last executing test programs:

48.372295772s ago: executing program 2 (id=571):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708f9ff060000007b8a78ff00000000bfa200000000000007020000f8ffffedb703000008000000b704000059729ec6850000005e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340))
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])
io_destroy(r3)
fallocate(r2, 0x11, 0x8, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2)

48.176682115s ago: executing program 2 (id=576):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=<r5=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000100))
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0x17, 0x1e7, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c001000000762256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000a74d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed31d0153dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575000000003f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})
sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000)
fallocate(r0, 0x1, 0xd9b, 0x1000f4)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x5, 0xc, &(0x7f0000001540)=ANY=[@ANYRES16=r8, @ANYBLOB="08564fdca295607c3de72b22dcd586de2bf8d1afd330db8d93faaa0138ba30774836ac0b44ddfeeecea7f0b8d7dff6228aeafcb8eadbc772ac7858a58d498ba8f3dd610b8554e6fb059ad9e77876fce73bb125ee621190359d432ea68c8b9c8dae792f10a7ad4cbb49457bd06cf2632d96882d82b9805b7778d57fb1119839e3acf5351ef51dbd", @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=r5, @ANYBLOB="e9e4a8dc2d2a92dbdbc2a7ed7fba3c9edece79911509c873deaed69dc4aec5b6cd0fa8dc7a8f30c0ac1ad1a4b3ad2ea09248b23ae78d6506ec22b693fa5253ee8911996dca1d4285ca7f83fb7941c93ee277a899dc4d2742b3716671f3903169da2e6b969b739c0b52a256f56fc648abbd217fe8edd1d29f82e329699b7c6c7c96fb7fdc3baf6d5bfb0aa2438b382adf595b214085435040aa6cd8bdd466739249e42fe22cab64229f44d7dc5890443ee7c0c2703ff89a49a6383b44a650664e7f48712ead62b701a4290357464463d02fddee7ce5c0850f33efed73bb21ac306d005d4f08fc29d2d11d29216001f43688f03dc6ec"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000002c0)=r11, 0x4)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000250001002cbd7000fedbdf2508000000f390503eabc7985c0086f622202def3838d3446b2efbd1c2fed78d12997a09dc0a0daa2bbf9c549faa2fd439ef5b3f1e5223"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r13, 0x0, 0x4}, 0x18)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

48.134490986s ago: executing program 2 (id=577):
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x80002c, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="e05f9f4e110000", @ANYRESOCT=r0, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYRESDEC=r2])

48.094564317s ago: executing program 2 (id=578):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x200cc09, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x17, 0x4)
chroot(&(0x7f00000000c0)='./file0/../file0/file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')

47.630176116s ago: executing program 2 (id=580):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x53, 0x5, 0x7b, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2={0xff, 0x5}, 0x1, 0x8, 0x7d, 0x6}})
set_mempolicy(0x1, &(0x7f0000000040)=0x3798, 0x9) (async)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8)

47.629867716s ago: executing program 2 (id=581):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001040)=[{0x420, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r1, &(0x7f0000000040)="06", 0x1)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x68b, 0x4)
r3 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"a2e3ad0e090d07f9505e1a1887f70706d038e7fd7fc6e5539b203c0a8b089b3f32356c030890e0879b0af8c6e70a9b334a959b6696048ed30af3988f7ef31952013fffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8048001005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771a0000119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc18892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d5062c59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e842729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a898a33a6d88e7cfe0e0000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0)

47.621527456s ago: executing program 32 (id=581):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001040)=[{0x420, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r1, &(0x7f0000000040)="06", 0x1)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x68b, 0x4)
r3 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0)

33.141244304s ago: executing program 3 (id=752):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138)
write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

33.064125206s ago: executing program 3 (id=753):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10001})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1b, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

33.049372186s ago: executing program 3 (id=755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffff54}, 0x18)
close(0xffffffffffffffff)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x55d, &(0x7f0000000580)="$eJzs3V1v01YYwPHHpVWrTELTNiHUFTgUJhWpC04CQRFXnnOSnpHYke2g9maooimqCCDBJo3eoF6MbdqmfYbd7kNM+0Jo32Cd/BJI26QpfUvF/r8I7NjH5zzHsfzUbXwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALLdq2wVLGsZrL6vh3GrgN/dZ36vvxo7JPu2KWPE/mZmRi+mii5+9W30h/m9e5tJ3czITT2Zk86MLH9/9dHKit/0+AZ2KFy83H692u53n4w5kTOr6noS+aTp1rUzoq0q5bN9cqoWqZho6XAkj3VRuoJ3ID9SCe0MVKpWS0vkVv+3Vq05D9xbe+bJo22X1Qy79vL2bX+dDd8k0GsarJ2Xi1XGZO/GBeM9EKtJOU6n1jW6nNCy4rezwiAsVRvUkLlQcVahoF4uFQrFYKN+u3L5j25N7Fti7yJ4S4z9oMV7HefoGjmQiy//SECOetGVZ1MCXK1UJxJfmkPWZXv7/4qbet93+/N/L8hffrZ6VJP9fTt9dHpb/h8Ty3q/puPps/t/t7e0DbHP+8zS2l7Ipj2VVutKVjjw/roiO8dVzEnXXRYsnRkLxxUhTnGSJypYoqUhZymLLA1mSmoSipCZGGqIllBUJJRKdHFGuBKLFkV/El0CULIgrN0RJQSpSkZIo0ZKXFfGlLZ7UpSpOUsu6bCT7vbRf/3uFCgcpVNynEPkfR3dcp27gyLZ7+R8AAAAAAHywrOS37/H1/5RcSuZqpqHtcYcFAAAAAACOUfKX/7l4MhXPXRKL638AAAAAAD40VnKPnSUiObmSzvXuhOKXAAAAAAAAfCCSv/9fjifJ2GtXxDrQ9f/UqQUIAAAAAACO7KdhY+z/nSy1LAlb09Zf/0gQTFlbreXr1hMnXuE8OZdud253jVFt1jqfVZJMypPZO1fPWdnol28HwXyTTdb74rAGjfVr7Qrgm14NAwL4XQYHIL/K1bTM1bV0utZbk7aSq5mGzrt+425BHOf8RKSXo++ebnwvSfd/9pqTWRsPn3XXkli24ndbT7IBFPeMozh8Z8i3yXgLyT0XA0c3nkpuxMjazVmyvtHt2P0fwES6+cR7tPla5tMy89lI+7md/Z+J2yzkh/U+jWJaRJKeW4fs+Wu5lpa5tnAtnQyIojgiik6xtXx9O93/E3KofXGAKEqjoij1HwWHiAIAxmV9RBay9ib+Q5zl1kc9yWd3dj/MjxfyWhbSMguzyYl1cnbAGd0edUa3j5jX/9zzDKRhOTZu97e37RaSdv+I45ah7YaNoiUz6U7sWX3UedR5WiyWyvYt275dlKmkG9mE3AMAGGD0M3ZGlrBuJVfV8crBV9WfvP1KQV4eyjPpyposJncbJN84GFhrru9rCIsjrlpzfU94WRxxVZfre9DLwcuWTufDAADglMyPyMMHyf+LI667d+by/a+O+3M5AAA4GTp4Y+WiH60gMK0HhUql4ERLWgW+e08FplrXyniRDtwlx6tr1Qr8yHf9Rjxz31R1qMJ2q+UHkar5gWr5oVlOnvyuske/h7rpeJFxw1ZDO6FWru9Fjhupqgld1Wp/1TDhkg6SjcOWdk3NuE5kfE+FfjtwdV6pUOu+gqaqvcjUTDzrqVZgmk6wou77jXZTq6oO3cC0Ij+tsNeW8Wp+0EyqzY97ZwMAcEa8eLn5eLXb7Tw/wZlx9xEAAOxElgYAAAAAAAAAAAAAAAAAAAAA4Ow7jfv/splpOb22jhrq2Qjj/zrzSkSyJduvpP+w6Q06fWKtnxt338/MzJhPTABO3H8BAAD//6r3SWw=")
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000080)='./file1\x00', 0x424)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

32.960237918s ago: executing program 3 (id=757):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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")
r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
syz_io_uring_setup(0x10c, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0x281}, &(0x7f00000003c0), &(0x7f00000001c0)) (async)
r4 = syz_io_uring_setup(0x10c, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0x281}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000})
io_uring_enter(r4, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) (async)
memfd_create(&(0x7f0000000380)='kfree\x00', 0x3)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f00000001c0)) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f00000001c0))
socket(0x10, 0x3, 0x0) (async)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00000000010000000000", 0x1b)

32.635866164s ago: executing program 3 (id=758):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000040000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000020001000000000000f9ff000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)

31.633991133s ago: executing program 3 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f46000)
r2 = socket$inet6(0xa, 0x1, 0x4000000)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvfrom$inet6(r2, &(0x7f0000000240)=""/117, 0x75, 0x20040, 0x0, 0x0)

31.622504333s ago: executing program 33 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f46000)
r2 = socket$inet6(0xa, 0x1, 0x4000000)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvfrom$inet6(r2, &(0x7f0000000240)=""/117, 0x75, 0x20040, 0x0, 0x0)

3.201684279s ago: executing program 1 (id=1141):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0x4}, 0x8) (async, rerun: 64)
sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x6}, 0x1c) (async, rerun: 64)
setsockopt$sock_int(r5, 0x1, 0x12, 0x0, 0x0) (async)
r6 = accept4$inet6(r5, 0x0, 0x0, 0x800)
syncfs(r6) (async)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "4af388cb9dfbbfa7", "f01038dd276565b3824c8fc32a3b3f7380928f26077b3bcd6360a1c47e62e05d", '?!qV', "569fdc3210507935"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) (async)
sendto$inet6(r4, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})

3.091999641s ago: executing program 1 (id=1143):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x840)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0xcc, 0x7, 0x89})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000680)=@req3={0x3, 0xffffffff, 0xfffffffb, 0x0, 0x0, 0x7fffffff, 0x8}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x400246}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000006c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x7, 0x1})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRES64=r4, @ANYBLOB="a365dfa7"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000480)={r0, r0, 0x3b, 0x4a, &(0x7f00000001c0)="ed7c284d9933d30cb2bb0e38f9305084cdee507607e054bb5defce39aae749c2509b78012251f814836182f58fb57a6159a4934dba726a44ffb0fccbeedfe91b0e9745e88cfed28757c6", 0x6, 0x9, 0xd, 0x101, 0x8, 0x2, 0xfffffffd, 'syz0\x00'})
r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000040)=0x2)
readv(r13, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
io_uring_enter(r7, 0x4c6e, 0xe61, 0x8, 0x0, 0x0)
close(r0)

2.120111739s ago: executing program 1 (id=1155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1e460cdc5f987664, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

1.757436177s ago: executing program 4 (id=1157):
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x24, 0x17, [0x4, 0x6, 0x0, 0x6, 0x2, 0x6, 0x5, 0xc1e]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x48}}, 0x882)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4400, 0x1)
r2 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffff9)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc1}, 0x1, r2, '\x00', @auto=[0x40]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400001, 0x120)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r2, 0x74, 0x1000}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'streebog512-generic\x00'}}, &(0x7f0000000400)="7cec66ea66708ce704b9dc3d19aacea8fdb39f80b61bcfe45cec478c00889f5de1abf65a5be21590f172d5ddcd1f1f6082e11f41252feb57a38758c5906dd10605a6d36531b594cfe49aa102b99576d76e7c259068fec9af7e5338c7213e060a064451bf2e5cdf71a6fd867887b7fc5b1ba5e16c", &(0x7f0000000480)=""/4096)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001480)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001600)=@secondary)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000001640))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001680)={'wlan1\x00', <r4=>0x0})
getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f00000016c0)=""/227, 0xe3)
keyctl$revoke(0x3, r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000017c0)={'batadv0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001800)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe, 0x2, 0x3, 0x0, 0x6, 0x80000, r5})
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x728)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r0)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x30, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1800000, 0x11}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x58e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r8, 0x2cdb2429bc77987a, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001b40)={r2, 0x5, 0x4}, &(0x7f0000001b80)={'enc=', 'oaep', ' hash=', {'blake2s-224\x00'}}, &(0x7f0000001c00)="4760c81daf", &(0x7f0000001c40)=""/4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001c80)='xprtrdma_post_linv_err\x00', r3, 0x0, 0x6}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40090)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001e00)={'batadv_slave_0\x00'})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, r6, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)

1.544176881s ago: executing program 6 (id=1159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000040000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000020001000000000000f9ff000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)

1.500691432s ago: executing program 5 (id=1160):
syz_open_dev$usbfs(0x0, 0x76, 0x160341)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r0, 0x7fff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40885}, 0x42000)
close(0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

1.483131592s ago: executing program 6 (id=1161):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x12, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x1, 0x0, 0x80, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x0, 0x4, 0x3, 0x9, 0xffffffffffffffc0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000005c0)='GPL\x00', 0xc, 0xaa, &(0x7f0000001f80)=""/170, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002040)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002080)=[0xffffffffffffffff], &(0x7f00000020c0)=[{0x1, 0x4, 0x9, 0x7}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x6}, 0x94) (async)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {0x8, 0x4}, {0xffe0, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 32)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) (async, rerun: 32)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
r8 = syz_open_procfs(0x0, 0x0)
faccessat2(r8, &(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x1000) (async)
io_submit(r1, 0x4, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000002c0)="d47d1f83c6f10515f2a6771c6e60004200081869682f31b6f40f1e19f8fc2bf378f3417fc683a86ee5964dc3f5f5215c62e61c90e056b7739d8f70ed5d254ee20ce241b378b8dbb89b8b20b067d36a4b30a6b4511e91760381a2219bbfec9eb89c5c3b3d928283e0ca2eeb21be6f4dc130be31f7b9af0315cc20ff1259b62e6ff84564accea0821f84a8da7aa767f143928e5fadb24320cc3f08db600ff24d11eeb5efc9a8", 0xa5, 0xde, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000080)="76d1022caa6873376d", 0x9, 0x7, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x8ef, r7, &(0x7f0000000640)="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", 0x1000, 0x8, 0x0, 0x5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x8, r6, &(0x7f0000000380)="9533166d393c01225b947476763b2d74384dec8d8848c119a86177797424ef6e8393355860f1881c9abd1c1e0a5abf1d9039c6717c7df2a25dff7c71efee66b1316a42babaed743121a21643011d5a953a426375a22896a499a6e15d37777ab5930a26b455b5e7dcf34df02eff5f07229e42e907b40165d89fa25e6173c033d8845ccc410aeab7f8bc173587368a6b92352504465c58cd23c02987c6726ab93c64e88194da5a7fc111520464e4ba629f8eaffb72c97c72d34433bd56f20890633ed7fb435d4244dc4f11e68c2b02ef294823800e1ec8128c43dc5f1777d4dd15ce6cba5508415375cf2c", 0xea, 0x0, 0x0, 0x3, r8}])

1.382339994s ago: executing program 4 (id=1162):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095", @ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

1.311800035s ago: executing program 5 (id=1164):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000007fff0000ad5c000001000100000000003771195e58a452231c3024ff5bee"], &(0x7f00000001c0), 0x200) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async)
sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), 0x10ca, 0x0, 0x59}, 0x20008002)
openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800e6df55d682179cc1551fd16ae84c7c460000b4ae7dc7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
sigaltstack(0x0, 0x0) (async)
connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x31) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x10b4, 0x30, 0x100, 0x0, 0x0, {}, [{0x10a0, 0x1, [@m_pedit={0xf5c, 0xd, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x1, 0x6, 0x2, 0x8, 0x1}, 0x8, 0x6, [{0x3, 0x3, 0x3, 0xa6, 0x100, 0xfffffffc}, {0x8001, 0x9, 0x2, 0xdb0, 0x8, 0xe70}, {0x8, 0x6fb, 0x6, 0x4d91, 0x5, 0xf72}, {0x5, 0xfff, 0xff, 0x2, 0x2, 0x51}, {0x7a, 0xff, 0x8498, 0x0, 0xbb}]}, [{0x3, 0x1, 0x4, 0x3, 0x9, 0x7fffffff}, {0x0, 0x0, 0x5, 0xe0, 0x3, 0x2}, {0x1, 0x80000000, 0xfffffbff, 0x6, 0x80000001, 0x3}, {0xfff, 0x1, 0xb, 0xe639, 0x4, 0x5}, {0x1, 0x4, 0xff, 0x1, 0x8, 0x8c}, {0x7, 0x3, 0x2, 0x5, 0x9}, {0xfffffff9, 0x6, 0x80000001, 0x7ff, 0x3, 0x3}, {0x0, 0xf2f, 0x7, 0x5, 0x7, 0x5c4e}, {0x4, 0x0, 0x9, 0x2, 0x3, 0x8}, {0x0, 0x400000, 0x8d, 0xfffffffb, 0x6, 0xfffffff7}, {0x3, 0x10001, 0x3, 0x80000000, 0xa2f, 0xffff0000}, {0x9, 0x401, 0xdac, 0x1, 0x600, 0x3}, {0xfffffffe, 0x6, 0x5, 0x4, 0x3000, 0x4}, {0x6, 0x2, 0x9, 0x1ff, 0x4, 0x6}, {0x7, 0x9, 0x5, 0x1, 0xfffffffd, 0xfffffc01}, {0x8000, 0xe, 0x4, 0xffff, 0x80000001, 0x2}, {0x1, 0x40, 0x5be, 0x5, 0x7b16, 0x8}, {0x17d0, 0x0, 0xe, 0xd326, 0x0, 0x7}, {0x3, 0x2, 0x0, 0x6, 0x4, 0x2}, {0x101, 0x3ff, 0x282, 0x6, 0x80, 0xee}, {0x80000001, 0x7, 0x0, 0x863, 0x7, 0x3}, {0x6, 0x5, 0x0, 0x4, 0xffffff9a, 0x9}, {0xffffe88c, 0x7469, 0x0, 0x0, 0x7fffffff, 0x8001}, {0x7, 0x7, 0xc, 0x9, 0x7ff, 0x1}, {0x6, 0x5, 0x6, 0x7ff, 0x2, 0x7}, {0x7, 0x8, 0x45, 0xd73035b, 0xbc, 0x27}, {0xe, 0x10, 0x3, 0x5, 0x3, 0xfffffffa}, {0xfff, 0x153d5c56, 0x4, 0x7, 0x4, 0x9}, {0x1e, 0x7, 0x401, 0x1, 0x7ff, 0x5}, {0x4, 0xa43, 0x9, 0x9, 0x9}, {0x5, 0x0, 0x7, 0x5, 0x100, 0x5}, {0x0, 0xecc, 0x5, 0x6, 0x8, 0x6}, {0xfffffff7, 0x12000000, 0x7, 0xfffffff8, 0x3, 0x1}, {0x401, 0x3, 0xc41d776, 0xe, 0x3, 0x7}, {0x0, 0x6, 0x8, 0x7ff, 0x0, 0xf5c80}, {0x2, 0xc, 0x0, 0x7, 0x5, 0x8}, {0x8000, 0x8, 0x6b7, 0x8, 0x6, 0xfff}, {0x1, 0x4, 0xe, 0x9ad, 0x8, 0x8}, {0x2, 0x2000000, 0x47, 0x343, 0x3}, {0x6, 0x225f, 0x5, 0x180, 0x19, 0x1ff}, {0xff, 0x0, 0x6, 0x8, 0x1, 0x9}, {0x959, 0x5, 0x2, 0x6, 0x80000000, 0x6}, {0x1e0, 0x2, 0x8, 0x4, 0x2, 0x59}, {0x2, 0x9, 0x5, 0xf, 0x800, 0x7f}, {0x0, 0x8, 0x7, 0x4, 0x7fffffff, 0x4}, {0x2, 0x8, 0x401, 0x5c, 0xffc00000, 0x7fff}, {0x8001, 0x58acdc15, 0x3, 0x4, 0x8001, 0x3}, {0x5, 0x6, 0x8, 0xfffffffb, 0x1, 0x8}, {0x5, 0x3, 0x0, 0x4, 0xf, 0xff}, {0x9, 0xfff, 0x9, 0x2a, 0x5, 0x12c}, {0xd, 0x8, 0x7f, 0x8, 0x2, 0x5}, {0x7f, 0x7, 0x6, 0xffffff3d, 0xc, 0x1ff}, {0x3, 0x3ff, 0x1ff, 0x6, 0x7, 0x8}, {0xffffffff, 0x8, 0x3, 0x1, 0x101, 0x8}, {0xb0a4, 0x2b59, 0xbb2, 0xfffffffe, 0xc3, 0x9}, {0x4, 0x9, 0x800, 0xe, 0x9, 0x4}, {0xd0, 0x0, 0xeab, 0x9, 0x6, 0x3}, {0x6, 0x0, 0x4, 0xfffff18b, 0x9, 0x90}, {0x5, 0x8, 0xfa28, 0x9, 0xfffffff7, 0x1}, {0xb0, 0x0, 0x1ff, 0x0, 0x8eeb, 0x401}, {0x6, 0x2, 0x5, 0x2, 0x7, 0xf28d9d1}, {0x0, 0xc458, 0x6e9, 0x101, 0x4, 0x2}, {0x9, 0x5, 0x433, 0x6, 0x5fc, 0x3}, {0x80, 0x4, 0x4, 0x1ff, 0x8}, {0x4, 0xaaa, 0x800, 0x6, 0x101, 0x1}, {0x0, 0x1, 0x6, 0x64c, 0x5, 0x54}, {0x6, 0x1, 0xa762, 0x9, 0x0, 0x8}, {0x1fce, 0x8, 0x0, 0x1, 0x1}, {0x8, 0x80000000, 0xffffffff, 0x9, 0x2, 0x3}, {0x8db7, 0x2, 0x9, 0xf, 0xb, 0xc8}, {0x6, 0xffff, 0xfffffff8, 0x3, 0x9, 0xfffffffa}, {0x7, 0x238, 0x6, 0x8, 0xc, 0xa79}, {0xc95, 0x4, 0x7, 0x0, 0x4, 0x9}, {0xf, 0x6, 0x4, 0xffffffff, 0x0, 0x8}, {0x7ff, 0x24000000, 0x0, 0x7f, 0x8, 0x1}, {0x1ce, 0x2, 0xf, 0xffff, 0x0, 0x7c5e}, {0x2, 0xb8a, 0xf54, 0x3, 0x2, 0x20000000}, {0xbc0, 0x7, 0x9, 0x2, 0x5, 0x6}, {0x2, 0x0, 0x5, 0x1089, 0x2}, {0x2, 0x6, 0x93e, 0x40000000, 0x6, 0x8}, {0x7, 0x9, 0x3, 0xff, 0x7f, 0x10}, {0x2fa222ba, 0x0, 0x40, 0x6, 0x8, 0x400}, {0x3, 0x8, 0xfffffff9, 0x4, 0x2, 0x3}, {0x1, 0xacb5, 0x5, 0x40, 0x9, 0x8}, {0xffffffc0, 0x7f, 0x1, 0x8, 0x40, 0x2}, {0x7, 0x5, 0x1000, 0x0, 0x8001, 0x101}, {0x9, 0x1, 0x800, 0x5, 0xa, 0x20}, {0x9, 0x8000, 0x83, 0x4, 0x7}, {0x1, 0x7, 0x5, 0x8, 0xef, 0x5}, {0xfffffffb, 0x2, 0x9479, 0x7fffffff, 0x800, 0x10dba3a3}, {0xffffffff, 0x81, 0x6, 0x5, 0xfffffbeb, 0x8}, {0x5, 0x1c000, 0x900000, 0x7f, 0xa4e, 0x1}, {0x80000001, 0x6, 0x9, 0x80000000, 0x8, 0x9}, {0x81, 0x9, 0x8, 0x2, 0xff, 0x5}, {0x3, 0x9, 0x57a523e2, 0x7ff, 0x2, 0x8001}, {0x8, 0x161, 0x4, 0x40, 0x480, 0x71}, {0xc5800000, 0x3, 0x1, 0x0, 0x2, 0x4}, {0x8, 0x9, 0x80000001, 0x2, 0x6, 0x40}, {0xfff, 0x8, 0x0, 0x956b, 0x10001, 0x80000001}, {0xffff, 0x9, 0x1, 0x3, 0x7, 0x6}, {0x6, 0x7, 0xfffffffc, 0x1000, 0x1f5039e1, 0x8}, {0x6, 0x3, 0xe, 0x0, 0x0, 0x40}, {0xa38, 0xffffffff, 0x4, 0x7, 0x401, 0xfffffff9}, {0x1000, 0x6, 0x5, 0x4, 0x308a, 0x10000}, {0x8d, 0xd2c, 0x8, 0x8, 0x401, 0x1}, {0x0, 0x4, 0x0, 0x0, 0xa5, 0x200}, {0x6, 0x7fff, 0x1, 0xff, 0x9, 0x4}, {0x9, 0xb71b, 0x7, 0x8, 0xfff, 0x7}, {0x200, 0x6, 0x8, 0x5, 0xfffffff8, 0x686a}, {0x0, 0x401, 0x80, 0x0, 0x101, 0x4}, {0x4, 0x8, 0x81, 0xd697, 0xb000, 0x392}, {0x4, 0x10001, 0x8, 0x401, 0x2, 0x7}, {0x9fbe, 0x6, 0x80000001, 0x1, 0xffffffff, 0xfffffffa}, {0xb148, 0x5, 0x98, 0x8, 0x76, 0x3}, {0x3, 0x7, 0x400, 0x6, 0x4, 0x1}, {0x1ed, 0x0, 0xfda7707, 0x2, 0x10, 0x7}, {0x401, 0x1df, 0x3486e606, 0x4f131e1d, 0x0, 0xf0ff}, {0x1, 0x8001, 0x7, 0x8001, 0x2, 0x5}, {0x64, 0x0, 0x2, 0x3, 0x2, 0x3}, {0x4, 0x7fff, 0x5, 0xc1, 0x80, 0x6}, {0x0, 0x8, 0x3b2f1f00, 0xfffff0a4, 0x9, 0x3}, {0x2, 0x7, 0x10000, 0xa, 0x0, 0x1}, {0xe96c, 0x7, 0x7f, 0x9, 0x5, 0xffffff42}, {0x8, 0xffff, 0x5f, 0x3, 0xffffff80, 0x9}, {0x40, 0x8, 0x8, 0x200, 0x1, 0x8001}, {0x2, 0x9, 0x7, 0x9, 0xffff}, {0x6f8, 0x5, 0xf57a, 0xfffffffb, 0x7, 0x1}, {0x2, 0x8, 0xfff, 0x7, 0x1, 0x9}], [{}, {0x3}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {}, {0x3}, {0x3, 0xe2862982e45004fd}, {0x4}, {0x1}, {0x1, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {}, {0x0, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}]}}]}, {0x98, 0x6, "15d6216446141165e6299fcce776e819ef9f886575a09ec480f0d78ba7992428a865e9a5acdc444d0756c55a1cb06733f7bcf47ae4408485889810873d19ade1c4bedd9c61ea9ed5c95c228c945c0e8d0d7250e102ac15181a60c26ff07905a05b93a5ed57d17de14c4e0637f1d029f4af8cc8602c8e8cb92d59015e1b5f39c2431de0a48d3607ffb7bdd401d763918d2f295d35"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x140, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0xfa, 0x6, "f11eb2213e1afa86791a29d36bd8c2dcbb49820c1d91116bbc71348f7feadd471a57efa73f1bce3d2113bf8b533c37005fc756c95810c65f62564822aa00e6986ecef0190c6b14f81d6903e37898096617136403a00a903e2531c705c545d7aaf14aef6d24ca9c25abd60d130e6f8606fc4b56dc843b0ae31a8b8bb7ce694b7efcbfd727bee9489122407d67ab734da00f846c8a4e080bb3c366ba528534ea084c7a4e95a6a1e1cb099d36c5578d7a80affe72ef0dd43672ee53fa16709035373f9951c586c58b323c28eb23544af361fece681dbd60436e5b8e917be0aec04b3db3cb9f2e128ddd802e3e5928279de3cdf6826c7254"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x10b4}}, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000040000000000000901000000020000250800000a0000000005000000020000050700000005000000080000000e000000020000000200da00005f000000000000"], &(0x7f0000000180)=""/31, 0x58, 0x1f, 0x0, 0x1}, 0x28) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r6) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)='-', 0x1}], 0x1, &(0x7f00000000c0), 0x0, 0x2400e844}, 0x40000) (async)
ioprio_set$pid(0x3, 0x0, 0x0)

1.311198075s ago: executing program 6 (id=1166):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
unshare(0x2040400)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.298580335s ago: executing program 4 (id=1167):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140020"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
lremovexattr(&(0x7f00000000c0)='./control\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) (async)
mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140020"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) (async)
lremovexattr(&(0x7f00000000c0)='./control\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00') (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc}, 0x94) (async)

1.298256485s ago: executing program 1 (id=1168):
prctl$PR_SET_NAME(0xf, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x11a}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
ptrace(0x10, 0x0) (async)
ptrace$pokeuser(0x6, 0x0, 0xa0, 0xff) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
sysinfo(&(0x7f0000000000)=""/35) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000040)=0x180, 0x4) (async, rerun: 64)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 32)
bind$inet(r6, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) (async, rerun: 32)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r6, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2e", 0x64, 0x4040004, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffff32, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64)

1.196011627s ago: executing program 4 (id=1170):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x20000}, {0x0, 0x75}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r3, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)

1.195682657s ago: executing program 1 (id=1171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000040000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000020001000000000000f9ff000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)

1.130068978s ago: executing program 4 (id=1174):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r1, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0)

1.103598779s ago: executing program 1 (id=1175):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000010000660800000000000018000000e300000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_usbip_server_init(0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x10001}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
io_getevents(0x0, 0x4, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r8=>0xffffffffffffffff})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000005c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010)
mkdir(&(0x7f0000000580)='./file0\x00', 0x5)
lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)

904.060263ms ago: executing program 6 (id=1178):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318300000000000000001900000018000116800c0002006a657468315f766c616e000000000000"], 0x2c}}, 0x40010)

849.703184ms ago: executing program 6 (id=1179):
r0 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESOCT=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x9, 0x7, 0x0, 0x7}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2400a004)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000380)=@abs, 0x6e, 0x0}}], 0x2, 0x10000, 0x0)
r9 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0xb, 0x0, 0xfffffffd}]})
process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)

465.489051ms ago: executing program 5 (id=1183):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@lazytime}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r1 = syz_mount_image$msdos(&(0x7f0000021900), &(0x7f00000001c0)='./file1/file2\x00', 0x1a4a438, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb, 0x0, &(0x7f00000000c0))
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', r1, &(0x7f00000000c0)='./file2\x00', 0x2)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0xf63, 0x84, 0x2, 0x1, 0x7, 0x0, [{0x3, 0x7, 0x9, '\x00', 0x204}, {0x1, 0x81, 0x8001, '\x00', 0x201}, {0x0, 0x2, 0x80000001, '\x00', 0x3345}, {0xa, 0xcd2, 0x0, '\x00', 0x600}, {0x8fe, 0x7, 0x4, '\x00', 0x2501}, {0x2, 0x1, 0x7, '\x00', 0x200b}, {0x3, 0xb5, 0x3, '\x00', 0x902}]})

391.684443ms ago: executing program 0 (id=1185):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000040000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000020001000000000000f9ff000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)

391.114873ms ago: executing program 0 (id=1186):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7}, 0x5081, 0x2, 0xfffff7f0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
io_submit(0x0, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040)
r3 = epoll_create(0x6)
r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0), 0x10, 0x80800)
accept4$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x20002000})
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501081, 0x0)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000002c0)=0x4061008)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r11)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000003040))

319.905635ms ago: executing program 5 (id=1187):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000980)={[{@dioread_nolock}, {@data_err_abort}, {@data_journal}, {@abort}, {@data_err_ignore}, {@discard}, {@test_dummy_encryption}, {@noinit_itable}, {@quota}, {@user_xattr}, {@block_validity}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f0000000c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x87) (async, rerun: 64)
utime(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x8000000000000000, 0x8}) (async)
r0 = semget$private(0x0, 0x4000000009, 0x0)
semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000180)=""/15) (async)
semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x0, 0x8, 0x1000}, {0x1, 0x3}], 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163e0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) (rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8008, &(0x7f0000000800)=ANY=[@ANYBLOB="03000000000000000b0000006e6f3dcdbe665b58aa7c6b640ed290d2226bda4175af1928e3035f709686f3eda60481f9eabaa8e6cae9d75d5f8b3fd996f2ebb88f878e8a1827fe34bdee419cf9358bb90a36e12d17763f021e755a2050f8d72ee41720a08c403829baac5a2c99457b8838a4665db448984f0e6b79c3736b6c0c8ca0ab7d1c76e725c30c680c0100ccd0b7a13e9399a4ac7545ac5e84458be06f43015f58a5c69b70bfe74c19c9fa8bc6eb2a58761cea5afd4e0e76d56ad7a125c10ac43e33c6dd44e1121d7a44738e7e8985cb6c533215c2f2c5fb52b14beb9ef1", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f78617474722c6f626a5f747970653d2b002c736d61636b6673726f6f743d5c5c2c646f6e745f6d6561737572652c6673757569643d61313833566165f62d003932612d623230392d376662632d38326238613a64362c00"]) (async)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x0, 0x28, 0x0, 0x0, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x5, 0x9}, 0x1000, 0x101, 0x8, 0x0, 0xfffffffffff7bc00, 0x4, 0xb, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002a04000000000000850000000100000095"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

291.762995ms ago: executing program 5 (id=1188):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r1}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0xa6)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) (async)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x0, 0x1b7}, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r4, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fffffff}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
pread64(r8, &(0x7f0000000200)=""/54, 0x36, 0xbb65)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
write(r10, &(0x7f0000000040)="2700000014000707030e0000120f0a0011fe0100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async)
write(r10, &(0x7f0000000040)="2700000014000707030e0000120f0a0011fe0100f5fe009d2fb112ff000000008a151f75080039", 0x27)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r9}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x28000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x28000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x2c020400)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10)

280.440525ms ago: executing program 4 (id=1189):
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="050002000000000000002e0000", @ANYRES8], 0x68}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_open_dev$loop(0x0, 0x7f, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdir(&(0x7f0000000080)='./file0\x00', 0x108)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRESOCT, @ANYRES16=r1, @ANYRES64=r3], 0x48)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)

176.051877ms ago: executing program 0 (id=1190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x108, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

132.796398ms ago: executing program 0 (id=1191):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095", @ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

79.621939ms ago: executing program 0 (id=1192):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0xbb, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0xfcb7}, {}, {0x0, 0x0, 0xfe}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa0}}, 0x0)

4.0976ms ago: executing program 0 (id=1193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x73, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.29698ms ago: executing program 5 (id=1194):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x5)
fchdir(r7) (async)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) (async)
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r9, 0x2) (async)
r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r10, 0x2)
close_range(r8, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r12}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r11}, 0x38) (async, rerun: 32)
r13 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$kcm(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

0s ago: executing program 6 (id=1195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r5) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x0, 0xfffff00c}, {0x20, 0x2, 0x7, 0xfffff024}, {0x6}]}, 0x10) (async)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000240)="9a582215", 0x4}], 0x1) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"})
r9 = syz_open_pts(r6, 0x42)
r10 = dup3(r9, r4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r10}})
close(r3)

kernel console output (not intermixed with test programs):

0-000000000000.
[   61.217624][ T5208] loop4: detected capacity change from 0 to 32768
[   61.377108][ T5252] loop2: detected capacity change from 0 to 256
[   61.575055][ T3412] IPVS: starting estimator thread 0...
[   61.644639][ T5273] loop2: detected capacity change from 0 to 4096
[   61.653860][ T5273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.669452][ T5267] IPVS: using max 2928 ests per chain, 146400 per kthread
[   61.684409][ T5273] hsr_slave_0: left promiscuous mode
[   61.698115][ T5273] hsr_slave_1: left promiscuous mode
[   61.727112][ T5278] loop4: detected capacity change from 0 to 512
[   61.734420][ T5278] EXT4-fs: Ignoring removed mblk_io_submit option
[   61.741697][ T5278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   61.753461][ T5278] EXT4-fs (loop4): 1 truncate cleaned up
[   61.767525][ T5278] tipc: Started in network mode
[   61.772522][ T5278] tipc: Node identity 2e1ef6c80b8f, cluster identity 4711
[   61.779858][ T5278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.670365][ T5297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1539 sclass=netlink_audit_socket pid=5297 comm=syz.3.499
[   62.688773][ T5277] tipc: Disabling bearer <eth:syzkaller0>
[   62.704764][ T5294] netlink: 'syz.1.498': attribute type 27 has an invalid length.
[   62.755116][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.762348][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.801121][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.831347][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.862879][ T5294] team1: left promiscuous mode
[   62.867781][ T5294] team1: left allmulticast mode
[   63.670862][ T3802] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.691018][ T3802] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.709186][ T3802] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.727758][ T3802] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.760800][   T29] kauditd_printk_skb: 376 callbacks suppressed
[   63.760819][   T29] audit: type=1326 audit(1757440020.947:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18389fd69f code=0x7ffc0000
[   63.781837][ T5333] loop3: detected capacity change from 0 to 2048
[   63.837149][ T5336] __nla_validate_parse: 15 callbacks suppressed
[   63.837168][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   63.845427][   T29] audit: type=1326 audit(1757440020.987:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   63.852491][ T5336] netlink: 'syz.2.511': attribute type 30 has an invalid length.
[   63.875886][   T29] audit: type=1326 audit(1757440020.987:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   63.907236][   T29] audit: type=1400 audit(1757440020.987:5752): avc:  denied  { accept } for  pid=5321 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   63.927045][   T29] audit: type=1326 audit(1757440020.987:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   63.950570][   T29] audit: type=1326 audit(1757440020.987:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   63.973997][   T29] audit: type=1326 audit(1757440020.987:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   63.997343][   T29] audit: type=1400 audit(1757440020.987:5756): avc:  denied  { read } for  pid=5321 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   64.016727][   T29] audit: type=1326 audit(1757440020.987:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   64.036710][ T5329] netlink: 'syz.4.507': attribute type 1 has an invalid length.
[   64.040224][   T29] audit: type=1326 audit(1757440020.987:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[   64.052989][ T5333]  loop3: p1 < > p4
[   64.076460][ T5333] loop3: p4 size 8388608 extends beyond EOD, truncated
[   64.085584][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   64.085616][ T4781] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.094597][ T5338] netlink: 'syz.2.511': attribute type 30 has an invalid length.
[   64.103533][ T4781] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.181491][ T4781] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.272053][ T4781] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.649821][ T5364] netlink: 'syz.3.517': attribute type 3 has an invalid length.
[   64.737336][ T5368] loop3: detected capacity change from 0 to 512
[   64.766245][ T5368] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.792467][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'.
[   64.843547][ T5381] 9pnet: p9_errstr2errno: server reported unknown error 
[   65.005729][ T5387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5387 comm=syz.2.523
[   65.034181][ T5387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'.
[   65.063282][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'.
[   65.095906][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[   65.096250][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'.
[   65.119317][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'.
[   65.166601][ T5411] netlink: 'syz.0.528': attribute type 5 has an invalid length.
[   65.174580][ T5411] netlink: 'syz.0.528': attribute type 11 has an invalid length.
[   65.448956][ T5430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.534'.
[   65.457986][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   65.866699][ T5446] loop4: detected capacity change from 0 to 1024
[   65.873879][ T5446] EXT4-fs: Ignoring removed bh option
[   65.882074][ T5446] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   65.969765][ T5446] Falling back ldisc for ttyS3.
[   66.149082][ T5454] SELinux: failed to load policy
[   66.403890][ T5481] ref_ctr_offset mismatch. inode: 0x27f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[   66.592002][ T5497] loop3: detected capacity change from 0 to 512
[   66.612631][ T5497] EXT4-fs (loop3): 1 orphan inode deleted
[   66.629454][ T5497] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.638105][ T3802] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:27: Failed to release dquot type 1
[   66.806186][ T5523] netlink: 'syz.3.557': attribute type 1 has an invalid length.
[   66.809459][ T5520] loop4: detected capacity change from 0 to 8192
[   66.830900][ T5523] bond0: entered promiscuous mode
[   66.836232][ T5523] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.434994][ T5546] loop3: detected capacity change from 0 to 512
[   67.444262][ T5546] EXT4-fs: Ignoring removed bh option
[   67.449852][ T5546] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.456927][ T5546] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   67.469154][ T5546] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   67.477741][ T5546] EXT4-fs (loop3): orphan cleanup on readonly fs
[   67.484822][ T5546] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1
[   67.496118][ T5546] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[   67.509310][ T5546] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[   67.523125][ T5546] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0
[   67.536616][ T5546] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1
[   67.548067][ T5546] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1
[   67.562492][ T5546] EXT4-fs (loop3): 1 orphan inode deleted
[   67.573447][ T5546] EXT4-fs mount: 9 callbacks suppressed
[   67.573462][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.595933][ T5546] +}[@ (5546) used greatest stack depth: 9072 bytes left
[   67.613436][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.640845][ T5558] netlink: 'syz.2.566': attribute type 9 has an invalid length.
[   67.651454][ T5558] netlink: 'syz.2.566': attribute type 4 has an invalid length.
[   67.673486][ T5563] loop3: detected capacity change from 0 to 128
[   67.682312][ T5563] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   67.738369][ T5563] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.763929][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.804131][ T5579] loop3: detected capacity change from 0 to 128
[   67.813193][ T5579] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   67.826328][ T5579] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.838143][ T5579] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.910223][ T5584] loop2: detected capacity change from 0 to 4096
[   67.920600][ T5584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.980302][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.056196][ T4777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.066639][ T4777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.121963][ T4777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.132430][ T4777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.207289][ T4777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.217849][ T4777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.256122][ T4777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.266769][ T4777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.300740][ T5622] loop4: detected capacity change from 0 to 512
[   68.307608][ T5622] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.315512][ T5622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   68.326990][ T5622] EXT4-fs (loop4): 1 truncate cleaned up
[   68.339605][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.359218][ T5598] chnl_net:caif_netlink_parms(): no params data found
[   68.621555][ T4777] bond0 (unregistering): Released all slaves
[   68.657994][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.665522][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.677745][ T5598] bridge_slave_0: entered allmulticast mode
[   68.684866][ T5598] bridge_slave_0: entered promiscuous mode
[   68.693657][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.700974][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.708427][ T5598] bridge_slave_1: entered allmulticast mode
[   68.716734][ T5598] bridge_slave_1: entered promiscuous mode
[   68.737705][ T4777] IPVS: stopping master sync thread 4484 ...
[   68.791861][ T4777] veth1_macvtap: left promiscuous mode
[   68.798054][ T4777] veth0_macvtap: left promiscuous mode
[   68.805243][ T4777] veth1_vlan: left promiscuous mode
[   68.810670][ T4777] veth0_vlan: left promiscuous mode
[   68.855700][ T5652] __nla_validate_parse: 7 callbacks suppressed
[   68.855719][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'.
[   68.892908][ T5651] loop3: detected capacity change from 0 to 8192
[   68.907677][ T5654] netlink: 7 bytes leftover after parsing attributes in process `syz.0.592'.
[   68.935419][ T5654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.592'.
[   68.960415][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.975545][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.002102][ T5598] team0: Port device team_slave_0 added
[   69.009251][ T5598] team0: Port device team_slave_1 added
[   69.027918][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.035098][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.037873][ T5660] netlink: 'syz.0.596': attribute type 10 has an invalid length.
[   69.061360][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.083350][ T5660] team0: Port device dummy0 added
[   69.092051][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.099045][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.125162][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.131467][ T5651] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   69.143562][ T5651] FAT-fs (loop3): Filesystem has been set read-only
[   69.154944][ T5660] netlink: 'syz.0.596': attribute type 10 has an invalid length.
[   69.162908][   T29] kauditd_printk_skb: 574 callbacks suppressed
[   69.162927][   T29] audit: type=1326 audit(1757440026.347:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.192711][   T29] audit: type=1326 audit(1757440026.347:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.216513][   T29] audit: type=1326 audit(1757440026.347:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.240094][   T29] audit: type=1326 audit(1757440026.347:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.264746][   T29] audit: type=1326 audit(1757440026.347:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.288291][   T29] audit: type=1326 audit(1757440026.347:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.311681][   T29] audit: type=1326 audit(1757440026.347:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.335112][   T29] audit: type=1326 audit(1757440026.347:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.358472][   T29] audit: type=1326 audit(1757440026.347:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.382152][   T29] audit: type=1326 audit(1757440026.347:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   69.407220][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.430542][ T5660] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   69.440918][ T5660] team0: Failed to send options change via netlink (err -105)
[   69.448598][ T5660] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   69.453069][ T5666] loop3: detected capacity change from 0 to 128
[   69.457960][ T5660] team0: Port device dummy0 removed
[   69.464616][ T5666] FAT-fs (loop3): bogus number of reserved sectors
[   69.471133][ T5660] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.475630][ T5666] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   69.493622][ T5666] FAT-fs (loop3): Can't find a valid FAT filesystem
[   69.512127][ T5598] hsr_slave_0: entered promiscuous mode
[   69.518581][ T5598] hsr_slave_1: entered promiscuous mode
[   69.614694][ T5598] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   69.626182][ T5598] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   69.636111][ T5598] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   69.645427][ T5598] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   69.682054][ T5678] SELinux:  Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped).
[   69.685106][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.703667][ T5682] vlan2: entered allmulticast mode
[   69.710284][ T5682] dummy0: entered allmulticast mode
[   69.746943][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[   69.764631][ T5693] loop3: detected capacity change from 0 to 2048
[   69.781220][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.784753][ T5693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[   69.788481][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.827013][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.834214][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.843077][ T5697] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   69.937114][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.026622][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'.
[   70.053398][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'.
[   70.084900][ T5598] veth0_vlan: entered promiscuous mode
[   70.153297][ T5598] veth1_vlan: entered promiscuous mode
[   70.174366][ T5598] veth0_macvtap: entered promiscuous mode
[   70.204280][ T5598] veth1_macvtap: entered promiscuous mode
[   70.245737][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.277671][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.300290][ T4781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.372584][ T5747] ref_ctr_offset mismatch. inode: 0x2db offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18
[   70.388939][ T4781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.399269][ T4781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.421467][ T4781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.518347][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   70.530893][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[   70.742962][ T5776] tipc: Started in network mode
[   70.748120][ T5776] tipc: Node identity 8afca307fed9, cluster identity 4711
[   70.755666][ T5776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.933944][ T5785] syzkaller0: entered promiscuous mode
[   70.939627][ T5785] syzkaller0: entered allmulticast mode
[   71.073296][ T5776] netlink: 'syz.3.618': attribute type 21 has an invalid length.
[   71.150401][ T5776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.618'.
[   71.401115][ T5765] tipc: Resetting bearer <eth:syzkaller0>
[   71.409822][ T5765] tipc: Disabling bearer <eth:syzkaller0>
[   71.646196][ T5810] loop3: detected capacity change from 0 to 8192
[   71.654032][ T5810] vfat: Unknown parameter 'GPL'
[   71.911200][ T5825] netlink: 288 bytes leftover after parsing attributes in process `syz.0.631'.
[   71.932239][ T5825] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[   72.243527][ T5843] loop4: detected capacity change from 0 to 736
[   73.109420][ T5854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=5854 comm=syz.1.639
[   73.109915][ T5855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=5855 comm=syz.1.639
[   73.217937][ T5866] loop4: detected capacity change from 0 to 1024
[   73.252057][ T5866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.306755][ T5866] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   73.354614][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.414397][ T5881] loop4: detected capacity change from 0 to 512
[   73.432835][ T5881] ext4: Unknown parameter './file1'
[   73.589855][ T5885] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[   73.596544][ T5885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   73.604432][ T5885] vhci_hcd vhci_hcd.0: Device attached
[   73.621000][ T5885] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   73.640099][ T5885] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7)
[   73.646651][ T5885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   73.654145][ T5885] vhci_hcd vhci_hcd.0: Device attached
[   73.682600][ T5894] netlink: 'syz.1.650': attribute type 13 has an invalid length.
[   73.694897][ T5894] gretap0: refused to change device tx_queue_len
[   73.702507][ T5894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   73.732605][ T5885] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9)
[   73.739176][ T5885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   73.746831][ T5885] vhci_hcd vhci_hcd.0: Device attached
[   73.781934][ T5885] loop4: detected capacity change from 0 to 512
[   73.797073][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'.
[   73.807692][ T5885] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   73.831660][ T5885] EXT4-fs (loop4): orphan cleanup on readonly fs
[   73.845898][ T5885] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.648: Failed to acquire dquot type 1
[   73.859464][    T9] usb 9-1: new high-speed USB device number 3 using vhci_hcd
[   73.892427][ T5885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.648: bg 0: block 40: padding at end of block bitmap is not set
[   73.906875][ T5885] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   73.917042][ T5885] EXT4-fs (loop4): 1 truncate cleaned up
[   73.923219][ T5885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   73.940920][ T5885] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.648: corrupted xattr block 31: invalid header
[   73.980627][ T5885] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=16
[   73.990086][ T5885] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.648: corrupted xattr block 31: invalid header
[   73.992309][ T5913] __nla_validate_parse: 1 callbacks suppressed
[   73.992324][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.648'.
[   74.227363][ T5885] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=16
[   74.886490][ T5885] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.648: bad symlink.
[   74.919610][   T29] kauditd_printk_skb: 326 callbacks suppressed
[   74.919630][   T29] audit: type=1400 audit(1757440032.077:6660): avc:  denied  { read } for  pid=5884 comm="syz.4.648" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   75.016560][ T5927] Driver unsupported XDP return value 0 on prog  (id 694) dev N/A, expect packet loss!
[   75.061993][   T29] audit: type=1326 audit(1757440032.197:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.085573][   T29] audit: type=1326 audit(1757440032.207:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.109808][   T29] audit: type=1326 audit(1757440032.207:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.133257][   T29] audit: type=1326 audit(1757440032.207:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.156764][   T29] audit: type=1326 audit(1757440032.207:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.162349][ T5886] vhci_hcd: connection reset by peer
[   75.180614][   T29] audit: type=1326 audit(1757440032.207:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.186580][ T5891] vhci_hcd: connection closed
[   75.209423][   T29] audit: type=1326 audit(1757440032.207:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.210270][ T5899] vhci_hcd: connection closed
[   75.214219][   T29] audit: type=1326 audit(1757440032.207:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.251382][ T4777] vhci_hcd: stop threads
[   75.266803][   T29] audit: type=1326 audit(1757440032.207:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[   75.271126][ T4777] vhci_hcd: release socket
[   75.298768][ T4777] vhci_hcd: disconnect device
[   75.348673][ T5932] loop3: detected capacity change from 0 to 128
[   75.596909][ T5932] FAT-fs (loop3): Directory bread(block 32) failed
[   75.603639][ T5932] FAT-fs (loop3): Directory bread(block 33) failed
[   75.610658][ T5932] FAT-fs (loop3): Directory bread(block 34) failed
[   75.617291][ T5932] FAT-fs (loop3): Directory bread(block 35) failed
[   75.631907][ T5932] FAT-fs (loop3): Directory bread(block 36) failed
[   75.646034][ T5932] FAT-fs (loop3): Directory bread(block 37) failed
[   75.675126][ T5932] FAT-fs (loop3): Directory bread(block 38) failed
[   75.737834][ T5932] FAT-fs (loop3): Directory bread(block 39) failed
[   75.756968][ T5932] FAT-fs (loop3): Directory bread(block 40) failed
[   75.775191][ T5932] FAT-fs (loop3): Directory bread(block 41) failed
[   75.800429][ T4777] vhci_hcd: stop threads
[   75.804746][ T4777] vhci_hcd: release socket
[   75.809173][ T4777] vhci_hcd: disconnect device
[   75.835605][ T4777] vhci_hcd: stop threads
[   75.840038][ T4777] vhci_hcd: release socket
[   75.844640][ T4777] vhci_hcd: disconnect device
[   75.929098][ T5947] 9pnet: Could not find request transport: ¹4:“}²ß\Œ

[   75.938624][ T5947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'.
[   75.963748][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'.
[   75.981162][ T5947] bond0: (slave dummy0): Releasing backup interface
[   75.993818][ T5947] batman_adv: batadv0: Adding interface: dummy0
[   76.000132][ T5947] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.025473][ T5947] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   76.040453][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.056505][ T5947] netlink: 'syz.0.664': attribute type 10 has an invalid length.
[   76.070578][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.085830][ T5947] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   76.143377][ T5965] loop4: detected capacity change from 0 to 4096
[   76.161012][ T5965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.183110][ T5970] FAULT_INJECTION: forcing a failure.
[   76.183110][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   76.196355][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.1.671 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.196459][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   76.196472][ T5970] Call Trace:
[   76.196480][ T5970]  <TASK>
[   76.196487][ T5970]  __dump_stack+0x1d/0x30
[   76.196507][ T5970]  dump_stack_lvl+0xe8/0x140
[   76.196590][ T5970]  dump_stack+0x15/0x1b
[   76.196609][ T5970]  should_fail_ex+0x265/0x280
[   76.196636][ T5970]  should_fail+0xb/0x20
[   76.196705][ T5970]  should_fail_usercopy+0x1a/0x20
[   76.196726][ T5970]  _copy_to_iter+0xd2/0xe70
[   76.196756][ T5970]  ? ip_finish_output2+0x7c7/0x8b0
[   76.196833][ T5970]  ? __rcu_read_unlock+0x34/0x70
[   76.196857][ T5970]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   76.196880][ T5970]  __skb_datagram_iter+0x2f4/0x690
[   76.196983][ T5970]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   76.197047][ T5970]  skb_copy_datagram_iter+0x3d/0x110
[   76.197078][ T5970]  tcp_recvmsg_locked+0xa68/0x1fd0
[   76.197103][ T5970]  ? xa_load+0xb1/0xe0
[   76.197211][ T5970]  ? obj_cgroup_charge_account+0x122/0x1a0
[   76.197239][ T5970]  ? try_charge_memcg+0x200/0x9e0
[   76.197295][ T5970]  ? __rcu_read_unlock+0x4f/0x70
[   76.197317][ T5970]  ? css_rstat_updated+0xb7/0x240
[   76.197355][ T5970]  ? __account_obj_stock+0x211/0x350
[   76.197440][ T5970]  tcp_zerocopy_receive+0x460/0x1310
[   76.197466][ T5970]  ? obj_cgroup_charge_account+0xba/0x1a0
[   76.197500][ T5970]  ? should_fail_ex+0x30/0x280
[   76.197523][ T5970]  ? __rcu_read_unlock+0x4f/0x70
[   76.197624][ T5970]  do_tcp_getsockopt+0x1841/0x1af0
[   76.197723][ T5970]  ? avc_has_perm_noaudit+0x1b1/0x200
[   76.197751][ T5970]  ? avc_has_perm+0xf7/0x180
[   76.197779][ T5970]  tcp_getsockopt+0x6e/0xe0
[   76.197876][ T5970]  sock_common_getsockopt+0x60/0x70
[   76.197987][ T5970]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   76.198014][ T5970]  do_sock_getsockopt+0x200/0x240
[   76.198059][ T5970]  __x64_sys_getsockopt+0x11e/0x1a0
[   76.198088][ T5970]  x64_sys_call+0x2bc6/0x2ff0
[   76.198136][ T5970]  do_syscall_64+0xd2/0x200
[   76.198214][ T5970]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   76.198279][ T5970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.198301][ T5970] RIP: 0033:0x7fd2baf3ebe9
[   76.198317][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.198385][ T5970] RSP: 002b:00007fd2b999f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   76.198403][ T5970] RAX: ffffffffffffffda RBX: 00007fd2bb175fa0 RCX: 00007fd2baf3ebe9
[   76.198414][ T5970] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000005
[   76.198425][ T5970] RBP: 00007fd2b999f090 R08: 0000200000000240 R09: 0000000000000000
[   76.198488][ T5970] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   76.198501][ T5970] R13: 00007fd2bb176038 R14: 00007fd2bb175fa0 R15: 00007fff8e6b5e78
[   76.198522][ T5970]  </TASK>
[   76.558823][ T5978] netlink: 'syz.3.674': attribute type 4 has an invalid length.
[   76.566895][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'.
[   76.582822][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.601572][ T5976] netlink: 'syz.1.673': attribute type 10 has an invalid length.
[   76.665436][ T5976] team0: Port device dummy0 removed
[   76.712719][ T5988] SELinux: failed to load policy
[   76.734881][ T5976] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.748688][ T5993] netlink: 'syz.3.678': attribute type 29 has an invalid length.
[   76.778326][ T5988] netlink: 148 bytes leftover after parsing attributes in process `syz.4.676'.
[   76.788991][ T5995] netlink: 'syz.3.678': attribute type 29 has an invalid length.
[   76.816747][ T5993] netlink: 488 bytes leftover after parsing attributes in process `syz.3.678'.
[   77.061076][ T6017] FAULT_INJECTION: forcing a failure.
[   77.061076][ T6017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.074320][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.4.683 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.074346][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   77.074356][ T6017] Call Trace:
[   77.074363][ T6017]  <TASK>
[   77.074372][ T6017]  __dump_stack+0x1d/0x30
[   77.074395][ T6017]  dump_stack_lvl+0xe8/0x140
[   77.074424][ T6017]  dump_stack+0x15/0x1b
[   77.074444][ T6017]  should_fail_ex+0x265/0x280
[   77.074471][ T6017]  should_fail+0xb/0x20
[   77.074492][ T6017]  should_fail_usercopy+0x1a/0x20
[   77.074512][ T6017]  _copy_to_user+0x20/0xa0
[   77.074555][ T6017]  simple_read_from_buffer+0xb5/0x130
[   77.074649][ T6017]  proc_fail_nth_read+0x10e/0x150
[   77.074677][ T6017]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   77.074711][ T6017]  vfs_read+0x1a5/0x770
[   77.074735][ T6017]  ? __rcu_read_unlock+0x4f/0x70
[   77.074775][ T6017]  ? __fget_files+0x184/0x1c0
[   77.074805][ T6017]  ksys_read+0xda/0x1a0
[   77.074826][ T6017]  __x64_sys_read+0x40/0x50
[   77.074920][ T6017]  x64_sys_call+0x27bc/0x2ff0
[   77.074944][ T6017]  do_syscall_64+0xd2/0x200
[   77.074985][ T6017]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   77.075005][ T6017]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   77.075083][ T6017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.075102][ T6017] RIP: 0033:0x7f72cda7d5fc
[   77.075116][ T6017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   77.075131][ T6017] RSP: 002b:00007f72cc4c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   77.075191][ T6017] RAX: ffffffffffffffda RBX: 00007f72cdcb6090 RCX: 00007f72cda7d5fc
[   77.075267][ T6017] RDX: 000000000000000f RSI: 00007f72cc4c60a0 RDI: 000000000000000b
[   77.075278][ T6017] RBP: 00007f72cc4c6090 R08: 0000000000000000 R09: 0000000000000000
[   77.075288][ T6017] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   77.075301][ T6017] R13: 00007f72cdcb6128 R14: 00007f72cdcb6090 R15: 00007ffded19f568
[   77.075322][ T6017]  </TASK>
[   77.414750][ T5987] loop3: detected capacity change from 0 to 8192
[   77.515474][ T5987] syz.3.678: attempt to access beyond end of device
[   77.515474][ T5987] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   77.529014][ T5987] Buffer I/O error on dev loop3, logical block 57847, async page read
[   77.555092][ T5987] syz.3.678: attempt to access beyond end of device
[   77.555092][ T5987] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   77.568625][ T5987] Buffer I/O error on dev loop3, logical block 57847, async page read
[   77.581842][ T5987] syz.3.678: attempt to access beyond end of device
[   77.581842][ T5987] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   77.595200][ T5987] Buffer I/O error on dev loop3, logical block 57847, async page read
[   77.603453][ T5987] syz.3.678: attempt to access beyond end of device
[   77.603453][ T5987] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   77.617023][ T5987] Buffer I/O error on dev loop3, logical block 57847, async page read
[   77.625723][ T5987] syz.3.678: attempt to access beyond end of device
[   77.625723][ T5987] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   77.639179][ T5987] Buffer I/O error on dev loop3, logical block 57847, async page read
[   77.810128][ T6043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.992008][ T6043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.124325][ T6043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.204950][ T6043] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.323682][ T3796] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.388001][ T3796] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.476328][ T3796] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.485247][ T3796] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.624542][ T6071] loop3: detected capacity change from 0 to 256
[   78.634432][ T6067] SELinux: failed to load policy
[   78.741249][ T6076] usb usb8: usbfs: process 6076 (syz.1.703) did not claim interface 1 before use
[   78.812055][ T6071] +}[@: attempt to access beyond end of device
[   78.812055][ T6071] loop3: rw=2049, sector=256, nr_sectors = 72 limit=256
[   78.882444][ T6080] @: renamed from vlan0 (while UP)
[   79.232974][ T6094] loop3: detected capacity change from 0 to 4096
[   79.258699][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.280558][    T9] vhci_hcd: vhci_device speed not set
[   79.283310][ T6106] ipvlan0: entered promiscuous mode
[   79.293826][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   79.301694][ T6106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.322038][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.329714][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.337299][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.344772][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.352309][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.359768][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.367222][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.374683][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.382734][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.390309][ T1034] hid-generic 0000:0006:0007.0004: unknown main item tag 0x0
[   79.409074][ T6106] ipvlan0: entered promiscuous mode
[   79.424763][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   79.438943][ T6109] loop5: detected capacity change from 0 to 1024
[   79.449572][ T6106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.470413][ T1034] hid-generic 0000:0006:0007.0004: hidraw0: <UNKNOWN> HID v0.0b Device [syz1] on syz1
[   79.493828][ T6106] ipvlan0: entered promiscuous mode
[   79.499637][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   79.507900][ T6106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.526207][ T6109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   79.541026][ T6109] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.568259][ T6106] ipvlan0: entered promiscuous mode
[   79.574182][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   79.585763][ T6106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.636505][ T6109] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.714: lblock 0 mapped to illegal pblock 0 (length 1)
[   79.656980][ T6109] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   79.669592][ T6109] EXT4-fs (loop5): This should not happen!! Data will be lost
[   79.669592][ T6109] 
[   79.695184][ T6129] vlan2: entered allmulticast mode
[   79.707784][ T6129] dummy0: entered allmulticast mode
[   79.753136][ T6106] ipvlan0: entered promiscuous mode
[   79.759226][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   79.768625][ T6106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.787136][ T6109] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.714: lblock 3 mapped to illegal pblock 3 (length 3)
[   79.810100][ T6109] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   79.822723][ T6109] EXT4-fs (loop5): This should not happen!! Data will be lost
[   79.822723][ T6109] 
[   79.838380][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.879316][ T4777] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:45: lblock 8 mapped to illegal pblock 8 (length 8)
[   79.912941][ T4777] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   79.925367][ T4777] EXT4-fs (loop5): This should not happen!! Data will be lost
[   79.925367][ T4777] 
[   79.935211][   T29] kauditd_printk_skb: 249 callbacks suppressed
[   79.935295][   T29] audit: type=1326 audit(1757440037.107:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72cda75ba7 code=0x7ffc0000
[   79.953326][ T6106] ipvlan0: entered promiscuous mode
[   79.965145][   T29] audit: type=1326 audit(1757440037.107:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72cda1adb9 code=0x7ffc0000
[   79.990111][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   79.993926][   T29] audit: type=1326 audit(1757440037.107:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[   80.017079][ T6106] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   80.024022][   T29] audit: type=1326 audit(1757440037.107:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72cda75ba7 code=0x7ffc0000
[   80.059642][   T29] audit: type=1326 audit(1757440037.107:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72cda1adb9 code=0x7ffc0000
[   80.083127][   T29] audit: type=1326 audit(1757440037.107:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[   80.088861][ T6138] loop3: detected capacity change from 0 to 512
[   80.106611][   T29] audit: type=1326 audit(1757440037.107:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72cda75ba7 code=0x7ffc0000
[   80.117847][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   80.136405][   T29] audit: type=1326 audit(1757440037.107:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72cda1adb9 code=0x7ffc0000
[   80.136503][   T29] audit: type=1326 audit(1757440037.107:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[   80.153403][ T6138] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.168880][   T29] audit: type=1326 audit(1757440037.107:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72cda75ba7 code=0x7ffc0000
[   80.244107][ T6138] EXT4-fs: Ignoring removed i_version option
[   80.298859][ T6138] EXT4-fs (loop3): 1 orphan inode deleted
[   80.319403][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.615492][ T6160] tipc: Started in network mode
[   80.620595][ T6160] tipc: Node identity fae2c169415, cluster identity 4711
[   80.627916][ T6160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.666003][ T6160] tipc: Disabling bearer <eth:syzkaller0>
[   80.743944][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.460602][ T6197] loop4: detected capacity change from 0 to 512
[   81.480856][ T6199] netlink: 76 bytes leftover after parsing attributes in process `syz.1.737'.
[   81.489811][ T6199] netlink: 76 bytes leftover after parsing attributes in process `syz.1.737'.
[   81.509534][ T6197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   81.550209][ T6197] EXT4-fs (loop4): 1 truncate cleaned up
[   81.569704][ T6197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.732464][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.794211][ T6203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   81.998938][ T6221] random: crng reseeded on system resumption
[   82.022458][ T6219] loop4: detected capacity change from 0 to 512
[   82.039876][ T6219] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.046593][ T6219] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.057184][ T6219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   82.066186][ T6219] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   82.292878][ T6219] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.742: Allocating blocks 41-42 which overlap fs metadata
[   82.452954][ T6219] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.742: Allocating blocks 41-42 which overlap fs metadata
[   82.551192][ T6219] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.742: Failed to acquire dquot type 1
[   82.603276][ T6219] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   82.692497][ T6219] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.742: corrupted inode contents
[   82.737526][ T6219] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.742: mark_inode_dirty error
[   82.769838][ T6219] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.742: corrupted inode contents
[   82.782731][ T6219] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.742: mark_inode_dirty error
[   82.794525][ T6219] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.742: corrupted inode contents
[   82.807456][ T6219] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   82.816803][ T6219] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.742: corrupted inode contents
[   82.830136][ T6219] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.742: mark_inode_dirty error
[   82.841793][ T6219] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   82.852813][ T6219] EXT4-fs (loop4): 1 truncate cleaned up
[   82.859152][ T6219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.876557][ T6219] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   82.896544][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.975463][ T3411] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   82.996905][ T6260] loop4: detected capacity change from 0 to 512
[   83.006404][ T6260] EXT4-fs: Ignoring removed bh option
[   83.011972][ T6260] EXT4-fs: Ignoring removed mblk_io_submit option
[   83.029144][ T6260] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   83.047292][ T6266] loop3: detected capacity change from 0 to 164
[   83.049735][ T6260] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   83.054845][ T6264] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.062743][ T6260] EXT4-fs (loop4): orphan cleanup on readonly fs
[   83.079256][ T6260] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.750: Failed to acquire dquot type 1
[   83.092141][ T6260] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.750: Invalid block bitmap block 0 in block_group 0
[   83.111401][ T6260] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.750: Invalid block bitmap block 0 in block_group 0
[   83.126557][ T6260] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.750: Invalid block bitmap block 0 in block_group 0
[   83.154663][ T6260] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.750: Failed to acquire dquot type 1
[   83.170763][ T6269] loop3: detected capacity change from 0 to 512
[   83.180167][ T6264] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.191837][ T6269] EXT4-fs: Ignoring removed mblk_io_submit option
[   83.199861][ T6269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.211083][ T6260] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.750: Failed to acquire dquot type 1
[   83.223882][ T6260] EXT4-fs (loop4): 1 orphan inode deleted
[   83.231738][ T6269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[   83.239800][ T6269] System zones: 1-12
[   83.244353][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.261242][ T6264] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.273036][ T6269] EXT4-fs (loop3): 1 truncate cleaned up
[   83.279109][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.298238][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'.
[   83.324554][ T6264] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.382660][ T6277] vhci_hcd: invalid port number 96
[   83.388027][ T6277] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   83.395260][ T4793] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.414525][ T3305] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /136/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   83.446145][ T4793] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.450936][ T3305] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   83.471498][ T4793] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.489480][ T4793] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.507926][ T3305] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /136/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   83.534121][ T3305] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   83.545776][ T6284] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[   83.555150][ T3305] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /136/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   83.590228][ T6284] loop5: detected capacity change from 0 to 512
[   83.594972][ T3305] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   83.596963][ T6284] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   83.620521][ T3305] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /136/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   83.651862][ T3305] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   83.672255][ T3305] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /136/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   83.694703][ T3305] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   83.777433][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.761'.
[   84.084731][ T3772] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.464797][ T6275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.494106][ T3772] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.541315][ T3772] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.583028][ T3772] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.738511][ T3772] bridge_slave_1: left allmulticast mode
[   84.744441][ T3772] bridge_slave_1: left promiscuous mode
[   84.750289][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.761824][ T3772] bridge_slave_0: left allmulticast mode
[   84.767678][ T3772] bridge_slave_0: left promiscuous mode
[   84.773569][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.837095][ T6330] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   85.015966][ T3772] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.044361][ T6340] loop5: detected capacity change from 0 to 256
[   85.051054][ T3772] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.066515][ T6340] FAT-fs (loop5): Directory bread(block 64) failed
[   85.073308][ T6340] FAT-fs (loop5): Directory bread(block 65) failed
[   85.080954][ T6340] FAT-fs (loop5): Directory bread(block 66) failed
[   85.081024][ T3772] 
 (unregistering): Released all slaves
[   85.087682][ T6340] FAT-fs (loop5): Directory bread(block 67) failed
[   85.102785][ T3772] bond0 (unregistering): Released all slaves
[   85.103830][ T6340] FAT-fs (loop5): Directory bread(block 68) failed
[   85.115470][ T6340] FAT-fs (loop5): Directory bread(block 69) failed
[   85.123362][ T6340] FAT-fs (loop5): Directory bread(block 70) failed
[   85.130162][ T6303] chnl_net:caif_netlink_parms(): no params data found
[   85.144464][ T6340] FAT-fs (loop5): Directory bread(block 71) failed
[   85.158718][ T6340] FAT-fs (loop5): Directory bread(block 72) failed
[   85.165654][ T6340] FAT-fs (loop5): Directory bread(block 73) failed
[   85.175933][ T3772] tipc: Left network mode
[   85.201456][ T3772] hsr_slave_0: left promiscuous mode
[   85.208726][ T3772] hsr_slave_1: left promiscuous mode
[   85.210419][   T29] kauditd_printk_skb: 457 callbacks suppressed
[   85.210434][   T29] audit: type=1326 audit(1757440042.397:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.214742][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.220626][   T29] audit: type=1326 audit(1757440042.397:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.244321][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.251825][   T29] audit: type=1326 audit(1757440042.397:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.251859][   T29] audit: type=1326 audit(1757440042.397:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.251920][   T29] audit: type=1326 audit(1757440042.397:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.251942][   T29] audit: type=1326 audit(1757440042.397:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.251962][   T29] audit: type=1326 audit(1757440042.397:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.251983][   T29] audit: type=1326 audit(1757440042.397:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.296026][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[   85.306034][   T29] audit: type=1326 audit(1757440042.397:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.456301][   T29] audit: type=1326 audit(1757440042.407:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6339 comm="syz.5.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   85.487538][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.487603][ T6346] 9pnet_fd: Insufficient options for proto=fd
[   85.495093][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.511957][ T3772] veth1_macvtap: left promiscuous mode
[   85.517583][ T3772] veth0_macvtap: left promiscuous mode
[   85.523405][ T3772] veth1_vlan: left promiscuous mode
[   85.526517][ T6353] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.775'.
[   85.528899][ T3772] veth0_vlan: left promiscuous mode
[   85.604211][ T3772] team0 (unregistering): Port device team_slave_1 removed
[   85.615668][ T3772] team0 (unregistering): Port device team_slave_0 removed
[   85.652505][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.659832][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.683182][ T6303] bridge_slave_0: entered allmulticast mode
[   85.689716][ T6303] bridge_slave_0: entered promiscuous mode
[   85.696876][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.704054][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.711891][ T6303] bridge_slave_1: entered allmulticast mode
[   85.719776][ T6303] bridge_slave_1: entered promiscuous mode
[   85.739081][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.760031][ T6303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.784025][ T6303] team0: Port device team_slave_0 added
[   85.792437][ T6303] team0: Port device team_slave_1 added
[   85.814394][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.821449][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.847622][ T6303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.860959][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.867995][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.894475][ T6303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.951517][ T6366] loop5: detected capacity change from 0 to 4096
[   85.960605][ T6366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.956984][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'.
[   87.215335][ T6303] hsr_slave_0: entered promiscuous mode
[   87.250428][ T6375] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[   87.305856][ T6303] hsr_slave_1: entered promiscuous mode
[   87.324239][ T6303] debugfs: 'hsr0' already exists in 'hsr'
[   87.330054][ T6303] Cannot create hsr debugfs directory
[   87.339759][ T6376] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[   87.349953][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.373591][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.396907][ T6375] bond0: (slave dummy0): Releasing backup interface
[   87.408963][ T6375] team0: Port device dummy0 added
[   87.418378][ T6381] loop4: detected capacity change from 0 to 128
[   87.428488][ T6376] team0: Port device dummy0 removed
[   87.435644][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.782'.
[   87.459706][ T6383] loop5: detected capacity change from 0 to 128
[   87.471116][ T6376] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   87.595268][ T6303] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   87.597954][ T6396] loop4: detected capacity change from 0 to 2048
[   87.608920][ T6398] ALSA: seq fatal error: cannot create timer (-22)
[   87.616823][ T6396] EXT4-fs: Mount option(s) incompatible with ext2
[   87.618627][ T6303] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   87.643066][ T6303] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   87.655828][ T6303] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   87.807721][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.819808][ T6303] 8021q: adding VLAN 0 to HW filter on device team0
[   87.844811][ T6303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   87.855405][ T6303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.882843][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.890117][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.907350][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.914513][ T3772] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.928979][ T6427] cgroup: No subsys list or none specified
[   88.353669][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.623644][ T6303] veth0_vlan: entered promiscuous mode
[   88.637648][ T6303] veth1_vlan: entered promiscuous mode
[   88.653699][ T6456] loop5: detected capacity change from 0 to 512
[   88.667182][ T6303] veth0_macvtap: entered promiscuous mode
[   88.683028][ T6456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[   88.699918][ T6303] veth1_macvtap: entered promiscuous mode
[   88.705882][ T6456] System zones: 1-12
[   88.718328][ T6456] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.796: error while reading EA inode 32 err=-116
[   88.735116][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.772024][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.790721][ T6456] EXT4-fs (loop5): Remounting filesystem read-only
[   88.797295][ T6456] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   88.821134][ T3772] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.856315][ T3772] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.874339][ T6456] EXT4-fs (loop5): 1 orphan inode deleted
[   88.883253][ T3772] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.899726][ T6456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.914599][ T3772] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.938285][ T6465] netlink: 'syz.6.765': attribute type 19 has an invalid length.
[   88.946184][ T6465] netlink: 55 bytes leftover after parsing attributes in process `syz.6.765'.
[   89.016190][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.272144][ T6481] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   89.272144][ T6481]    program syz.6.803 not setting count and/or reply_len properly
[   89.557655][ T6488] loop4: detected capacity change from 0 to 128
[   89.660496][ T6488] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   89.686524][ T6488] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.707774][ T6492] vlan0: entered allmulticast mode
[   89.957436][ T3329] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.989274][ T6497] loop4: detected capacity change from 0 to 128
[   90.048564][ T6499] 9pnet_fd: Insufficient options for proto=fd
[   90.055266][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.099866][ T6495] 8021q: adding VLAN 0 to HW filter on device team0
[   90.128047][ T6495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.226285][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6510 comm=syz.0.814
[   90.239056][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6510 comm=syz.0.814
[   90.251689][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6510 comm=syz.0.814
[   90.298649][   T29] kauditd_printk_skb: 344 callbacks suppressed
[   90.298682][   T29] audit: type=1326 audit(1757440047.487:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5fb0205ba7 code=0x7ffc0000
[   90.347524][   T29] audit: type=1326 audit(1757440047.487:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fb01aadb9 code=0x7ffc0000
[   90.370912][   T29] audit: type=1326 audit(1757440047.487:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5fb0205ba7 code=0x7ffc0000
[   90.394235][   T29] audit: type=1326 audit(1757440047.487:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fb01aadb9 code=0x7ffc0000
[   90.417612][   T29] audit: type=1326 audit(1757440047.487:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   90.441022][   T29] audit: type=1326 audit(1757440047.487:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   90.464911][   T29] audit: type=1326 audit(1757440047.497:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   90.488456][   T29] audit: type=1326 audit(1757440047.497:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   90.512051][   T29] audit: type=1326 audit(1757440047.497:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   90.535586][   T29] audit: type=1326 audit(1757440047.497:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5fb0205ba7 code=0x7ffc0000
[   90.959983][ T6537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   90.961389][ T6539] netlink: 14 bytes leftover after parsing attributes in process `syz.4.822'.
[   91.026467][ T6544] loop4: detected capacity change from 0 to 2048
[   91.246113][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.306136][ T6539] SELinux: failed to load policy
[   91.398748][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.689054][ T6575] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20004
[   91.854222][ T6585] netlink: 'syz.5.835': attribute type 1 has an invalid length.
[   92.225966][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.844'.
[   92.246754][ T6618] ±ÿ: renamed from team_slave_1 (while UP)
[   92.296680][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz.6.839'.
[   92.826335][ T6626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.917765][ T6629] loop4: detected capacity change from 0 to 8192
[   92.974082][ T6635] loop6: detected capacity change from 0 to 1019
[   93.037086][ T6644] loop6: detected capacity change from 0 to 512
[   93.174939][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.178479][ T6653] loop6: detected capacity change from 0 to 512
[   93.205725][ T6653] EXT4-fs: Ignoring removed nobh option
[   93.225543][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.264862][ T6653] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.854: corrupted inode contents
[   93.281023][ T6653] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.854: mark_inode_dirty error
[   93.308093][ T6653] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.854: corrupted inode contents
[   93.323482][ T6653] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.854: mark_inode_dirty error
[   93.342972][ T6662] dvmrp1: tun_chr_ioctl cmd 1074025677
[   93.346529][ T6653] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.854: Failed to acquire dquot type 0
[   93.348625][ T6662] dvmrp1: linktype set to 773
[   93.373841][ T6653] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.854: corrupted inode contents
[   93.386393][ T6653] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.854: mark_inode_dirty error
[   93.399099][ T6653] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.854: corrupted inode contents
[   93.412927][ T6653] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.854: mark_inode_dirty error
[   93.428687][ T6653] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.854: corrupted inode contents
[   93.445291][ T6653] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[   93.461937][ T6653] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.854: corrupted inode contents
[   93.477087][ T6653] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.854: mark_inode_dirty error
[   93.490428][ T6671] netlink: 'syz.1.858': attribute type 13 has an invalid length.
[   93.501062][ T6671] gretap0: refused to change device tx_queue_len
[   93.503633][ T6653] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[   93.507704][ T6671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.531369][ T6653] EXT4-fs (loop6): 1 truncate cleaned up
[   93.548954][ T6653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.562637][ T6653] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.577400][ T6653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.694212][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.702754][ T6676] bond0: (slave bond1): Enslaving as an active interface with an up link
[   93.773231][ T6685] netlink: 32 bytes leftover after parsing attributes in process `syz.5.863'.
[   93.827689][ T6685] loop5: detected capacity change from 0 to 1024
[   93.835209][ T6685] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   93.840340][ T6699] syz_tun: entered allmulticast mode
[   93.927267][ T6685] 9pnet: Could not find request transport: r
[   93.950183][ T6712] netlink: 71 bytes leftover after parsing attributes in process `syz.4.868'.
[   94.068641][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.869'.
[   94.082252][ T6710] bridge0: port 3(batadv1) entered blocking state
[   94.088765][ T6710] bridge0: port 3(batadv1) entered disabled state
[   94.097785][ T6710] batadv1: entered allmulticast mode
[   94.098361][ T6715] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   94.098361][ T6715]    program syz.4.870 not setting count and/or reply_len properly
[   94.107560][ T6710] batadv1: entered promiscuous mode
[   94.134254][ T6717] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   94.172231][ T6722] 9pnet_fd: Insufficient options for proto=fd
[   94.231305][ T6723] loop5: detected capacity change from 0 to 128
[   94.252624][ T6727] loop6: detected capacity change from 0 to 512
[   94.259572][ T6727] msdos: Bad value for 'errors'
[   94.296218][ T6729] loop6: detected capacity change from 0 to 1024
[   94.306725][ T6729] EXT4-fs: inline encryption not supported
[   94.312634][ T6729] EXT4-fs: Ignoring removed i_version option
[   94.324066][ T6729] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   94.338855][ T6729] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.874: lblock 2 mapped to illegal pblock 2 (length 1)
[   94.354679][ T6729] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.874: lblock 0 mapped to illegal pblock 48 (length 1)
[   94.369446][ T6729] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.874: Failed to acquire dquot type 0
[   94.374902][ T6733] lo speed is unknown, defaulting to 1000
[   94.398897][ T6729] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   94.409912][ T6729] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.874: mark_inode_dirty error
[   94.430293][ T6729] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   94.450689][ T6733] lo speed is unknown, defaulting to 1000
[   94.473501][ T6729] EXT4-fs (loop6): 1 orphan inode deleted
[   94.488754][ T6733] lo speed is unknown, defaulting to 1000
[   94.496819][  T264] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.511692][ T6729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.533633][  T264] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0
[   94.579514][ T6741] IPv6: NLM_F_CREATE should be specified when creating new route
[   94.580095][ T6303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.596923][  T264] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   94.606177][  T264] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   94.632503][ T6733] infiniband s
z1: set active
[   94.637300][ T6733] infiniband s
z1: added lo
[   94.641912][ T3367] lo speed is unknown, defaulting to 1000
[   94.650451][ T6303] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   94.670346][ T6303] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   94.682867][ T6303] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[   94.696104][ T6733] RDS/IB: s
z1: added
[   94.704553][ T6733] smc: adding ib device s
z1 with port count 1
[   94.710990][ T6733] smc:    ib device s
z1 port 1 has pnetid 
[   94.717379][   T10] lo speed is unknown, defaulting to 1000
[   94.725707][ T6733] lo speed is unknown, defaulting to 1000
[   94.731641][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'.
[   94.753881][ T6749] netlink: 312 bytes leftover after parsing attributes in process `syz.6.878'.
[   94.761053][ T6733] lo speed is unknown, defaulting to 1000
[   94.763009][ T6749] netlink: 'syz.6.878': attribute type 1 has an invalid length.
[   94.798805][ T6733] lo speed is unknown, defaulting to 1000
[   94.808281][ T6751] loop4: detected capacity change from 0 to 1024
[   94.836624][ T6751] EXT4-fs: Ignoring removed nobh option
[   94.838324][ T6733] lo speed is unknown, defaulting to 1000
[   94.842251][ T6751] EXT4-fs: Ignoring removed bh option
[   94.864524][ T6751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.916948][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.918118][ T6733] lo speed is unknown, defaulting to 1000
[   95.034078][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.887'.
[   95.054638][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.887'.
[   95.301833][   T29] kauditd_printk_skb: 691 callbacks suppressed
[   95.301866][   T29] audit: type=1326 audit(1757440052.497:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   95.438483][   T29] audit: type=1326 audit(1757440052.527:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.6.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   95.462622][   T29] audit: type=1326 audit(1757440052.527:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.6.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   95.486011][   T29] audit: type=1326 audit(1757440052.527:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.6.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   95.509473][   T29] audit: type=1326 audit(1757440052.527:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.6.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   95.532899][   T29] audit: type=1326 audit(1757440052.527:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.6.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   95.556602][   T29] audit: type=1326 audit(1757440052.527:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.6.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb020ebe9 code=0x7ffc0000
[   95.580222][   T29] audit: type=1326 audit(1757440052.537:8433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   95.603557][   T29] audit: type=1326 audit(1757440052.537:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   95.626914][   T29] audit: type=1326 audit(1757440052.537:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[   95.711483][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'.
[   95.721564][ T6798] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.754008][ T6801] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[   95.763898][ T6798] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.783868][ T6801] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.799045][ T6800] bond2: (slave geneve2): making interface the new active one
[   95.827357][ T6800] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   95.836128][ T3785] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.850146][ T6798] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.862799][ T3785] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.872538][ T3785] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.895073][ T3785] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.923147][ T6798] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.954710][ T6812] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.986167][ T6817] loop4: detected capacity change from 0 to 1024
[   96.011193][ T6817] EXT4-fs (loop4): invalid first ino: 10
[   96.017473][ T1864] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.030857][ T1864] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.042093][ T6812] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.096667][ T1864] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.106404][ T1864] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.118608][ T6817] lo speed is unknown, defaulting to 1000
[   96.127584][ T6812] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.181614][ T6824] netlink: 'syz.5.901': attribute type 21 has an invalid length.
[   96.195003][ T6826] 9pnet_fd: Insufficient options for proto=fd
[   96.223199][ T6812] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.976663][ T3785] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.005452][ T3785] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.008630][ T6853] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   97.008630][ T6853]    program syz.6.911 not setting count and/or reply_len properly
[   97.047644][ T3785] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.273900][ T3785] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.417774][ T6867] SELinux:  Context  is not valid (left unmapped).
[   97.439695][ T6867] SELinux:  Context  is not valid (left unmapped).
[   97.498137][ T6879] netlink: 'syz.4.920': attribute type 10 has an invalid length.
[   97.548754][ T6877] lo speed is unknown, defaulting to 1000
[   97.577037][ T6879] loop4: detected capacity change from 0 to 512
[   97.628116][ T6879] EXT4-fs (loop4): 1 orphan inode deleted
[   97.645489][ T4049] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:34: Failed to release dquot type 1
[   97.659016][ T6879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.722580][ T6879] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.792886][ T6892] __nla_validate_parse: 3 callbacks suppressed
[   97.792904][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'.
[   97.829794][ T6894] SELinux:  Context Ü is not valid (left unmapped).
[   97.876828][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.125389][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'.
[   98.218385][ T6916] lo speed is unknown, defaulting to 1000
[   99.078678][ T6920] lo speed is unknown, defaulting to 1000
[   99.198382][ T6928] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   99.198382][ T6928]    program syz.6.936 not setting count and/or reply_len properly
[   99.235759][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.939'.
[   99.251886][ T6931] loop4: detected capacity change from 0 to 1024
[   99.268395][ T6931] EXT4-fs: Ignoring removed orlov option
[   99.271047][ T6892] Set syz1 is full, maxelem 65536 reached
[   99.297607][ T6931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.482356][ T1864] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.494873][ T1864] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.506026][ T6949] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   99.521998][ T1864] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.534773][ T1864] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.850533][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.135471][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'.
[  100.152892][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'.
[  100.162580][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'.
[  100.309460][   T29] kauditd_printk_skb: 361 callbacks suppressed
[  100.309478][   T29] audit: type=1326 audit(1757440057.497:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.360861][   T29] audit: type=1326 audit(1757440057.557:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.384693][   T29] audit: type=1326 audit(1757440057.557:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.418657][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.948'.
[  100.493172][   T29] audit: type=1326 audit(1757440057.647:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.517018][ T6983] loop4: detected capacity change from 0 to 128
[  100.526887][ T6983] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  100.532932][ T6987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.561187][   T29] audit: type=1326 audit(1757440057.687:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.584915][   T29] audit: type=1326 audit(1757440057.687:8801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.608333][   T29] audit: type=1326 audit(1757440057.687:8802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.631842][   T29] audit: type=1326 audit(1757440057.687:8803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.655276][   T29] audit: type=1326 audit(1757440057.687:8804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.678707][   T29] audit: type=1326 audit(1757440057.687:8805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cda7ebe9 code=0x7ffc0000
[  100.815773][ T6995] loop4: detected capacity change from 0 to 128
[  100.873842][ T7004] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  100.873842][ T7004]    program syz.4.960 not setting count and/or reply_len properly
[  100.961020][ T7008] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  100.967665][ T7008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  100.975346][ T7008] vhci_hcd vhci_hcd.0: Device attached
[  100.981899][ T7014] sctp: [Deprecated]: syz.0.963 (pid 7014) Use of int in maxseg socket option.
[  100.981899][ T7014] Use struct sctp_assoc_value instead
[  101.070799][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'.
[  101.079716][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.087254][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.095059][ T7032] batman_adv: batadv0: Removing interface: dummy0
[  101.106491][ T7032] bond0: (slave batadv0): Releasing backup interface
[  101.214708][ T7037] loop5: detected capacity change from 0 to 1024
[  101.221532][   T10] usb 13-1: new low-speed USB device number 2 using vhci_hcd
[  101.223318][ T7037] EXT4-fs: Ignoring removed oldalloc option
[  101.246911][ T7037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  101.255703][ T7037] System zones: 0-1, 3-12
[  101.261578][ T7037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.265087][ T7047] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  101.292985][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.545557][ T7060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.713970][ T7060] syzkaller0: entered promiscuous mode
[  101.719581][ T7060] syzkaller0: entered allmulticast mode
[  101.762333][ T7065] netlink: 'syz.0.978': attribute type 3 has an invalid length.
[  101.780117][ T7010] vhci_hcd: connection reset by peer
[  101.785807][ T7057] tipc: Resetting bearer <eth:syzkaller0>
[  101.791793][ T4825] vhci_hcd: stop threads
[  101.796080][ T4825] vhci_hcd: release socket
[  101.800582][ T4825] vhci_hcd: disconnect device
[  101.807134][ T7057] tipc: Disabling bearer <eth:syzkaller0>
[  101.839738][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.980'.
[  102.424649][ T7087] bpf: Bad value for 'gid'
[  102.513853][ T7093] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  102.513853][ T7093]    program syz.6.987 not setting count and/or reply_len properly
[  102.717141][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[  102.966674][ T7095] random: crng reseeded on system resumption
[  103.023246][ T7114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  103.030145][ T7114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  103.037762][ T7114] vhci_hcd vhci_hcd.0: Device attached
[  103.039525][ T7107] loop4: detected capacity change from 0 to 8192
[  103.289410][ T3411] usb 3-1: new low-speed USB device number 3 using vhci_hcd
[  103.355557][ T7146] ref_ctr increment failed for inode: 0xc9 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005e780
[  103.370776][ T7146] ref_ctr increment failed for inode: 0xc9 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005e780
[  103.450204][ T7145] uprobe: syz.6.1002:7145 failed to unregister, leaking uprobe
[  103.480441][ T7152] loop5: detected capacity change from 0 to 512
[  103.487418][ T7152] EXT4-fs: Ignoring removed nobh option
[  103.496836][ T7152] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  103.508848][ T7152] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1003: invalid indirect mapped block 256 (level 1)
[  103.524058][ T7145] uprobe: syz.6.1002:7145 failed to unregister, leaking uprobe
[  103.541698][ T7152] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1003: invalid indirect mapped block 2683928664 (level 1)
[  103.597620][ T7152] EXT4-fs (loop5): 1 truncate cleaned up
[  103.616902][ T7155] ALSA: seq fatal error: cannot create timer (-22)
[  103.635875][ T7152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.730516][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.803782][ T7166] serio: Serial port ttyS3
[  103.823898][ T7115] vhci_hcd: connection reset by peer
[  103.837898][ T4049] vhci_hcd: stop threads
[  103.842639][ T4049] vhci_hcd: release socket
[  103.847117][ T4049] vhci_hcd: disconnect device
[  103.870981][ T7168] loop4: detected capacity change from 0 to 512
[  103.885004][ T7166] pimreg: entered allmulticast mode
[  103.913277][ T7166] pimreg: left allmulticast mode
[  103.983024][ T7168] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1008: casefold flag without casefold feature
[  104.034083][ T7168] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1008: couldn't read orphan inode 15 (err -117)
[  104.047287][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.150513][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.234900][ T7174] __nla_validate_parse: 1 callbacks suppressed
[  104.234918][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'.
[  104.312353][ T7174] team1: entered promiscuous mode
[  104.317638][ T7174] team1: entered allmulticast mode
[  104.350263][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'.
[  104.388968][ T7176] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1011'.
[  104.398635][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'.
[  104.442338][ T7178] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  104.442338][ T7178]    program syz.4.1012 not setting count and/or reply_len properly
[  104.563517][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'.
[  104.602390][ T7186] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1015'.
[  104.617756][ T7188] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  104.617756][ T7188]    program syz.5.1016 not setting count and/or reply_len properly
[  104.620295][ T7186] C: renamed from team_slave_0 (while UP)
[  104.671184][ T7181] vxcan0: entered promiscuous mode
[  104.676402][ T7181] vxcan0: entered allmulticast mode
[  104.701145][ T7189] can0: slcan on ttyS3.
[  104.731628][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'.
[  104.787398][ T7184] can0 (unregistered): slcan off ttyS3.
[  105.193818][ T7212] loop4: detected capacity change from 0 to 256
[  105.324594][   T29] kauditd_printk_skb: 564 callbacks suppressed
[  105.324612][   T29] audit: type=1326 audit(1757440062.517:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.579978][   T29] audit: type=1326 audit(1757440062.547:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.603849][   T29] audit: type=1326 audit(1757440062.557:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.627447][   T29] audit: type=1326 audit(1757440062.637:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.651083][   T29] audit: type=1326 audit(1757440062.647:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.674786][   T29] audit: type=1326 audit(1757440062.657:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.698622][   T29] audit: type=1326 audit(1757440062.737:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.722110][   T29] audit: type=1326 audit(1757440062.747:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.745532][   T29] audit: type=1326 audit(1757440062.757:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.769122][   T29] audit: type=1326 audit(1757440062.767:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  105.849374][ T7224] loop5: detected capacity change from 0 to 512
[  105.868519][ T7222] loop4: detected capacity change from 0 to 8192
[  105.878460][ T7224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.933193][ T7230] netlink: 'syz.1.1029': attribute type 1 has an invalid length.
[  106.045209][ T7236] macvtap1: entered promiscuous mode
[  106.055663][ T7236] vlan0: entered promiscuous mode
[  106.062085][ T7236] team0: Device macvtap1 failed to register rx_handler
[  106.062744][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.078340][ T7236] vlan0: left promiscuous mode
[  106.160694][ T7244] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  106.160694][ T7244]    program syz.6.1035 not setting count and/or reply_len properly
[  106.242102][ T7252] bridge_slave_0: left allmulticast mode
[  106.247786][ T7252] bridge_slave_0: left promiscuous mode
[  106.253823][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.259555][   T10] usb 13-1: enqueue for inactive port 0
[  106.268930][ T7252] bridge_slave_1: left allmulticast mode
[  106.273371][   T10] usb 13-1: enqueue for inactive port 0
[  106.274774][ T7252] bridge_slave_1: left promiscuous mode
[  106.285973][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.299164][ T7252] bond0: (slave bond_slave_0): Releasing backup interface
[  106.311137][ T7252] bond0: (slave bond_slave_1): Releasing backup interface
[  106.326441][ T7252] team0: Port device team_slave_0 removed
[  106.337060][ T7252] team0: Port device 
2
6±ÿ removed
[  106.344088][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.351535][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.359031][   T10] vhci_hcd: vhci_device speed not set
[  106.367233][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.374678][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.395625][   T36] lo speed is unknown, defaulting to 1000
[  106.497858][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'.
[  106.512033][ T7263] bridge_slave_0: left allmulticast mode
[  106.517743][ T7263] bridge_slave_0: left promiscuous mode
[  106.523493][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.532561][ T7263] bridge_slave_1: left allmulticast mode
[  106.538237][ T7263] bridge_slave_1: left promiscuous mode
[  106.544066][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.577928][ T7263] bond0: (slave bond_slave_0): Releasing backup interface
[  106.587297][ T7263] bond0: (slave bond_slave_1): Releasing backup interface
[  106.603059][ T7263] team0: Port device team_slave_0 removed
[  106.611521][ T7263] team0: Port device team_slave_1 removed
[  106.617829][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.625524][ T7265] loop5: detected capacity change from 0 to 1764
[  106.632307][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.809395][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'.
[  106.818496][ T7269] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1041'.
[  106.929758][ T7281] loop4: detected capacity change from 0 to 1024
[  106.945525][ T7281] journal_path: Non-blockdev passed as './file1'
[  106.951936][ T7281] EXT4-fs: error: could not find journal device path
[  107.204836][ T7289] can0: slcan on ttyS3.
[  107.457215][ T7294] netlink: 'syz.0.1048': attribute type 2 has an invalid length.
[  107.465617][ T7295] netlink: 'syz.0.1048': attribute type 2 has an invalid length.
[  107.490223][ T7294] netlink: 'syz.0.1048': attribute type 2 has an invalid length.
[  107.516020][ T7296] tipc: New replicast peer: 255.255.255.255
[  107.522358][ T7296] tipc: Enabled bearer <udp:s>, priority 10
[  107.556233][ T7296] unsupported nla_type 52263
[  107.566504][ T7289] loop4: detected capacity change from 0 to 32768
[  107.699439][ T7289] can0 (unregistered): slcan off ttyS3.
[  107.740946][ T7319] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  107.740946][ T7319]    program syz.1.1054 not setting count and/or reply_len properly
[  107.792698][ T7325] netlink: 'syz.4.1053': attribute type 2 has an invalid length.
[  107.800637][ T7325] netlink: 'syz.4.1053': attribute type 8 has an invalid length.
[  107.810075][ T7326] 8021q: VLANs not supported on wg2
[  107.934167][ T7338] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.947016][ T7338] loop6: detected capacity change from 0 to 128
[  107.959098][ T7338] FAT-fs (loop6): Directory bread(block 162) failed
[  107.968429][ T7338] FAT-fs (loop6): Directory bread(block 163) failed
[  107.976694][ T7338] FAT-fs (loop6): Directory bread(block 164) failed
[  108.034328][ T7338] FAT-fs (loop6): Directory bread(block 165) failed
[  108.046128][ T7343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7343 comm=syz.4.1062
[  108.060578][ T7338] FAT-fs (loop6): Directory bread(block 166) failed
[  108.091938][ T7352] netlink: 'syz.5.1064': attribute type 13 has an invalid length.
[  108.105242][ T7338] FAT-fs (loop6): Directory bread(block 167) failed
[  108.105976][    T9] IPVS: starting estimator thread 0...
[  108.119404][ T7346] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  108.131241][ T7338] FAT-fs (loop6): Directory bread(block 168) failed
[  108.137957][ T7338] FAT-fs (loop6): Directory bread(block 169) failed
[  108.170262][ T7352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.201815][ T7355] IPVS: using max 2832 ests per chain, 141600 per kthread
[  108.206762][ T7353] lo speed is unknown, defaulting to 1000
[  108.226275][ T7361] loop4: detected capacity change from 0 to 512
[  108.241307][ T7361] EXT4-fs: Ignoring removed i_version option
[  108.247527][ T7361] ext2: Unknown parameter 'nouser_xattr'
[  108.261082][ T7366] netlink: 'syz.6.1066': attribute type 1 has an invalid length.
[  108.309995][ T7374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  108.336942][ T7361] loop4: detected capacity change from 0 to 8192
[  108.350959][ T3411] usb 3-1: enqueue for inactive port 0
[  108.385454][ T3411] usb 3-1: enqueue for inactive port 0
[  108.400006][ T7361]  loop4: p1 p2 p3 p4[EZD]
[  108.404595][ T7361] loop4: p1 size 16128 extends beyond EOD, truncated
[  108.415752][ T7361] loop4: p3 start 458783 is beyond EOD, truncated
[  108.422296][ T7361] loop4: p4 size 65536 extends beyond EOD, truncated
[  108.460778][ T3411] vhci_hcd: vhci_device speed not set
[  108.580144][ T7396] netem: incorrect gi model size
[  108.585167][ T7396] netem: change failed
[  108.639477][    T9] tipc: Node number set to 630322888
[  108.683307][ T7404] veth0: entered promiscuous mode
[  108.751548][ T7413] loop4: detected capacity change from 0 to 512
[  108.763366][ T7397] veth0: left promiscuous mode
[  108.781978][ T7413] EXT4-fs (loop4): too many log groups per flexible block group
[  108.789877][ T7413] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  108.797966][ T7413] EXT4-fs (loop4): mount failed
[  108.836671][ T7421] bond0: (slave dummy0): Releasing backup interface
[  108.844679][ T7421] batman_adv: batadv0: Adding interface: dummy0
[  108.851081][ T7421] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.876732][ T7421] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  108.922760][ T7423] loop6: detected capacity change from 0 to 2048
[  109.050903][ T7430] loop4: detected capacity change from 0 to 512
[  109.057651][ T7423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.072090][ T7430] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #17: comm syz.4.1085: iget: bogus i_mode (0)
[  109.084174][ T7430] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1085: couldn't read orphan inode 17 (err -117)
[  109.116164][ T6303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.127486][ T7430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.165978][ T7439] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  109.165978][ T7439]    program syz.1.1088 not setting count and/or reply_len properly
[  109.183690][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.325793][ T7451] loop4: detected capacity change from 0 to 128
[  109.334632][ T7451] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.347080][ T7451] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.428711][ T3329] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.464498][ T7459] loop5: detected capacity change from 0 to 164
[  109.541813][ T7465] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  109.548374][ T7465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  109.555918][ T7465] vhci_hcd vhci_hcd.0: Device attached
[  109.666604][ T7480] SELinux:  policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c
[  109.677542][ T7480] SELinux: failed to load policy
[  109.686334][ T7485] __nla_validate_parse: 12 callbacks suppressed
[  109.686348][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'.
[  109.809487][ T3411] usb 11-1: new low-speed USB device number 2 using vhci_hcd
[  109.872488][ T7510] 
: renamed from bond0
[  110.154130][ T7533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=7533 comm=syz.0.1113
[  110.192984][ T7536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1117'.
[  110.202196][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'.
[  110.211485][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  110.223967][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1117'.
[  110.301226][ T7538] lo speed is unknown, defaulting to 1000
[  110.326445][ T7467] vhci_hcd: connection reset by peer
[  110.332045][   T29] kauditd_printk_skb: 667 callbacks suppressed
[  110.332061][   T29] audit: type=1326 audit(1757440067.527:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.340935][ T4781] vhci_hcd: stop threads
[  110.366199][ T4781] vhci_hcd: release socket
[  110.370747][ T4781] vhci_hcd: disconnect device
[  110.428229][   T29] audit: type=1326 audit(1757440067.567:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.453225][   T29] audit: type=1326 audit(1757440067.577:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.476973][   T29] audit: type=1400 audit(1757440067.577:10050): avc:  denied  { block_suspend } for  pid=7530 comm="syz.6.1115" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  110.498633][   T29] audit: type=1326 audit(1757440067.587:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.522352][   T29] audit: type=1326 audit(1757440067.597:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.546309][   T29] audit: type=1326 audit(1757440067.607:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.570284][   T29] audit: type=1326 audit(1757440067.617:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.719412][   T29] audit: type=1326 audit(1757440067.697:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.743185][   T29] audit: type=1326 audit(1757440067.697:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ca7ebe9 code=0x7ffc0000
[  110.861753][ T7552] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  110.861753][ T7552]    program syz.5.1120 not setting count and/or reply_len properly
[  110.962975][ T7555] netlink: 'syz.1.1121': attribute type 16 has an invalid length.
[  110.970898][ T7555] netlink: 'syz.1.1121': attribute type 17 has an invalid length.
[  111.263927][ T7560] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1123'.
[  111.297602][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'.
[  111.347647][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1123'.
[  111.443764][ T7563] loop4: detected capacity change from 0 to 2048
[  111.479875][ T7563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.502709][ T7563] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.1124: bit already cleared for inode 15
[  111.598839][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.625096][ T7576] loop4: detected capacity change from 0 to 512
[  111.633489][ T7576] EXT4-fs: Ignoring removed oldalloc option
[  111.714592][ T7576] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1128: Parent and EA inode have the same ino 15
[  111.772878][ T7576] EXT4-fs (loop4): Remounting filesystem read-only
[  111.780880][ T7576] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30)
[  111.790242][ T7576] EXT4-fs (loop4): 1 orphan inode deleted
[  111.796559][ T7576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.857950][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.885135][ T7590] loop5: detected capacity change from 0 to 512
[  111.910104][ T7590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  111.941740][ T7590] EXT4-fs (loop5): failed to initialize system zone (-117)
[  111.960499][ T7590] EXT4-fs (loop5): mount failed
[  112.040808][ T7607] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1136'.
[  112.054828][ T7611] netlink: '+}[@': attribute type 3 has an invalid length.
[  112.123009][ T7615] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  112.123009][ T7615]    program syz.5.1139 not setting count and/or reply_len properly
[  113.057170][ T7630] serio: Serial port ptm0
[  113.128141][ T7646] SELinux:  policydb version 3264 does not match my version range 15-35
[  113.152210][ T7646] SELinux: failed to load policy
[  113.157716][ T7646] netlink: 'syz.6.1148': attribute type 21 has an invalid length.
[  113.166517][ T7646] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1148'.
[  113.175783][ T7646] netlink: 'syz.6.1148': attribute type 1 has an invalid length.
[  113.356093][ T7656] loop6: detected capacity change from 0 to 4096
[  113.366280][ T7656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.451502][ T6303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.952199][ T7665] lo speed is unknown, defaulting to 1000
[  113.970435][ T7667] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  113.970435][ T7667]    program syz.1.1155 not setting count and/or reply_len properly
[  114.363167][ T7675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=259 sclass=netlink_tcpdiag_socket pid=7675 comm=syz.4.1157
[  114.380241][ T7674] loop5: detected capacity change from 0 to 512
[  114.402435][ T7675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7675 comm=syz.4.1157
[  114.456540][ T7679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1549 sclass=netlink_tcpdiag_socket pid=7679 comm=syz.4.1157
[  114.481247][ T7674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.500528][ T7674] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.586732][ T7679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7679 comm=syz.4.1157
[  114.612717][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.631729][ T7675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7675 comm=syz.4.1157
[  114.646890][ T7675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=261 sclass=netlink_tcpdiag_socket pid=7675 comm=syz.4.1157
[  114.661596][ T7675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7675 comm=syz.4.1157
[  114.820828][ T3411] usb 11-1: enqueue for inactive port 0
[  114.831196][ T3411] usb 11-1: enqueue for inactive port 0
[  114.921527][ T3411] vhci_hcd: vhci_device speed not set
[  115.152713][ T7742] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  115.159363][ T7742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  115.166931][ T7742] vhci_hcd vhci_hcd.0: Device attached
[  115.325508][ T7764] IPVS: stopping master sync thread 4087 ...
[  115.342397][   T29] kauditd_printk_skb: 357 callbacks suppressed
[  115.342415][   T29] audit: type=1326 audit(1757440072.537:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.422950][   T29] audit: type=1326 audit(1757440072.537:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.446869][   T29] audit: type=1326 audit(1757440072.537:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.449501][ T3391] usb 3-1: new low-speed USB device number 4 using vhci_hcd
[  115.470747][   T29] audit: type=1326 audit(1757440072.567:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.501502][   T29] audit: type=1326 audit(1757440072.577:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  115.525263][   T29] audit: type=1326 audit(1757440072.577:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18389febe9 code=0x7ffc0000
[  115.548978][   T29] audit: type=1326 audit(1757440072.577:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.572799][   T29] audit: type=1326 audit(1757440072.587:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.596520][   T29] audit: type=1326 audit(1757440072.597:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.620337][   T29] audit: type=1326 audit(1757440072.607:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.1.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2baf3ebe9 code=0x7ffc0000
[  115.648274][ T7767] loop5: detected capacity change from 0 to 512
[  115.656249][ T7767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  115.673728][ T7767] EXT4-fs (loop5): 1 truncate cleaned up
[  115.681224][ T7767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.747269][ T5598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.775700][ T7777] loop5: detected capacity change from 0 to 1024
[  115.799769][ T7777] EXT4-fs: test_dummy_encryption option not supported
[  115.845228][ T7782] loop5: detected capacity change from 0 to 1024
[  115.897958][ T7790] netlink: 'syz.0.1190': attribute type 2 has an invalid length.
[  115.910971][ T7744] vhci_hcd: connection reset by peer
[  115.916571][ T4049] vhci_hcd: stop threads
[  115.921013][ T4049] vhci_hcd: release socket
[  115.925539][ T4049] vhci_hcd: disconnect device
[  116.006013][ T7782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7782 comm=syz.5.1188
[  116.151112][ T7801] netlink: 'syz.5.1194': attribute type 10 has an invalid length.
[  116.166763][ T7801] team0: Device hsr_slave_0 failed to register rx_handler
[  116.208059][ T7796] ==================================================================
[  116.216203][ T7796] BUG: KCSAN: data-race in __htab_map_lookup_elem / bpf_lru_pop_free
[  116.224305][ T7796] 
[  116.226645][ T7796] write to 0xffff88811a896d68 of 4 bytes by task 7800 on cpu 0:
[  116.234546][ T7796]  bpf_lru_pop_free+0xbf0/0xcd0
[  116.239431][ T7796]  __htab_lru_percpu_map_update_elem+0xea/0x600
[  116.245778][ T7796]  bpf_percpu_hash_update+0x61/0xa0
[  116.251015][ T7796]  bpf_map_update_value+0x297/0x3a0
[  116.256260][ T7796]  generic_map_update_batch+0x3f5/0x540
[  116.261825][ T7796]  bpf_map_do_batch+0x255/0x380
[  116.266693][ T7796]  __sys_bpf+0x5ee/0x7b0
[  116.270952][ T7796]  __x64_sys_bpf+0x41/0x50
[  116.275464][ T7796]  x64_sys_call+0x2aea/0x2ff0
[  116.280148][ T7796]  do_syscall_64+0xd2/0x200
[  116.284666][ T7796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.290580][ T7796] 
[  116.292912][ T7796] read to 0xffff88811a896d68 of 4 bytes by task 7796 on cpu 1:
[  116.300451][ T7796]  __htab_map_lookup_elem+0xab/0x150
[  116.305745][ T7796]  htab_lru_percpu_map_lookup_elem+0x20/0xb0
[  116.311732][ T7796]  bpf_prog_1592a6279ab44e8a+0x48/0x50
[  116.317200][ T7796]  bpf_trace_run2+0x107/0x1c0
[  116.321880][ T7796]  __traceiter_kfree+0x2b/0x50
[  116.326650][ T7796]  kfree+0x27b/0x320
[  116.330551][ T7796]  ___sys_recvmsg+0x135/0x370
[  116.335334][ T7796]  do_recvmmsg+0x1ef/0x540
[  116.339758][ T7796]  __x64_sys_recvmmsg+0xe5/0x170
[  116.344878][ T7796]  x64_sys_call+0x27a6/0x2ff0
[  116.349561][ T7796]  do_syscall_64+0xd2/0x200
[  116.354075][ T7796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.359974][ T7796] 
[  116.362312][ T7796] value changed: 0xaeb19548 -> 0x4d80cc09
[  116.368126][ T7796] 
[  116.370453][ T7796] Reported by Kernel Concurrency Sanitizer on:
[  116.376596][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.4.1189 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  116.386316][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  116.396374][ T7796] ==================================================================
[  116.536905][ T7808] loop6: detected capacity change from 0 to 512
[  116.555346][ T7808] EXT4-fs (loop6): too many log groups per flexible block group
[  116.563273][ T7808] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  116.571735][ T7808] EXT4-fs (loop6): mount failed
[  116.582611][ T7807] 9pnet_fd: Insufficient options for proto=fd
[  120.499485][ T3391] usb 3-1: enqueue for inactive port 0
[  120.505068][ T3391] usb 3-1: enqueue for inactive port 0
[  120.579602][ T3391] vhci_hcd: vhci_device speed not set