ T5820] loop0: detected capacity change from 0 to 512
[  120.763975][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'.
[  120.854013][ T5820] journal_path: Lookup failure for './file0/../file0'
[  120.860861][ T5820] EXT4-fs: error: could not find journal device path
[  120.928530][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.931564][ T5820] Process accounting resumed
[  121.072240][ T5830] loop0: detected capacity change from 0 to 8192
[  121.091277][ T5830] netlink: 'syz.0.638': attribute type 8 has an invalid length.
[  121.162286][ T5833] xt_hashlimit: max too large, truncated to 1048576
[  121.187864][ T5833] loop0: detected capacity change from 0 to 2048
[  121.223396][ T5833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.421336][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.555447][ T5838] loop1: detected capacity change from 0 to 8192
[  121.577580][ T5840] loop0: detected capacity change from 0 to 8192
[  121.601630][ T5838] netlink: 'syz.1.642': attribute type 8 has an invalid length.
[  121.604865][ T5840] netlink: 'syz.0.641': attribute type 8 has an invalid length.
[  121.663667][   T29] kauditd_printk_skb: 432 callbacks suppressed
[  121.663682][   T29] audit: type=1326 audit(125.216:17868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01b451d3df code=0x7ffc0000
[  121.701319][   T29] audit: type=1326 audit(125.226:17869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f01b451e9b7 code=0x7ffc0000
[  121.724335][   T29] audit: type=1326 audit(125.226:17870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01b451d290 code=0x7ffc0000
[  121.747472][   T29] audit: type=1326 audit(125.226:17871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f01b451d58a code=0x7ffc0000
[  121.770199][   T29] audit: type=1326 audit(125.226:17872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  121.793426][   T29] audit: type=1326 audit(125.226:17873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  121.816407][   T29] audit: type=1326 audit(125.226:17874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  121.839312][   T29] audit: type=1326 audit(125.226:17875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  121.862230][   T29] audit: type=1326 audit(125.226:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  121.885617][   T29] audit: type=1326 audit(125.226:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  121.970684][ T5846] loop4: detected capacity change from 0 to 8192
[  121.983540][ T5846] netlink: 'syz.4.645': attribute type 8 has an invalid length.
[  122.674685][ T5852] loop0: detected capacity change from 0 to 8192
[  122.938864][ T5852] netlink: 'syz.0.647': attribute type 8 has an invalid length.
[  122.969389][ T5858] xt_hashlimit: max too large, truncated to 1048576
[  123.030994][ T5861] loop3: detected capacity change from 0 to 2048
[  123.116422][ T5861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.230736][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'.
[  123.244482][ T5869] vlan2: entered allmulticast mode
[  123.512468][ T5871] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  123.656407][ T5875] xt_hashlimit: max too large, truncated to 1048576
[  123.693556][ T5875] loop0: detected capacity change from 0 to 2048
[  123.719533][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.730347][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.910491][ T5883] loop3: detected capacity change from 0 to 128
[  123.919989][ T5881] loop2: detected capacity change from 0 to 1024
[  123.923505][ T5886] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  123.967979][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.047574][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.060741][ T5881] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.655: lblock 1 mapped to illegal pblock 1 (length 15)
[  124.105979][ T5889] netlink: 'syz.2.655': attribute type 21 has an invalid length.
[  124.124850][ T5881] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  124.137329][ T5881] EXT4-fs (loop2): This should not happen!! Data will be lost
[  124.137329][ T5881] 
[  124.151010][ T5893] IPv6: Can't replace route, no match found
[  124.171554][ T5894] pim6reg: entered allmulticast mode
[  124.177010][ T5889] netlink: 'syz.2.655': attribute type 1 has an invalid length.
[  124.184778][ T5889] netlink: 144 bytes leftover after parsing attributes in process `syz.2.655'.
[  124.194599][ T5894] pim6reg: left allmulticast mode
[  124.204916][ T5893] netlink: 'syz.0.657': attribute type 13 has an invalid length.
[  124.216652][ T5883] syz.3.654: attempt to access beyond end of device
[  124.216652][ T5883] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[  124.234590][ T5883] syz.3.654: attempt to access beyond end of device
[  124.234590][ T5883] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128
[  124.254449][ T5893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.275078][ T5883] syz.3.654: attempt to access beyond end of device
[  124.275078][ T5883] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128
[  124.289779][ T5883] syz.3.654: attempt to access beyond end of device
[  124.289779][ T5883] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[  124.311263][ T5883] syz.3.654: attempt to access beyond end of device
[  124.311263][ T5883] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[  124.366583][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.376251][ T5883] syz.3.654: attempt to access beyond end of device
[  124.376251][ T5883] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[  124.394634][ T5883] syz.3.654: attempt to access beyond end of device
[  124.394634][ T5883] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[  124.414753][ T5883] syz.3.654: attempt to access beyond end of device
[  124.414753][ T5883] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[  124.432441][ T5883] syz.3.654: attempt to access beyond end of device
[  124.432441][ T5883] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128
[  125.027912][ T5907] loop3: detected capacity change from 0 to 1024
[  125.066113][ T5907] EXT4-fs: Ignoring removed orlov option
[  125.093665][ T5907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.418705][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'.
[  125.427870][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  125.475184][ T5916] loop0: detected capacity change from 0 to 8192
[  125.499790][ T3393] IPVS: starting estimator thread 0...
[  125.510230][ T5925] loop4: detected capacity change from 0 to 1024
[  125.519030][ T5925] EXT4-fs: Ignoring removed nobh option
[  125.524781][ T5925] EXT4-fs: Ignoring removed bh option
[  125.537758][ T5921] loop2: detected capacity change from 0 to 512
[  125.544825][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.545583][ T5921] journal_path: Lookup failure for './file0/../file0'
[  125.560739][ T5921] EXT4-fs: error: could not find journal device path
[  125.569161][ T5916] netlink: 'syz.0.663': attribute type 8 has an invalid length.
[  125.580897][ T5914] tipc: Started in network mode
[  125.585857][ T5914] tipc: Node identity 2e6b7cc4abce, cluster identity 4711
[  125.593226][ T5914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.604185][ T5925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.618046][ T5926] IPVS: using max 2256 ests per chain, 112800 per kthread
[  125.627944][ T5914] tipc: Disabling bearer <eth:syzkaller0>
[  125.695771][ T5935] xt_hashlimit: max too large, truncated to 1048576
[  125.715178][ T5935] loop2: detected capacity change from 0 to 2048
[  125.732589][ T5935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.847899][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.860321][ T5944] netlink: 184 bytes leftover after parsing attributes in process `syz.1.679'.
[  125.893786][ T5944] lo speed is unknown, defaulting to 1000
[  125.909146][ T5946] lo speed is unknown, defaulting to 1000
[  125.931286][ T5947] loop1: detected capacity change from 0 to 1024
[  125.938800][ T5947] EXT4-fs: Ignoring removed orlov option
[  125.944671][ T5947] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.972854][ T5947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.019969][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.076994][ T5954] loop1: detected capacity change from 0 to 512
[  126.086606][ T5954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.107069][ T5956] syzkaller0: entered promiscuous mode
[  126.112895][ T5956] syzkaller0: entered allmulticast mode
[  126.129149][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.149290][ T5956] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.171039][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.219798][ T5961] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  126.241201][ T5956] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.251899][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.284092][ T5963] loop0: detected capacity change from 0 to 128
[  126.325367][ T5956] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.341394][ T5966] loop4: detected capacity change from 0 to 128
[  126.409456][ T5956] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.452922][   T29] kauditd_printk_skb: 596 callbacks suppressed
[  126.452940][   T29] audit: type=1326 audit(130.244:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.505542][ T5966] syz.4.673: attempt to access beyond end of device
[  126.505542][ T5966] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  126.527312][   T29] audit: type=1326 audit(130.244:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.550185][   T29] audit: type=1326 audit(130.244:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.552113][ T5956] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.573063][   T29] audit: type=1326 audit(130.244:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.573107][   T29] audit: type=1326 audit(130.244:18478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.627183][   T29] audit: type=1326 audit(130.255:18479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.650043][   T29] audit: type=1326 audit(130.255:18480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.660597][ T5956] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.672960][   T29] audit: type=1326 audit(130.255:18481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.704176][   T29] audit: type=1326 audit(130.255:18482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.712597][ T5956] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.727004][   T29] audit: type=1326 audit(130.255:18483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  126.840252][ T5956] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.937309][ T5973] loop3: detected capacity change from 0 to 8192
[  126.956178][ T5973] netlink: 'syz.3.677': attribute type 8 has an invalid length.
[  127.592537][ T5986] xt_hashlimit: max too large, truncated to 1048576
[  127.679112][ T5986] loop0: detected capacity change from 0 to 2048
[  127.717296][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.738895][ T5995] loop1: detected capacity change from 0 to 8192
[  127.769238][ T5995] netlink: 'syz.1.683': attribute type 8 has an invalid length.
[  127.916571][ T5990] loop4: detected capacity change from 0 to 2048
[  127.969597][ T3299] Alternate GPT is invalid, using primary GPT.
[  127.975968][ T3299]  loop4: p1 p2 p3
[  127.981359][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.433294][ T5990] Alternate GPT is invalid, using primary GPT.
[  128.445524][ T5990]  loop4: p1 p2 p3
[  128.552865][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  128.553328][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  128.574349][ T3542] udevd[3542]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  128.593799][ T6017] $Hÿ: (slave dummy0): Releasing backup interface
[  128.604782][ T6014] loop4: detected capacity change from 0 to 128
[  128.643237][ T6018] loop1: detected capacity change from 0 to 8192
[  128.668961][ T6018] netlink: 'syz.1.687': attribute type 8 has an invalid length.
[  128.677478][ T6011] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[  128.709064][ T3542] udevd[3542]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  128.709287][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  128.720551][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  129.416835][ T6025] vti0: entered promiscuous mode
[  129.640617][ T6031] loop3: detected capacity change from 0 to 1024
[  130.181738][ T6031] lo speed is unknown, defaulting to 1000
[  132.078892][ T6048] lo speed is unknown, defaulting to 1000
[  132.304305][   T29] kauditd_printk_skb: 366 callbacks suppressed
[  132.304325][   T29] audit: type=1400 audit(136.176:18850): avc:  denied  { append } for  pid=6049 comm="syz.1.694" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  132.351239][   T29] audit: type=1326 audit(136.438:18851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  132.354360][ T6050] loop1: detected capacity change from 0 to 512
[  132.374145][   T29] audit: type=1326 audit(136.438:18852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  132.403283][   T29] audit: type=1326 audit(136.438:18853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  132.426363][   T29] audit: type=1326 audit(136.438:18854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f316578e963 code=0x7ffc0000
[  132.514679][   T29] audit: type=1326 audit(136.438:18855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f316578d3df code=0x7ffc0000
[  132.537572][   T29] audit: type=1326 audit(136.438:18856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f316578e9b7 code=0x7ffc0000
[  132.560345][   T29] audit: type=1326 audit(136.438:18857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f316578d290 code=0x7ffc0000
[  132.583334][   T29] audit: type=1326 audit(136.438:18858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316578e52b code=0x7ffc0000
[  132.606063][   T29] audit: type=1326 audit(136.469:18859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f316578d58a code=0x7ffc0000
[  132.640395][ T6050] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  132.649401][ T6050] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.694: invalid indirect mapped block 2683928664 (level 1)
[  132.664491][ T6050] EXT4-fs (loop1): Remounting filesystem read-only
[  132.671928][ T6050] EXT4-fs (loop1): 1 truncate cleaned up
[  132.678235][ T6050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.734883][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.745663][ T6058] vhci_hcd: invalid port number 236
[  132.750987][ T6058] vhci_hcd: default hub control req: 0503 v0018 i00ec l0
[  132.917900][ T6063] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  133.071865][ T6067] xt_CT: No such helper "snmp_trap"
[  133.406024][ T3400] IPVS: starting estimator thread 0...
[  133.419748][ T6065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.438160][ T6065] tipc: Disabling bearer <eth:syzkaller0>
[  133.456025][ T6074] loop3: detected capacity change from 0 to 8192
[  133.477971][ T6074] netlink: 'syz.3.701': attribute type 8 has an invalid length.
[  133.504866][ T6075] IPVS: using max 1872 ests per chain, 93600 per kthread
[  133.554961][ T6078] netlink: 'syz.2.702': attribute type 10 has an invalid length.
[  133.568468][ T6078] team0 (unregistering): Port device team_slave_0 removed
[  133.585018][ T6078] team0 (unregistering): Port device team_slave_1 removed
[  133.607549][ T6080] loop1: detected capacity change from 0 to 1024
[  133.632387][ T6080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.652586][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'.
[  133.662474][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'.
[  133.714886][ T6080] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  133.716645][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  133.785454][ T6091] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  133.831933][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.842895][ T6093] loop4: detected capacity change from 0 to 8192
[  133.940511][ T6093] netlink: 'syz.4.708': attribute type 8 has an invalid length.
[  134.199339][ T6102] netlink: 'syz.0.711': attribute type 21 has an invalid length.
[  134.264725][ T6102] netlink: 'syz.0.711': attribute type 1 has an invalid length.
[  134.272450][ T6102] netlink: 144 bytes leftover after parsing attributes in process `syz.0.711'.
[  134.286899][ T6103] pim6reg: entered allmulticast mode
[  134.294067][ T6106] bond0: (slave dummy0): Releasing backup interface
[  134.301347][ T6106] dummy0: left promiscuous mode
[  134.306983][ T6106] bridge_slave_0: left allmulticast mode
[  134.313105][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.321004][ T6106] bridge_slave_1: left allmulticast mode
[  134.326898][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.337849][ T6106] bond0: (slave bond_slave_0): Releasing backup interface
[  134.347968][ T6106] bond0: (slave bond_slave_1): Releasing backup interface
[  134.357490][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.366442][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.376320][ T6102] pim6reg: left allmulticast mode
[  134.704312][ T6113] loop2: detected capacity change from 0 to 128
[  134.786556][ T6115] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  134.886666][ T6111] loop3: detected capacity change from 0 to 8192
[  135.030353][ T6111] netlink: 'syz.3.713': attribute type 8 has an invalid length.
[  135.327933][ T6113] bio_check_eod: 26 callbacks suppressed
[  135.327968][ T6113] syz.2.714: attempt to access beyond end of device
[  135.327968][ T6113] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  135.457366][ T6113] syz.2.714: attempt to access beyond end of device
[  135.457366][ T6113] loop2: rw=2049, sector=169, nr_sectors = 16 limit=128
[  135.471425][ T6113] syz.2.714: attempt to access beyond end of device
[  135.471425][ T6113] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  135.486204][ T6113] syz.2.714: attempt to access beyond end of device
[  135.486204][ T6113] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  135.518875][ T6113] syz.2.714: attempt to access beyond end of device
[  135.518875][ T6113] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  135.540286][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'.
[  135.550208][ T6113] syz.2.714: attempt to access beyond end of device
[  135.550208][ T6113] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  135.564291][ T6113] syz.2.714: attempt to access beyond end of device
[  135.564291][ T6113] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  135.594445][ T6113] syz.2.714: attempt to access beyond end of device
[  135.594445][ T6113] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  135.611494][ T6123] SELinux: failed to load policy
[  135.628974][ T6113] syz.2.714: attempt to access beyond end of device
[  135.628974][ T6113] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128
[  136.349543][ T6133] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  136.402787][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'.
[  136.414410][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'.
[  136.436656][ T6138] loop4: detected capacity change from 0 to 128
[  136.444251][ T6138] FAT-fs (loop4): Directory bread(block 162) failed
[  136.456146][ T6138] FAT-fs (loop4): Directory bread(block 163) failed
[  136.462931][ T6138] FAT-fs (loop4): Directory bread(block 164) failed
[  136.479794][ T6138] FAT-fs (loop4): Directory bread(block 165) failed
[  136.502326][ T6138] FAT-fs (loop4): Directory bread(block 166) failed
[  136.509078][ T6138] FAT-fs (loop4): Directory bread(block 167) failed
[  136.515814][ T6138] FAT-fs (loop4): Directory bread(block 168) failed
[  136.522608][ T6138] FAT-fs (loop4): Directory bread(block 169) failed
[  136.553912][ T6138] FAT-fs (loop4): Directory bread(block 162) failed
[  136.566463][ T6138] FAT-fs (loop4): Directory bread(block 163) failed
[  136.566874][ T6142] loop1: detected capacity change from 0 to 1024
[  136.579795][ T6141] loop3: detected capacity change from 0 to 8192
[  136.586868][ T6138] syz.4.722: attempt to access beyond end of device
[  136.586868][ T6138] loop4: rw=3, sector=226, nr_sectors = 6 limit=128
[  136.607374][ T6142] EXT4-fs: Ignoring removed orlov option
[  136.696045][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.875110][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.883794][ T6152] FAT-fs (loop3): Filesystem has been set read-only
[  136.890565][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.899323][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.908060][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.916924][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.925646][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.934536][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.943321][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.952106][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.960994][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.969767][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.978547][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.987354][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  136.996102][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.004839][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.013530][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.022260][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.031128][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.039817][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.048909][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.062939][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.071830][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.080699][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.089410][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.098225][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.106988][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.115794][ T6152] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  137.124797][   T29] kauditd_printk_skb: 628 callbacks suppressed
[  137.124816][   T29] audit: type=1326 audit(141.456:19488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  137.153840][   T29] audit: type=1326 audit(141.456:19489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  137.306485][   T29] audit: type=1326 audit(141.614:19490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  137.329311][   T29] audit: type=1326 audit(141.614:19491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  137.352174][   T29] audit: type=1326 audit(141.614:19492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  137.400181][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.458514][   T29] audit: type=1326 audit(141.802:19493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  137.486559][   T29] audit: type=1326 audit(141.823:19494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  137.509369][   T29] audit: type=1326 audit(141.823:19495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  137.532201][   T29] audit: type=1326 audit(141.823:19496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  137.555113][   T29] audit: type=1326 audit(141.823:19497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.2.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  137.585936][ T6156] loop4: detected capacity change from 0 to 512
[  137.593993][ T6164] loop2: detected capacity change from 0 to 512
[  137.614911][ T6156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.739624][ T6164] EXT4-fs (loop2): orphan cleanup on readonly fs
[  137.751174][ T6164] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.728: Failed to acquire dquot type 1
[  137.767342][ T6164] EXT4-fs (loop2): 1 truncate cleaned up
[  137.849666][ T6174] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.729' sets config #0
[  137.972837][ T6177] loop1: detected capacity change from 0 to 128
[  138.099023][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.106749][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.236080][ T6179] loop4: detected capacity change from 0 to 512
[  138.272834][ T6179] ext4: Unknown parameter 'mask'
[  138.333750][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.364541][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'.
[  138.419955][ T6183] x_tables: duplicate entry at hook 2
[  138.472974][ T6187] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  138.488347][ T6189] netlink: 'syz.0.732': attribute type 21 has an invalid length.
[  138.507841][ T6184] team0 (unregistering): Port device team_slave_0 removed
[  138.525377][ T6184] team0 (unregistering): Port device team_slave_1 removed
[  138.539202][ T6188] loop1: detected capacity change from 0 to 1024
[  138.550219][ T6188] EXT4-fs: Ignoring removed orlov option
[  138.603674][ T6174] Set syz1 is full, maxelem 65536 reached
[  138.614187][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.718141][ T6199] loop3: detected capacity change from 0 to 1024
[  138.740109][ T6199] EXT4-fs: Ignoring removed orlov option
[  138.762860][ T6199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.835388][ T6201] loop4: detected capacity change from 0 to 128
[  139.323765][ T6212] loop4: detected capacity change from 0 to 128
[  139.401878][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.561199][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.787430][ T6234] loop2: detected capacity change from 0 to 128
[  139.815761][ T6234] vfat: Unknown parameter ''
[  139.841162][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'.
[  139.875750][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'.
[  139.916179][ T6234] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.924552][ T6234] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.932831][ T6234] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.941053][ T6234] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.953256][ T6237] xt_TCPMSS: Only works on TCP SYN packets
[  139.967141][ T6234] vxlan0: entered promiscuous mode
[  140.095677][ T6241] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.749' sets config #0
[  140.108261][ T6243] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  141.343424][ T6254] lo speed is unknown, defaulting to 1000
[  141.389331][ T6251] lo speed is unknown, defaulting to 1000
[  141.458412][ T6241] Set syz1 is full, maxelem 65536 reached
[  141.739768][ T6262] loop1: detected capacity change from 0 to 8192
[  141.764612][ T6262] netlink: 'syz.1.755': attribute type 8 has an invalid length.
[  141.897845][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  141.897862][   T29] audit: type=1326 audit(146.464:19624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31657858e7 code=0x7ffc0000
[  142.075786][   T29] audit: type=1326 audit(146.495:19625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f316572ab19 code=0x7ffc0000
[  142.098663][   T29] audit: type=1326 audit(146.495:19626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31657858e7 code=0x7ffc0000
[  142.121431][   T29] audit: type=1326 audit(146.495:19627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f316572ab19 code=0x7ffc0000
[  142.144346][   T29] audit: type=1326 audit(146.495:19628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  142.167240][   T29] audit: type=1326 audit(146.506:19629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31657858e7 code=0x7ffc0000
[  142.190019][   T29] audit: type=1326 audit(146.506:19630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f316572ab19 code=0x7ffc0000
[  142.212773][   T29] audit: type=1326 audit(146.506:19631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  142.235557][   T29] audit: type=1326 audit(146.506:19632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31657858e7 code=0x7ffc0000
[  142.258623][   T29] audit: type=1326 audit(146.506:19633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f316572ab19 code=0x7ffc0000
[  142.269787][ T6267] loop4: detected capacity change from 0 to 1024
[  142.294867][ T6267] EXT4-fs: Ignoring removed orlov option
[  142.318154][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.713624][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.858053][ T6323] loop2: detected capacity change from 0 to 128
[  143.060662][ T6323] bio_check_eod: 28 callbacks suppressed
[  143.060714][ T6323] syz.2.766: attempt to access beyond end of device
[  143.060714][ T6323] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  143.096604][ T6329] xt_hashlimit: max too large, truncated to 1048576
[  143.109358][ T6323] syz.2.766: attempt to access beyond end of device
[  143.109358][ T6323] loop2: rw=2049, sector=169, nr_sectors = 16 limit=128
[  143.170347][ T6323] syz.2.766: attempt to access beyond end of device
[  143.170347][ T6323] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  143.185554][ T6323] syz.2.766: attempt to access beyond end of device
[  143.185554][ T6323] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  143.203637][ T6323] syz.2.766: attempt to access beyond end of device
[  143.203637][ T6323] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  143.220794][ T6323] syz.2.766: attempt to access beyond end of device
[  143.220794][ T6323] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  143.243979][ T6323] syz.2.766: attempt to access beyond end of device
[  143.243979][ T6323] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  143.260766][ T6323] syz.2.766: attempt to access beyond end of device
[  143.260766][ T6323] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  143.275777][ T6323] syz.2.766: attempt to access beyond end of device
[  143.275777][ T6323] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128
[  143.329184][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.768'.
[  143.338302][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[  143.394989][ T6334] loop2: detected capacity change from 0 to 512
[  143.402788][ T6334] journal_path: Lookup failure for './file0/../file0'
[  143.409672][ T6334] EXT4-fs: error: could not find journal device path
[  143.482490][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.769'.
[  143.491536][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'.
[  143.937883][ T6351] vhci_hcd: invalid port number 236
[  143.943228][ T6351] vhci_hcd: default hub control req: 0503 v0018 i00ec l0
[  144.109349][ T6352] netlink: 'syz.4.774': attribute type 4 has an invalid length.
[  144.293540][ T6357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'.
[  144.310176][ T6357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'.
[  144.643882][ T6370] xt_CT: No such helper "snmp_trap"
[  144.930601][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  144.990142][ T6385] loop3: detected capacity change from 0 to 1024
[  144.999282][ T6362] SELinux: failed to load policy
[  145.006594][ T6385] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  145.017696][ T6385] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  145.030358][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'.
[  145.046114][ T6385] JBD2: no valid journal superblock found
[  145.051984][ T6385] EXT4-fs (loop3): Could not load journal inode
[  145.088846][ T6385] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  145.137318][ T6393] xt_hashlimit: max too large, truncated to 1048576
[  145.220344][ T6402] loop2: detected capacity change from 0 to 512
[  145.233716][ T6402] EXT4-fs: Ignoring removed bh option
[  145.250732][ T6402] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  145.259900][ T6402] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  145.274631][ T6400] loop3: detected capacity change from 0 to 512
[  145.697440][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.697493][ T6402] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  145.744043][ T6402] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  145.757800][ T6402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.859687][ T6400] batman_adv: batadv0: Adding interface: dummy0
[  145.866019][ T6400] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.891410][ T6400] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  145.901387][ T6402] 9pnet: Could not find request transport: 0xffffffffffffffff
[  146.004940][ T6400] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[  146.036802][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.785'.
[  146.036851][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.045787][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'.
[  146.113208][ T6425] netlink: 'syz.0.786': attribute type 8 has an invalid length.
[  146.195406][ T6429] loop2: detected capacity change from 0 to 512
[  146.221999][ T6429] ext4: Unknown parameter 'mask'
[  146.258932][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'.
[  146.314877][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.329015][ T6439] loop4: detected capacity change from 0 to 512
[  146.332846][ T6431] infiniband syz!: set down
[  146.339928][ T6431] infiniband syz!: added team_slave_0
[  146.375865][ T6431] RDS/IB: syz!: added
[  146.379999][ T6431] smc: adding ib device syz! with port count 1
[  146.386501][ T6439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.408347][ T6431] smc:    ib device syz! port 1 has pnetid 
[  146.415128][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.790'.
[  146.420898][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'.
[  146.426453][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.790'.
[  146.471150][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'.
[  146.483973][ T6449] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  146.575961][ T6456] loop3: detected capacity change from 0 to 1024
[  146.616022][ T6456] EXT4-fs: Ignoring removed orlov option
[  146.674502][   T29] kauditd_printk_skb: 368 callbacks suppressed
[  146.674520][   T29] audit: type=1326 audit(151.471:20002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01b45158e7 code=0x7ffc0000
[  146.747404][ T6456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.764446][ T6457] xt_CT: No such helper "snmp_trap"
[  146.789648][   T29] audit: type=1326 audit(151.513:20003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01b44bab19 code=0x7ffc0000
[  146.812555][   T29] audit: type=1326 audit(151.513:20004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01b45158e7 code=0x7ffc0000
[  146.835393][   T29] audit: type=1326 audit(151.513:20005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01b44bab19 code=0x7ffc0000
[  146.858171][   T29] audit: type=1326 audit(151.513:20006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  146.881281][   T29] audit: type=1326 audit(151.524:20007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01b45158e7 code=0x7ffc0000
[  146.904036][   T29] audit: type=1326 audit(151.524:20008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01b44bab19 code=0x7ffc0000
[  146.926922][   T29] audit: type=1326 audit(151.524:20009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  146.949717][   T29] audit: type=1326 audit(151.524:20010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01b45158e7 code=0x7ffc0000
[  146.972602][   T29] audit: type=1326 audit(151.524:20011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01b44bab19 code=0x7ffc0000
[  147.033906][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.795'.
[  147.053193][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.197742][ T6473] loop4: detected capacity change from 0 to 8192
[  147.265253][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.319869][ T6478] loop3: detected capacity change from 0 to 256
[  147.353738][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.362419][ T6479] FAT-fs (loop4): Filesystem has been set read-only
[  147.369154][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.377822][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.386494][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.395156][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.403947][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.412614][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.421267][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.429947][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.438646][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.447344][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.456056][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.464821][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.473490][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.482214][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.490886][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.499588][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.508289][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.517086][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.525768][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.535899][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.544642][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.553349][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.562142][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.570871][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.579844][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.588685][ T6479] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[  147.649241][ T6490] loop2: detected capacity change from 0 to 512
[  147.663079][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.713770][ T6490] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[  147.838447][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.977445][ T6499] netlink: 'syz.1.806': attribute type 8 has an invalid length.
[  148.017410][ T6509] loop2: detected capacity change from 0 to 128
[  148.074753][ T6511] loop4: detected capacity change from 0 to 8192
[  148.113180][ T6511] netlink: 'syz.4.810': attribute type 8 has an invalid length.
[  148.213553][ T6509] syz.2.809: attempt to access beyond end of device
[  148.213553][ T6509] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  148.223403][ T6516] loop3: detected capacity change from 0 to 8192
[  148.232722][ T6509] syz.2.809: attempt to access beyond end of device
[  148.232722][ T6509] loop2: rw=2049, sector=169, nr_sectors = 16 limit=128
[  148.251904][ T6509] syz.2.809: attempt to access beyond end of device
[  148.251904][ T6509] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  148.252651][ T6516] netlink: 'syz.3.812': attribute type 3 has an invalid length.
[  148.268837][ T6509] syz.2.809: attempt to access beyond end of device
[  148.268837][ T6509] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  148.292682][ T6509] syz.2.809: attempt to access beyond end of device
[  148.292682][ T6509] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  148.309249][ T6509] syz.2.809: attempt to access beyond end of device
[  148.309249][ T6509] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  148.326676][ T6509] syz.2.809: attempt to access beyond end of device
[  148.326676][ T6509] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  148.344240][ T6509] syz.2.809: attempt to access beyond end of device
[  148.344240][ T6509] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  148.360407][ T6509] syz.2.809: attempt to access beyond end of device
[  148.360407][ T6509] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128
[  149.002808][ T6525] loop3: detected capacity change from 0 to 8192
[  149.076912][ T6525] netlink: 'syz.3.816': attribute type 8 has an invalid length.
[  149.182601][ T6541] loop4: detected capacity change from 0 to 512
[  149.195930][ T6541] journal_path: Lookup failure for './file0/../file0'
[  149.203148][ T6541] EXT4-fs: error: could not find journal device path
[  149.338710][ T6558] xt_hashlimit: max too large, truncated to 1048576
[  149.367056][ T6558] loop4: detected capacity change from 0 to 2048
[  149.396159][ T6558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.082071][ T6567] loop3: detected capacity change from 0 to 8192
[  150.105583][ T6567] netlink: 'syz.3.829': attribute type 8 has an invalid length.
[  150.154210][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.256239][ T6578] loop4: detected capacity change from 0 to 128
[  150.267378][ T6580] __nla_validate_parse: 12 callbacks suppressed
[  150.267396][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'.
[  150.282667][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'.
[  150.372064][ T6589] loop3: detected capacity change from 0 to 128
[  150.388681][ T6589] vfat: Unknown parameter 'ceph'
[  150.407810][ T6583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6583 comm=syz.1.835
[  150.439843][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'.
[  150.492242][ T6578] syz.4.833: attempt to access beyond end of device
[  150.492242][ T6578] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  150.645761][ T6617] xt_hashlimit: max too large, truncated to 1048576
[  150.707810][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'.
[  150.745630][ T6617] loop2: detected capacity change from 0 to 2048
[  150.912459][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'.
[  150.921492][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  151.014585][ T6617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.076915][ T6624] loop4: detected capacity change from 0 to 512
[  151.119989][ T6624] journal_path: Lookup failure for './file0/../file0'
[  151.126933][ T6624] EXT4-fs: error: could not find journal device path
[  151.437124][ T6653] loop4: detected capacity change from 0 to 512
[  151.742714][ T6653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.807476][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.439322][ T6664] syzkaller0: entered promiscuous mode
[  152.444996][ T6664] syzkaller0: entered allmulticast mode
[  152.550238][   T29] kauditd_printk_skb: 1209 callbacks suppressed
[  152.550255][   T29] audit: type=1326 audit(157.644:21221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.581852][ T6668] bridge_slave_0: left promiscuous mode
[  152.587609][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.626076][ T6668] bridge_slave_1: left allmulticast mode
[  152.631975][ T6668] bridge_slave_1: left promiscuous mode
[  152.637719][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.649754][   T29] audit: type=1326 audit(157.675:21222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.672752][   T29] audit: type=1326 audit(157.675:21223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.695656][   T29] audit: type=1326 audit(157.675:21224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.718549][   T29] audit: type=1326 audit(157.696:21225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.741349][   T29] audit: type=1326 audit(157.696:21226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.764189][   T29] audit: type=1326 audit(157.696:21227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.787058][   T29] audit: type=1326 audit(157.696:21228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.809870][   T29] audit: type=1326 audit(157.696:21229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.832916][   T29] audit: type=1326 audit(157.696:21230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  152.850149][ T6662] loop3: detected capacity change from 0 to 8192
[  152.868013][ T6667] netlink: 'syz.1.851': attribute type 8 has an invalid length.
[  152.892861][ T6662] netlink: 'syz.3.848': attribute type 8 has an invalid length.
[  153.776968][ T6668] $Hÿ: (slave bond_slave_0): Releasing backup interface
[  153.785086][ T6668] bond_slave_0: left promiscuous mode
[  153.794445][ T6668] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  153.803286][ T6668] bond_slave_1: left promiscuous mode
[  153.817381][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.877468][ T6680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'.
[  153.886557][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'.
[  153.941014][ T6677] loop2: detected capacity change from 0 to 8192
[  153.961094][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'.
[  153.977223][ T6679] loop4: detected capacity change from 0 to 128
[  153.978904][ T6677] netlink: 'syz.2.853': attribute type 8 has an invalid length.
[  153.989226][ T6684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.855'.
[  154.088366][ T6682] netlink: 'syz.0.856': attribute type 8 has an invalid length.
[  154.165216][ T6679] bio_check_eod: 8 callbacks suppressed
[  154.165358][ T6679] syz.4.852: attempt to access beyond end of device
[  154.165358][ T6679] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  154.188147][ T6679] syz.4.852: attempt to access beyond end of device
[  154.188147][ T6679] loop4: rw=2049, sector=169, nr_sectors = 16 limit=128
[  154.203972][ T6679] syz.4.852: attempt to access beyond end of device
[  154.203972][ T6679] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[  154.219329][ T6679] syz.4.852: attempt to access beyond end of device
[  154.219329][ T6679] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[  154.235845][ T6679] syz.4.852: attempt to access beyond end of device
[  154.235845][ T6679] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[  154.254045][ T6679] syz.4.852: attempt to access beyond end of device
[  154.254045][ T6679] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[  154.271703][ T6679] syz.4.852: attempt to access beyond end of device
[  154.271703][ T6679] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[  154.292430][ T6697] loop3: detected capacity change from 0 to 512
[  154.299408][ T6679] syz.4.852: attempt to access beyond end of device
[  154.299408][ T6679] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[  154.303413][ T6697] journal_path: Lookup failure for './file0/../file0'
[  154.317859][ T6679] syz.4.852: attempt to access beyond end of device
[  154.317859][ T6679] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128
[  154.320327][ T6697] EXT4-fs: error: could not find journal device path
[  154.443219][ T6709] loop3: detected capacity change from 0 to 128
[  154.529270][ T6711] loop4: detected capacity change from 0 to 1024
[  154.536625][ T6711] EXT4-fs: Ignoring removed i_version option
[  154.554070][ T6711] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  154.600118][ T6711] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.862: Invalid block bitmap block 0 in block_group 0
[  154.614472][ T6711] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.862: Failed to acquire dquot type 0
[  154.636079][ T6711] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.862: Freeing blocks not in datazone - block = 0, count = 4096
[  154.666529][ T6711] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.862: Invalid inode bitmap blk 0 in block_group 0
[  154.680951][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0
[  154.694666][ T6711] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  154.703731][ T6711] EXT4-fs (loop4): 1 orphan inode deleted
[  154.710917][ T6711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.793310][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.802008][ T6711] batman_adv: batadv0: Interface activated: dummy0
[  154.808635][ T6711] batadv0: mtu less than device minimum
[  154.814713][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.825437][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.836372][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.847070][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.857733][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.868512][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.879415][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.890236][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.901184][ T6711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.545912][ T6709] netlink: 'syz.3.863': attribute type 39 has an invalid length.
[  155.626487][ T6720] netlink: 'syz.1.865': attribute type 8 has an invalid length.
[  155.709704][ T6725] loop3: detected capacity change from 0 to 128
[  155.802700][ T6725] syz.3.867: attempt to access beyond end of device
[  155.802700][ T6725] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[  155.910579][ T6730] __nla_validate_parse: 4 callbacks suppressed
[  155.910622][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.869'.
[  155.925858][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'.
[  156.026938][ T6739] loop3: detected capacity change from 0 to 1024
[  156.046765][ T6739] EXT4-fs: Ignoring removed orlov option
[  156.099584][ T6739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.138353][    T9] IPVS: starting estimator thread 0...
[  156.161327][ T6732] tipc: Started in network mode
[  156.166328][ T6732] tipc: Node identity a22e8d8c5097, cluster identity 4711
[  156.173509][ T6732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.183187][ T6745] xt_hashlimit: max too large, truncated to 1048576
[  156.210534][ T6738] tipc: Disabling bearer <eth:syzkaller0>
[  156.221678][ T6743] IPVS: using max 1968 ests per chain, 98400 per kthread
[  156.701401][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.813566][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.018152][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'.
[  157.027154][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  157.157305][ T6772] loop4: detected capacity change from 0 to 512
[  157.217176][ T6772] journal_path: Lookup failure for './file0/../file0'
[  157.224261][ T6772] EXT4-fs: error: could not find journal device path
[  157.555991][ T3951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  157.659294][   T29] kauditd_printk_skb: 553 callbacks suppressed
[  157.659312][   T29] audit: type=1400 audit(162.998:21781): avc:  denied  { getopt } for  pid=6776 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.694914][ T6777] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  157.710029][ T6777] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0
[  157.718026][   T29] audit: type=1326 audit(163.040:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.740926][   T29] audit: type=1326 audit(163.040:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.749628][ T6779] netlink: 'syz.1.881': attribute type 8 has an invalid length.
[  157.763876][   T29] audit: type=1326 audit(163.040:21784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.794400][   T29] audit: type=1326 audit(163.040:21785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.817399][   T29] audit: type=1326 audit(163.040:21786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.840231][   T29] audit: type=1326 audit(163.040:21787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.863092][   T29] audit: type=1326 audit(163.040:21788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.885902][   T29] audit: type=1326 audit(163.040:21789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  157.886011][ T6783] loop4: detected capacity change from 0 to 128
[  157.908830][   T29] audit: type=1326 audit(163.040:21790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  158.003634][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  158.065723][ T6788] smc: net device bond0 applied user defined pnetid SYZ2
[  158.079105][ T6788] smc: net device bond0 erased user defined pnetid SYZ2
[  158.129953][ T6793] loop4: detected capacity change from 0 to 1024
[  158.144029][ T6793] EXT4-fs: Ignoring removed orlov option
[  158.159262][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.166620][   T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.217260][ T6796] netlink: 'syz.0.887': attribute type 8 has an invalid length.
[  158.420309][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.520180][ T6801] loop4: detected capacity change from 0 to 8192
[  158.544126][ T6801] netlink: 'syz.4.888': attribute type 8 has an invalid length.
[  158.554614][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'.
[  158.605242][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  158.645785][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.891'.
[  158.686752][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'.
[  158.695733][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'.
[  158.942469][ T6825] loop3: detected capacity change from 0 to 128
[  159.052319][ T6825] bio_check_eod: 17 callbacks suppressed
[  159.052363][ T6825] syz.3.896: attempt to access beyond end of device
[  159.052363][ T6825] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[  159.080600][ T6825] syz.3.896: attempt to access beyond end of device
[  159.080600][ T6825] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128
[  159.096687][ T6825] syz.3.896: attempt to access beyond end of device
[  159.096687][ T6825] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128
[  159.111728][ T6825] syz.3.896: attempt to access beyond end of device
[  159.111728][ T6825] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[  159.129327][ T6825] syz.3.896: attempt to access beyond end of device
[  159.129327][ T6825] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[  159.144640][ T6825] syz.3.896: attempt to access beyond end of device
[  159.144640][ T6825] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[  159.162811][ T6825] syz.3.896: attempt to access beyond end of device
[  159.162811][ T6825] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[  159.179334][ T6825] syz.3.896: attempt to access beyond end of device
[  159.179334][ T6825] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[  159.195244][ T6825] syz.3.896: attempt to access beyond end of device
[  159.195244][ T6825] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128
[  159.213637][ T6836] syzkaller0: entered promiscuous mode
[  159.219331][ T6836] syzkaller0: entered allmulticast mode
[  159.335536][ T6841] loop4: detected capacity change from 0 to 8192
[  159.360380][ T6841] netlink: 'syz.4.901': attribute type 8 has an invalid length.
[  160.595175][ T6860] loop3: detected capacity change from 0 to 8192
[  160.602784][ T6866] deleting an unspecified loop device is not supported.
[  160.641069][ T6860] netlink: 'syz.3.907': attribute type 8 has an invalid length.
[  160.757057][ T6870] netlink: 'syz.1.911': attribute type 8 has an invalid length.
[  161.229948][ T6875] netlink: 'syz.2.912': attribute type 8 has an invalid length.
[  161.394623][ T6877] loop3: detected capacity change from 0 to 8192
[  161.409162][ T6877] netlink: 'syz.3.913': attribute type 8 has an invalid length.
[  161.531454][ T6884] loop4: detected capacity change from 0 to 8192
[  161.549622][ T6884] netlink: 'syz.4.915': attribute type 8 has an invalid length.
[  161.607026][ T6888] netlink: 'syz.1.917': attribute type 8 has an invalid length.
[  162.084800][ T6895] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  162.991427][   T29] kauditd_printk_skb: 2592 callbacks suppressed
[  162.991442][   T29] audit: type=1400 audit(168.604:24383): avc:  denied  { getopt } for  pid=6904 comm="syz.0.924" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  163.202185][ T3951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  163.285429][   T29] audit: type=1326 audit(168.898:24384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  163.291233][ T6909] netlink: 'syz.2.926': attribute type 8 has an invalid length.
[  163.308321][   T29] audit: type=1326 audit(168.898:24385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  163.338861][   T29] audit: type=1326 audit(168.908:24386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  163.361712][   T29] audit: type=1326 audit(168.908:24387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  163.384878][   T29] audit: type=1326 audit(168.908:24388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x7ffc0000
[  163.408958][   T29] audit: type=1326 audit(168.908:24389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  163.431924][   T29] audit: type=1326 audit(168.908:24390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  163.436509][ T6916] loop4: detected capacity change from 0 to 8192
[  163.454751][   T29] audit: type=1326 audit(168.908:24391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  163.484052][   T29] audit: type=1326 audit(168.908:24392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  163.518560][ T6916] netlink: 'syz.4.929': attribute type 8 has an invalid length.
[  163.652082][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.156720][ T6931] syzkaller0: entered promiscuous mode
[  164.162280][ T6931] syzkaller0: entered allmulticast mode
[  164.204839][ T6934] loop3: detected capacity change from 0 to 8192
[  164.222785][ T6934] netlink: 'syz.3.933': attribute type 8 has an invalid length.
[  164.442096][ T6940] syz.2.931 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  165.857216][ T6949] netlink: 'syz.0.936': attribute type 8 has an invalid length.
[  165.955119][ T6954] netlink: 'syz.1.938': attribute type 8 has an invalid length.
[  166.618101][ T6960] loop4: detected capacity change from 0 to 8192
[  166.647795][ T6962] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  166.653117][ T6960] netlink: 'syz.4.941': attribute type 8 has an invalid length.
[  166.663524][ T6964] __nla_validate_parse: 5 callbacks suppressed
[  166.663538][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.943'.
[  166.678756][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'.
[  166.908931][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'.
[  166.918028][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'.
[  166.956661][ T6980] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  167.227535][ T6988] netlink: 'syz.2.949': attribute type 8 has an invalid length.
[  167.315796][ T6996] ALSA: seq fatal error: cannot create timer (-19)
[  167.401008][ T7001] loop4: detected capacity change from 0 to 8192
[  167.406988][ T6999] netlink: 'syz.0.953': attribute type 8 has an invalid length.
[  167.418893][ T7001] netlink: 'syz.4.954': attribute type 8 has an invalid length.
[  167.757268][   T29] kauditd_printk_skb: 1989 callbacks suppressed
[  167.757285][   T29] audit: type=1326 audit(173.611:26382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01b45158e7 code=0x7ffc0000
[  167.786537][   T29] audit: type=1326 audit(173.611:26383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01b44bab19 code=0x7ffc0000
[  167.809263][   T29] audit: type=1326 audit(173.611:26384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f01b451e929 code=0x7ffc0000
[  167.832161][   T29] audit: type=1326 audit(173.611:26385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31657858e7 code=0x7ffc0000
[  167.854899][   T29] audit: type=1326 audit(173.611:26386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f316572ab19 code=0x7ffc0000
[  167.877823][   T29] audit: type=1326 audit(173.611:26387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f316578e929 code=0x7ffc0000
[  167.900499][   T29] audit: type=1326 audit(173.611:26388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ce47958e7 code=0x7ffc0000
[  167.923438][   T29] audit: type=1326 audit(173.611:26389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ce473ab19 code=0x7ffc0000
[  167.946227][   T29] audit: type=1326 audit(173.611:26390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5ce479e929 code=0x7ffc0000
[  167.969043][   T29] audit: type=1326 audit(173.611:26391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.3.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f00aae929 code=0x0
[  168.089766][ T7008] netlink: 'syz.1.957': attribute type 8 has an invalid length.
[  168.101163][ T7010] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  168.236072][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.960'.
[  168.239609][ T7012] netlink: 'syz.0.959': attribute type 8 has an invalid length.
[  168.245106][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'.
[  168.252831][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'.
[  168.313303][ T7018] loop4: detected capacity change from 0 to 512
[  168.320329][ T7018] journal_path: Lookup failure for './file0/../file0'
[  168.327195][ T7018] EXT4-fs: error: could not find journal device path
[  168.410197][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'.
[  168.419198][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'.
[  168.486340][ T7025] loop4: detected capacity change from 0 to 512
[  168.493560][ T7025] journal_path: Lookup failure for './file0/../file0'
[  168.500557][ T7025] EXT4-fs: error: could not find journal device path
[  168.522224][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'.
[  168.530912][ T3468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.531640][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.596363][ T7032] loop3: detected capacity change from 0 to 512
[  168.607282][ T7032] EXT4-fs: journaled quota format not specified
[  168.653132][ T7038] SELinux:  Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped).
[  168.782439][ T7049] loop4: detected capacity change from 0 to 128
[  168.825226][ T7047] loop3: detected capacity change from 0 to 8192
[  168.859142][ T7053] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  168.885149][ T7047] netlink: 'syz.3.972': attribute type 8 has an invalid length.
[  168.965905][ T7049] syz.4.971: attempt to access beyond end of device
[  168.965905][ T7049] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  168.990898][ T7049] syz.4.971: attempt to access beyond end of device
[  168.990898][ T7049] loop4: rw=2049, sector=169, nr_sectors = 16 limit=128
[  169.008095][ T7049] syz.4.971: attempt to access beyond end of device
[  169.008095][ T7049] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[  169.024258][ T7049] syz.4.971: attempt to access beyond end of device
[  169.024258][ T7049] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[  169.040665][ T7058] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  169.041401][ T7049] syz.4.971: attempt to access beyond end of device
[  169.041401][ T7049] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[  169.066446][ T7049] syz.4.971: attempt to access beyond end of device
[  169.066446][ T7049] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[  169.082657][ T7049] syz.4.971: attempt to access beyond end of device
[  169.082657][ T7049] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[  169.098741][ T7049] syz.4.971: attempt to access beyond end of device
[  169.098741][ T7049] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[  169.115296][ T7049] syz.4.971: attempt to access beyond end of device
[  169.115296][ T7049] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128
[  169.237565][ T7062] loop4: detected capacity change from 0 to 512
[  169.254667][ T7062] journal_path: Lookup failure for './file0/../file0'
[  169.261517][ T7062] EXT4-fs: error: could not find journal device path
[  169.365110][ T7067] loop4: detected capacity change from 0 to 512
[  169.378615][ T7067] journal_path: Lookup failure for './file0/../file0'
[  169.385499][ T7067] EXT4-fs: error: could not find journal device path
[  169.665452][ T7087] lo speed is unknown, defaulting to 1000
[  170.050037][ T7089] netlink: 'syz.2.985': attribute type 8 has an invalid length.
[  170.126027][ T7095] netlink: 'syz.0.986': attribute type 8 has an invalid length.
[  170.328720][ T7107] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  170.591638][ T7121] loop4: detected capacity change from 0 to 512
[  170.610987][ T7121] journal_path: Lookup failure for './file0/../file0'
[  170.618043][ T7121] EXT4-fs: error: could not find journal device path
[  171.162723][ T7131] lo speed is unknown, defaulting to 1000
[  171.220232][ T7137] loop3: detected capacity change from 0 to 8192
[  171.268312][ T7137] netlink: 'syz.3.998': attribute type 8 has an invalid length.
[  171.295890][ T7139] loop4: detected capacity change from 0 to 128
[  171.573616][ T7147] lo speed is unknown, defaulting to 1000
[  171.789200][ T7150] __nla_validate_parse: 17 callbacks suppressed
[  171.789290][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'.
[  171.804697][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'.
[  171.973149][ T7152] syz.4.999: attempt to access beyond end of device
[  171.973149][ T7152] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  172.132746][ T7157] loop4: detected capacity change from 0 to 128
[  172.373632][ T7160] loop3: detected capacity change from 0 to 8192
[  172.381456][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1005'.
[  172.390525][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'.
[  172.429410][ T7160] netlink: 'syz.3.1004': attribute type 8 has an invalid length.
[  172.517175][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'.
[  172.526295][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'.
[  172.605529][ T7168] loop4: detected capacity change from 0 to 512
[  172.640070][ T7168] journal_path: Lookup failure for './file0/../file0'
[  172.646992][ T7168] EXT4-fs: error: could not find journal device path
[  172.658737][   T29] kauditd_printk_skb: 1153 callbacks suppressed
[  172.658754][   T29] audit: type=1400 audit(631.752:27545): avc:  denied  { append } for  pid=7172 comm="syz.2.1007" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  172.906561][ T7178] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  173.458503][ T7184] xt_hashlimit: max too large, truncated to 1048576
[  174.020977][   T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.032139][ T3951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.454326][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1015'.
[  174.463484][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'.
[  174.488143][ T3299] ==================================================================
[  174.496284][ T3299] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod
[  174.503274][ T3299] 
[  174.505666][ T3299] write to 0xffff8881040fc9ac of 4 bytes by task 3292 on cpu 0:
[  174.513330][ T3299]  shmem_mknod+0x137/0x180
[  174.517786][ T3299]  shmem_create+0x34/0x50
[  174.522138][ T3299]  path_openat+0x1105/0x2170
[  174.526758][ T3299]  do_filp_open+0x109/0x230
[  174.531293][ T3299]  do_sys_openat2+0xa6/0x110
[  174.535919][ T3299]  __x64_sys_openat+0xf2/0x120
[  174.540725][ T3299]  x64_sys_call+0x1af/0x2fb0
[  174.545357][ T3299]  do_syscall_64+0xd2/0x200
[  174.549882][ T3299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.555809][ T3299] 
[  174.558159][ T3299] read to 0xffff8881040fc9ac of 4 bytes by task 3299 on cpu 1:
[  174.565751][ T3299]  fill_mg_cmtime+0x5b/0x260
[  174.570375][ T3299]  generic_fillattr+0x24a/0x340
[  174.575286][ T3299]  shmem_getattr+0x181/0x200
[  174.579902][ T3299]  vfs_getattr_nosec+0x146/0x1e0
[  174.584868][ T3299]  vfs_statx+0x113/0x390
[  174.589129][ T3299]  vfs_fstatat+0x115/0x170
[  174.593567][ T3299]  __se_sys_newfstatat+0x55/0x260
[  174.598618][ T3299]  __x64_sys_newfstatat+0x55/0x70
[  174.603666][ T3299]  x64_sys_call+0x2c22/0x2fb0
[  174.608363][ T3299]  do_syscall_64+0xd2/0x200
[  174.612971][ T3299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.618898][ T3299] 
[  174.621244][ T3299] value changed: 0x289c8fc3 -> 0x28a4793d
[  174.626975][ T3299] 
[  174.629310][ T3299] Reported by Kernel Concurrency Sanitizer on:
[  174.635470][ T3299] CPU: 1 UID: 0 PID: 3299 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) 
[  174.647468][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.657559][ T3299] ==================================================================
[  174.673551][ T7208] IPVS: Error connecting to the multicast addr
[  174.708801][   T29] audit: type=1400 audit(633.882:27546): avc:  denied  { read } for  pid=7207 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  174.741852][ T7203] loop4: detected capacity change from 0 to 8192
[  174.748409][   T29] audit: type=1326 audit(633.924:27547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.771449][   T29] audit: type=1326 audit(633.935:27548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.794397][   T29] audit: type=1326 audit(633.935:27549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.810275][ T7203] netlink: 'syz.4.1016': attribute type 8 has an invalid length.
[  174.817356][   T29] audit: type=1326 audit(633.935:27550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.848168][   T29] audit: type=1326 audit(633.935:27551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.871352][   T29] audit: type=1326 audit(633.935:27552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.894415][   T29] audit: type=1326 audit(633.935:27553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  174.917336][   T29] audit: type=1326 audit(633.935:27554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ea88e929 code=0x7ffc0000
[  179.517297][ T3951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.517481][   T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration