last executing test programs:

8m25.042281089s ago: executing program 2 (id=10):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff00000085000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000880), 0x12)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2185)
close(r1)
r4 = socket(0x10, 0x80003, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r5, &(0x7f0000000fc0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

8m24.930228261s ago: executing program 2 (id=12):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000002200)=[{{&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)}, {0x0}], 0x2}}], 0x1, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r6 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r8 = fspick(r7, &(0x7f0000000000)='.\x00', 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0)

8m24.565610928s ago: executing program 2 (id=18):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9c5, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x105048, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e0101000000000000000001001400"], 0x70}, 0x1, 0x7}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x890)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0x1}, 0x18)
r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r8, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8000, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x25c}}, 0x0)

8m24.120316587s ago: executing program 2 (id=19):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgrp(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x4, 0xffffffff, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000000000000000000700000044181533"], 0x30}}], 0x1, 0x4040)
write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b)

8m23.742339694s ago: executing program 2 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000180)={0x2, 0xac, 0x0, 0x3, 0x0, 0xa8, 0x0, 0x2, 0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m23.42631151s ago: executing program 2 (id=26):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$tun(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0xfdef)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

8m23.42602232s ago: executing program 32 (id=26):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$tun(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0xfdef)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

5m51.0661181s ago: executing program 0 (id=1248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r4, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b3300000000fcdbdf2505", @ANYRES32=r3], 0x28}}, 0x50)
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8)
sendto$inet6(r6, &(0x7f0000000000), 0x0, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

5m50.200960527s ago: executing program 0 (id=1264):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x159882, 0x1a3)
writev(r2, &(0x7f0000000200), 0x0)
mount(0x0, 0x0, 0x0, 0x2200020, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x92881, 0x30)
pwritev2(r4, &(0x7f0000000080), 0x0, 0x105405, 0x0, 0x0)
fsync(0xffffffffffffffff)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000016c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="7d4d914d", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT], 0x3, 0x7dc, &(0x7f0000000d80)="$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")
r5 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000540), 0x0, r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000008c0)=""/144, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

5m49.949739791s ago: executing program 0 (id=1256):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)

5m48.047322689s ago: executing program 0 (id=1266):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)='%pI4   \x00'}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file1\x00', r2, 0x4000, r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@acl}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@noinit_itable}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x800, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x30, 0x45}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "19f4cac3800d446f", "5f311dfe9f340765616121aeaf9fbd2b", "e07fd7aa", "3a948cf896841434"}, 0x28)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)

5m46.903072811s ago: executing program 0 (id=1277):
r0 = syz_open_procfs(0x0, 0x0)
read$msr(r0, &(0x7f0000000180)=""/174, 0xae)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000010, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000540)={0x23, 0x2, 0x8, 0x6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='fsi_master_acf_copro_command\x00', r4, 0x0, 0x10}, 0x18)
socket$packet(0x11, 0x3, 0x300)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b40008023050000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000040000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]})
nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="39020000000000"], 0x2c}}, 0x0)

5m44.89964808s ago: executing program 0 (id=1290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0)
pread64(r1, &(0x7f0000001600)=""/4081, 0x7, 0x12)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x80, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x1)
mkdirat(r4, &(0x7f0000000300)='./bus\x00', 0x0)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x20000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@gettfilter={0x44, 0x2e, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x7, 0xe}, {0x8, 0xe}}, [{0x8, 0xb, 0xa36}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x400)

5m44.837927881s ago: executing program 33 (id=1290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0)
pread64(r1, &(0x7f0000001600)=""/4081, 0x7, 0x12)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x80, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x1)
mkdirat(r4, &(0x7f0000000300)='./bus\x00', 0x0)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x20000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@gettfilter={0x44, 0x2e, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x7, 0xe}, {0x8, 0xe}}, [{0x8, 0xb, 0xa36}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x400)

4.974300453s ago: executing program 5 (id=4383):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='f2fs_truncate_partial_nodes\x00', r2, 0x0, 0x2}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
r3 = socket(0xa, 0x3, 0xfc)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x90, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x18, r5, 0x103, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000100)=ANY=[], 0xa8)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="4e54bdd2dd48", 'bond0\x00'}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x40080)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r10, 0x407, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

4.716904828s ago: executing program 3 (id=4384):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
mprotect(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]})
rt_sigpending(0x0, 0x0)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x1a, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

4.60551261s ago: executing program 5 (id=4385):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
shutdown(0xffffffffffffffff, 0x1)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.380860545s ago: executing program 3 (id=4386):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = eventfd(0x0)
io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0, 0x0, 0x2ff}])
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={0x0, r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r7 = dup2(r6, r6)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r7, 0x1276, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r8, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000700)={0x0, 0x3, "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"})
recvmmsg(r8, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000000a00)={0x0, "825ffe39d39123b0151241a76fe123cb"})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f00000001c0)=""/177, 0xb1})
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000100)=ANY=[])
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

4.12108789s ago: executing program 1 (id=4389):
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$kcm(0x2, 0xa, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x2, 0xa, 0x73)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
rmdir(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="110000000700000000008000919b1a64624d70023224e1dece2d03f67b6db52cccdc33cdbeb3c22aa225796e8d6a21938ac5205f01613deb40317143eac49434b75c7ed1db82412817e807a03ca2139b8938485a966b31573dcc272756c3bc7c06547b29e7a932153cf100bab6a59c22797801989e50b415154db768e12a61760555515fda9ca87ce716511a0962bf3944b91f"])
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000057b871770200000014000200626f6e642d00000000000000000000000900010073"], 0x43}}, 0x0)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032abd7000994cdf25020000000500049bb709aea17479c40600657468300000000000000000000000050004770200000005000400010000000900010073797a30000000000900030073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)

4.10268483s ago: executing program 5 (id=4390):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000000038740000000000000000ffe3000079e03cbfee3affde94b8d71bb31c32067d6a63fe381d0390e81b830dea68badf66729bc31385fbbbb61bab9ecc146cd9db1cc9f047892908b47149834ae5506eaaeff12a2203000000d9e39c78ec840626443c2e5ca42bee51d2334b70b503e25208040000000000000000fcffffff95b5999ec79359a400000000000086"], 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800010000064400078008000a400000000b060004404e2300000500070084000000060004404e240000060005404e1e0000080013400000064a060005404e22000008000b400000c24500"/88], 0x58}, 0x1, 0x0, 0x0, 0x4004a010}, 0x260000d0)
r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1])
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000040)=0x6e)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000007c0)={[{@debug}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@norecovery}, {@bh}, {@jqfmt_vfsv0}, {@resgid}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}, {@obj_user={'obj_user', 0x3d, 'norecovery'}}, {@euid_lt={'euid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}], 0x2c}, 0xa, 0x528, &(0x7f0000002b80)="$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")
symlink(0x0, &(0x7f00000002c0)='.\x02\x00')
r3 = accept4$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7GnU38EYjp70fAcA/tPeiIgVAKDLJNp/AOgy2fcAN5aXitnU2W8k9ta15yNi32r82f3N1SW9jXt2++r3QQdvJLfdGUkiYmQHyh+NiE++eu2zdErzPz7bXfsf6Jw3L0XE6ZHR9df/ZN2Yha16YoNl/Y3X0Tvmd1v7A530ddr/ebpV/y93q/8TLfo/Ay3O3e246/m/fwcK2UDa/3uuaWzbzab4G0Z6Grn/1ft8fcmZs+VSem37f0SMRd9Amp/YoIyx639fb7esuf/3+wevf5qWn76urZH7pXfg9vdMFWqFe4m52bVLEY/0too/uVX/SZv+78lNlvHSM+983G5ZGn8abzatjz9WxyDukpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//nt4eGA==")

3.989797922s ago: executing program 3 (id=4392):
unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x3)
fcntl$notify(r2, 0x402, 0x8000003d)
readv(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xa0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$eJzs3M9rXNUeAPDvnUnS301eX1/fa1+r0SoWfyRNWrULFyoKLhQEXdRlTNJaO22kiWBLsFGkLqXgXlwK/gXu3Ii6EMGtgkspFA1CUxcSub+aZDKZ5menzXw+MJlz5p6Zc773njNz5p7cCaBt9aZ/koidEfFzRHTn2YUFevO7menJ4ZvTk8NJzM6+9nuSlbsxPTlcFi2ft6PIHKlEVD5K4tlkcb3jFy+dHarVRi8U+f6Jc+/0j1+89MSZc0OnR0+Pnh88ceL4sYGnnxp8cl3iTOO6ceD9sYP7X3rj6ivDJ6+++d2XabP2Hcq3z4/jtm42CKiB3nSv/TGbqd/28Arafi/YNS+ddLSwIaxINSLSw9WZjf/uqMbcweuOFz9saeOADZV+Nm1ZevPULLCJJdHqFgCtUX7Qp99/y9sdmnrcFa4/F9EV+fmKmenJ4Zlb8XdEpSjTuYH190bEyam/PktvsdLzEAAAq5DNbR5vNP+rxL7sPl/r2F2sofRExL8iYk9E/Dsi9kbEfyKysv+NiP/lT57tXmb9vXX5xfOfyrWGbV4n6fzvmZib+83Mi7+466kWuV1Z/J3JqTO10aPFPjkSnVvS/ECTOr5+4adPlto2f/6X3tL6y7lg0YBrHXUn6EaGJobWaydc/yDiQEej+JNbKwFpD9gfEQdi8TpWE7vLxJlHvzi4VKHbx9/EOqwzzX4e8Uh+/KeiLv5S0nx9sn9r1EaP9pe9YrHvf7zy6oIHqnPJNcW/DtLjv31h/68r0f1nkq/XdkatNnphfOV1XPnl4yW/06yk/5ddPu3/Xcnr2Zr1D2/lB+q9oYmJCwMRXcnLWZmuomz2+ODcq5X5snwa/5HDjcf/nuI5aQX/j4i0Ex+KiPsi4v6i7Q9ExIMRcbhJ/N8+/9DbTeJPIomWHv+Rhu9/t/p/TzJ/vX4VierZb75aasV8ecf/eExl77W57P3vNpbbwDXuPgAAALgnVCJiZySVvjzduzMqlb6+/H/498b2Sm1sfOKxU2Pvnh/JrxHoic5Keaare9750IFkqnjFPD9YnCsutx8rzht/Wt2W5fuGx2ojLY4d2t2OheM/yvGf+q3a6tYBG871WtC+6sd/pUXtAO685Xz++y4Am1OD8b+tFe0A7jzf/6F9NRr/l+vy5v+wOXUsSvza4CfrgM3I/B/al/EP7cv4h7a0luv6V58oLxZY/etsXfYV/psmcbl5mfIXLzayGdti7pGo3B27pWHi7+LnLe+W9qw5kY6YBY9EJLGhlc79hgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC97J8AAAD//wHu668=")
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001040}, 0x20000004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000a40)={0x70, "b413c1ffb45120acc775d8e640c521b3fb38fdd5262da1a7616f6ad82c46231090e7d6cc086a31d325e42b30e21c471663878bdbea808071039cf6034c631a3481a13d029849aa2de2f72df049662730d39cee73e1f8b3c3b60fdd18ec28d6205b396b4ac39d73843efe4a12ecfd9553"})
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000440)=0xb02)
splice(r6, 0x0, r8, 0x0, 0x1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000e2ff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r10 = semget$private(0x0, 0x20000000102, 0x0)
semop(r10, 0x0, 0x0)
semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d])

3.814626865s ago: executing program 4 (id=4393):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fa0008f600000001f0ffff7f399ffcce643b89b8"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32], &(0x7f00000007c0)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_parent_unassign\x00', r1, 0x0, 0x3}, 0x4e)
pipe(&(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
pipe2(0x0, 0x80c80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r5, 0x5606, 0x4)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000))
set_tid_address(&(0x7f0000000040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"})
getpid()
getpid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e020000000000000000000000010000840000000000000000030000000000002100000000000000060434c0fb9f00f8ee175209b3b3295caa9da3"], 0x0, 0x4f, 0x0, 0x8}, 0x28)

3.801939986s ago: executing program 1 (id=4394):
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
mprotect(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]})
rt_sigpending(0x0, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

3.637407749s ago: executing program 1 (id=4395):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
close(0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
r4 = memfd_create(&(0x7f0000000000)='+\x00', 0x6)
cachestat(r4, &(0x7f00000005c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64)
setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000240), 0x4)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="cc0200003100000425bd7000fddbdf25d2004b8090e985c10e41bc16c3afdfa48f5504b1be674defb8e523ca931fc47fca0761f089f12dee7390f97c1afc9919b1fe48e849ff8dfba904c78d93262ae3d33f0064ebf13671c70daa79cc0fe13e298fd364e11960d535c26097d135265e7942c4c5db720b1846c07b77ed5d954b166fd8b48c9e0f6ca471ddfcbb5f163f777786f7a3fbfa7733802ee8c4a951358fe78e1ef7f4dbe179e9502c3354b1cebef86cef6a5c32967a223845ba9396fced3f604240981e8f247067e1349e286bc6c8269ebede928867184559936b04001380000072f367e932248bbb5f84927c213d001b02bcf2d2bd5b90abb49e35b671d5cc9e8646e4ecaf6db0c14b26d2c061e2895d84e85ee2272e330857cf5816d5761dcdb9cbd0815823a9e2e08d59f3a8cac38f824e82d6a380359c14f0b327fd5004cfcb9ba79164d762baff997f2fd16507defa04591b820f92c60d5c85e8eab1cc5c87f6a6027e19ea6adec8a708b47f58365690e1f34b33cc001933f43099cbdb9dc2e741283e1400b300fc0000000000000000000000000000008b004180040037800c001496532832", @ANYRES32=r9, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r9}, {0xe61, 0x0, 0x0, 0x8, 0xb, 0x800, 0xffd, 0xffffffffffffffff}, {0x7, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x3c}, 0x2, @in6=@remote, 0x3500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r9, &(0x7f0000000100))
getgid()
lchown(&(0x7f0000000040)='./file0\x00', r9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r7})
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000)

3.328594775s ago: executing program 6 (id=4396):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18)
fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="22029d3f34478dd7c6b4bd558580024dd4f3ed025977593fc8e4fc4340ed1a6612d271302e2b6f5f27b6da7bc441df1c08989d0e13e86549d437c61da3460c0ada77dbc3c34e7b469e25f86a8add71df58a707341eb74dc1f5224bee25a1be1747a7d899881e49f8975a6939695133329eb1ee253f4f1cd61236769fcd34f95086bae5b16ac2ac9540373774e91addd881875513b8c10535fa77b433bd88638abf49dbaa8d3f5f1dd85242968e6ecf19934150d008d609b3c0dab89c04c18eb4c43121", 0xc3}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x138}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)}}], 0x3, 0x8044)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6)
sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xffffff40}, &(0x7f0000000100)=0x1, 0x0, 0xd5b, 0x3, 0x4, 0x83e, 0x12, 0x101}}], 0x58}, 0x0)

3.221319807s ago: executing program 5 (id=4397):
move_mount(0xffffffffffffffff, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x154)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x6, 0x8, 0x9, 0x4}, {0x9, 0x5, 0x5, 0xffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, <r1=>0x0})
move_pages(r1, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="181e5675e3f8ffffff9500000000ecd5a6aed66453188f46ad8e53bc6dc2beab0b19d6c565474b100e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)

3.158630278s ago: executing program 5 (id=4398):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19)
write$binfmt_aout(r6, 0x0, 0x808)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r10, 0x402, 0x8000001f)
r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x60)
fcntl$notify(r11, 0x402, 0x8000003d)
close_range(r10, r11, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)

2.759842426s ago: executing program 3 (id=4399):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'})
creat(0x0, 0x8)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usbip_server_init(0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x10)
syncfs(0xffffffffffffffff)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}})

2.753952076s ago: executing program 4 (id=4400):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x19c0000, &(0x7f0000000180), 0xfe, 0x455, &(0x7f0000000fc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x20006}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r4, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x311)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf9}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]})
migrate_pages(0x0, 0x7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0)
copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0x8800000, 0x3, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
umount2(&(0x7f0000000280)='./file0/../file0\x00', 0xa)

2.55038365s ago: executing program 1 (id=4401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
shutdown(0xffffffffffffffff, 0x1)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.845032544s ago: executing program 6 (id=4402):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x7, &(0x7f0000002400)=<r1=>0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

1.500577131s ago: executing program 6 (id=4403):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
r1 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000)
shmdt(r1)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
pipe(&(0x7f0000000040))
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_getevents(r2, 0x4, 0x0, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104fcffffff80000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r6, @ANYBLOB="84e1129a72cdf348c052fa3f63e8c1643bedb8b72246a01314dbe036c7a829ed3a04bfcda97efe862097787a5602c333f606053d1191778c6cf3f6410f4cb0959630085115df5baf96ad3d6a669938901285e36db8dc1352b238fe768bd311f5f11a9204e4348151bec965851b3f2e3f5b74899137"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace(0x8, r7)
waitid(0x1, r7, 0x0, 0x8, 0x0)
syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x658080)
capset(&(0x7f0000000200)={0x19980330, r3}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2})
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000300))

1.388623173s ago: executing program 4 (id=4404):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
mprotect(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]})
rt_sigpending(0x0, 0x0)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x1a, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

1.288681785s ago: executing program 6 (id=4405):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
r2 = gettid()
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r2, 0x1b)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100)
ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7', @ANYRESDEC=0x0])
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10)
unshare(0x2040400)
r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r9, 0x0, 0x0)

1.182162027s ago: executing program 3 (id=4406):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf01"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)

1.166196177s ago: executing program 4 (id=4407):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_secret(0x80000)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6}, 0x10)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open_tree(r2, &(0x7f0000000240)='./control\x00', 0x0)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0)
r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0xc5)
close(r5)
r6 = inotify_init1(0x800)
fcntl$setstatus(r5, 0x4, 0x2c00)
r7 = gettid()
fcntl$setown(r5, 0x8, r7)
fcntl$setsig(r6, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)

304.002414ms ago: executing program 3 (id=4408):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000000038740000000000000000ffe3000079e03cbfee3affde94b8d71bb31c32067d6a63fe381d0390e81b830dea68badf66729bc31385fbbbb61bab9ecc146cd9db1cc9f047892908b47149834ae5506eaaeff12a2203000000d9e39c78ec840626443c2e5ca42bee51d2334b70b503e25208040000000000000000fcffffff95b5999ec79359a400000000000086"], 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800010000064400078008000a400000000b060004404e2300000500070084000000060004404e240000060005404e1e0000080013400000064a060005404e22000008000b400000c24500"/88], 0x58}, 0x1, 0x0, 0x0, 0x4004a010}, 0x260000d0)
r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1])
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000040)=0x6e)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000007c0)={[{@debug}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@norecovery}, {@bh}, {@jqfmt_vfsv0}, {@resgid}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}, {@obj_user={'obj_user', 0x3d, 'norecovery'}}, {@euid_lt={'euid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}], 0x2c}, 0xa, 0x528, &(0x7f0000002b80)="$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")
symlink(0x0, &(0x7f00000002c0)='.\x02\x00')
r3 = accept4$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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")

302.026724ms ago: executing program 6 (id=4418):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x1, 0x10})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x9)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x0, 0x800, 0x8e6e)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000060c0)={0x34, r8, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendfile(r1, r2, 0x0, 0x7fffffffffffffff)
r10 = getpid()
unshare(0x2c020400)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = syz_pidfd_open(r10, 0x0)
setns(r11, 0x8020000)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010101, @private=0xa010102, 0xff000000, 0xff000000, 'bond_slave_0\x00', 'ipvlan0\x00', {}, {}, 0xb314e828b2fce06e, 0x0, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x7, 0x2, 0x3, 0x3, 0x4, 0x6], 0x5}, {0xffffffffffffffff, [0x0, 0x4aee1de731b25b79, 0x4, 0x2, 0x3, 0x2], 0x2, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x18, 0x1}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x1, 0x1, 0x2, 0x1], 0x4, 0x3}, {0x2, [0x7, 0x4, 0x4, 0x6, 0x0, 0xd205d636531791e1], 0x81, 0x4}}}}, {{@ip={@local, @local, 0x0, 0xffffff00, 'pim6reg\x00', 'caif0\x00', {}, {}, 0x33, 0x0, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e22], 0x0, 0x0, 0xffff, 0x6}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10)
r13 = socket(0x10, 0x3, 0x9)
connect$netlink(r13, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x14000000)

300.945934ms ago: executing program 1 (id=4409):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='f2fs_truncate_partial_nodes\x00', r2, 0x0, 0x2}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
r3 = socket(0xa, 0x3, 0xfc)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x90, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x18, r5, 0x103, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000100)=ANY=[], 0xa8)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="4e54bdd2dd48", 'bond0\x00'}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x40080)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r10, 0x407, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

300.187924ms ago: executing program 5 (id=4410):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fa0008f600000001f0ffff7f399ffcce643b89b8"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32], &(0x7f00000007c0)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_parent_unassign\x00', r1, 0x0, 0x3}, 0x4e)
pipe(&(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
pipe2(0x0, 0x80c80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r5, 0x5606, 0x4)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000))
set_tid_address(&(0x7f0000000040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"})
getpid()
getpid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e020000000000000000000000010000840000000000000000030000000000002100000000000000060434c0fb9f00f8ee175209b3b3295caa9da3af618809b3e3fd22ebbf75eb1c3d98"], 0x0, 0x4f, 0x0, 0x8}, 0x28)

259.077325ms ago: executing program 4 (id=4411):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
mprotect(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]})
rt_sigpending(0x0, 0x0)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x1a, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

37.306329ms ago: executing program 4 (id=4412):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000020000000000180100002020702500000000002020207b1af8ff00000000bf49eeb49e6602aebdf9a100000000000007010000f8ffc43520b0000000000000b703000000720000009500000000000000be05110c"], &(0x7f0000000240)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x8c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bond={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xffff7fff}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xfefffffc}, @IFLA_BOND_ARP_IP_TARGET={0x14, 0x8, 0x0, 0x1, [@local, @multicast2, @rand_addr=0x64010101, @multicast1]}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "f4f90370cc98b3e912f45257c0a71d"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x3b, "45dd285dcf1b69a706c089178d8ebdaecc5b2aa0e2bec314fa0e0e9518142bd6be6b52efcd62703595a8e6c263c6a09c23fdd3970a16673b42dcec"}, &(0x7f0000000040)=0x5f)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r7, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee44", 0x10)
sendfile(r7, r6, 0x0, 0x3ffff)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84)
sendfile(r7, r6, 0x0, 0x7fffeffd)

3.20938ms ago: executing program 6 (id=4413):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0)
r1 = socket(0x10, 0x80803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1)
geteuid()
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
close(r3)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000d40)={'ip6tnl0\x00', 0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140))
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141)
pwrite64(r11, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r11, 0x6609)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {0x0, 0x1ffe1}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x99, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x3, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x677f, 0x2, 0x7ffd, 0x10}, {0x0, 0x53, 0xa9, 0x2}]}}]}}]}, 0x74}}, 0x24040084)
sendto$inet6(r5, &(0x7f0000000140)="659085f3a962f62e630da06ef69c9b210b58f4b3712f96fa9b05f3ed06c284ec7c2a438867e2b4f72c0ef70493eae7897fc9aee6a31c18528dd7fd1c79705f5228c228d5ccaa808a4986654a6b5c5a71df0e52fa0a212bb28706fe299da35076f8c7f05dad4cf92df14d14b5c86f96ca9c4f2ea6c3de911403f799b6a70ff144ecb75897c812b0440a03b19150fa69cc8e01506bfef339d489f2ac218bfc7a6c8dca0cc0476d37a0e64ebbe1194f66d0a864b84f81f4acad40942ef9715141673078612db5d9c115e7b106d28c6df13560b0e0e463640acbd530fa6710668f5a3650b1dae4fa033845e3b21aa158c352ccb87f", 0xf3, 0x80, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @empty, 0x5}, 0x1c)

0s ago: executing program 1 (id=4414):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x245d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xfffd, 0x8, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r2 = syz_usbip_server_init(0xaa7f3cec63cbb9d)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000001380)={<r6=>0xffffffffffffffff}, 0x104000)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000015c0)={0x9, {{0x2, 0x4e20, @loopback}}, 0x1, 0x3, [{{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @broadcast}}]}, 0x210)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x2, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x43683bb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x80}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200, 0x9}, {}, {}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x20, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1, 0x8}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0xffffffff, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={<r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
listen(r8, 0x0)
shutdown(r8, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001240)="5103bef0c5b08d903bd84d819ce355d26d282437f68f64f234cf9de019c09377fdb7e2cf8b9d99ad47fb154880bad882d432fd7c9e4407602106eed34eb50b7fcad6a5b2341c9bee84851cd2e7402ab47fc520d5237de4ebba799c01c3190ee2710964ac07f30fb246886c917d43c7a1738465c067408fe20e9bac95d9b1edbc89e795f2c3f7c4fa69f3b735961515072f3557e5307ee7bd2698efaa6343d67a35349ec4702cd74121146283915313b498fca56b704f683c0655c46c5fccfd0d13339f86222d6b169856613127387e850557c5a4e32d9fad003b95851b448afc1fe3d8a1020c5a2fb3d0d35d9a298ac95556a28559d252e73dc7e34445a38678")
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r7, 0x0, 0x7f})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={<r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendto$inet6(r10, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r9, 0x3, r1})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r11, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x1000, 0x4)

kernel console output (not intermixed with test programs):

missive=0
[  443.828444][   T29] audit: type=1400 audit(1758285209.563:79622): avc:  denied  { write } for  pid=16327 comm="+}[@" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0
[  443.857307][T16316] lo speed is unknown, defaulting to 1000
[  443.893848][T16316] lo speed is unknown, defaulting to 1000
[  443.900519][T16316] lo speed is unknown, defaulting to 1000
[  444.069769][   T29] audit: type=1400 audit(1758285209.833:79623): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  444.093259][   T29] audit: type=1400 audit(1758285209.863:79624): avc:  denied  { create } for  pid=16330 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  444.236084][T16338] netlink: 'syz.1.3611': attribute type 21 has an invalid length.
[  444.256928][T16338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3611'.
[  444.266065][T16338] netlink: 'syz.1.3611': attribute type 1 has an invalid length.
[  444.674415][T16359] can0: slcan on ttyS3.
[  444.741136][T16359] can0 (unregistered): slcan off ttyS3.
[  445.138722][T16384] netlink: 'syz.4.3633': attribute type 21 has an invalid length.
[  445.223600][T16388] lo speed is unknown, defaulting to 1000
[  445.274206][T16388] lo speed is unknown, defaulting to 1000
[  445.280621][T16388] lo speed is unknown, defaulting to 1000
[  445.325986][T16384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3633'.
[  445.335101][T16384] netlink: 'syz.4.3633': attribute type 1 has an invalid length.
[  445.604450][T16403] netlink: 'syz.6.3639': attribute type 10 has an invalid length.
[  445.613602][T16403] netlink: 'syz.6.3639': attribute type 10 has an invalid length.
[  445.623582][T16403] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  445.644912][T16403] 8021q: adding VLAN 0 to HW filter on device bond1
[  445.668983][T16403] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  445.678943][T16403] bond1: (slave macvlan0): Enslaving as a backup interface with an up link
[  445.845082][T16411] lo speed is unknown, defaulting to 1000
[  445.922034][T16411] lo speed is unknown, defaulting to 1000
[  445.934837][T16411] lo speed is unknown, defaulting to 1000
[  446.303097][T16431] lo speed is unknown, defaulting to 1000
[  446.381822][T16431] lo speed is unknown, defaulting to 1000
[  446.400457][T16431] lo speed is unknown, defaulting to 1000
[  446.536458][T16439] lo speed is unknown, defaulting to 1000
[  446.578708][T16439] lo speed is unknown, defaulting to 1000
[  446.585122][T16439] lo speed is unknown, defaulting to 1000
[  446.726579][T16448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16448 comm=syz.4.3647
[  446.741970][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'.
[  446.885596][T16448] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.311358][T16463] lo speed is unknown, defaulting to 1000
[  447.365517][T16463] lo speed is unknown, defaulting to 1000
[  447.379480][T16463] lo speed is unknown, defaulting to 1000
[  447.404001][T16472] netlink: 'syz.5.3660': attribute type 13 has an invalid length.
[  447.444055][T16472] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  447.456374][T16472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  447.528905][T16477] can0: slcan on ttyS3.
[  447.590887][T16477] can0 (unregistered): slcan off ttyS3.
[  448.035098][T16488] lo speed is unknown, defaulting to 1000
[  448.088537][T16488] lo speed is unknown, defaulting to 1000
[  448.098225][T16488] lo speed is unknown, defaulting to 1000
[  448.617298][   T29] kauditd_printk_skb: 1378 callbacks suppressed
[  448.617349][   T29] audit: type=1400 audit(1758285214.513:81000): avc:  denied  { allowed } for  pid=16515 comm="syz.5.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  448.751010][   T29] audit: type=1400 audit(1758285214.653:81001): avc:  denied  { prog_load } for  pid=16525 comm="syz.5.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.812974][   T29] audit: type=1400 audit(1758285214.673:81002): avc:  denied  { create } for  pid=16527 comm="syz.6.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  448.832738][   T29] audit: type=1400 audit(1758285214.673:81003): avc:  denied  { execmem } for  pid=16525 comm="syz.5.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  448.842288][T16530] audit: audit_backlog=65 > audit_backlog_limit=64
[  448.852195][   T29] audit: type=1400 audit(1758285214.673:81004): avc:  denied  { mounton } for  pid=16527 comm="syz.6.3680" path="/475" dev="tmpfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  448.858703][T16530] audit: audit_lost=89 audit_rate_limit=0 audit_backlog_limit=64
[  448.881009][   T29] audit: type=1400 audit(1758285214.673:81005): avc:  denied  { prog_load } for  pid=16527 comm="syz.6.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.881046][   T29] audit: type=1400 audit(1758285214.673:81006): avc:  denied  { map_create } for  pid=16525 comm="syz.5.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  448.888759][T16530] audit: backlog limit exceeded
[  449.063099][T16526] lo speed is unknown, defaulting to 1000
[  449.150568][T16526] lo speed is unknown, defaulting to 1000
[  449.167092][T16526] lo speed is unknown, defaulting to 1000
[  449.207365][T16538] lo speed is unknown, defaulting to 1000
[  449.248497][T16538] lo speed is unknown, defaulting to 1000
[  449.262119][T16538] lo speed is unknown, defaulting to 1000
[  449.706762][T16557] pim6reg1: entered promiscuous mode
[  449.924375][T16562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=16562 comm=syz.6.3691
[  450.312224][T16573] lo speed is unknown, defaulting to 1000
[  450.368679][T16573] lo speed is unknown, defaulting to 1000
[  450.382825][T16573] lo speed is unknown, defaulting to 1000
[  450.559501][T16585] lo speed is unknown, defaulting to 1000
[  450.605737][T16585] lo speed is unknown, defaulting to 1000
[  450.620693][T16585] lo speed is unknown, defaulting to 1000
[  451.068212][T16602] netlink: 'syz.3.3706': attribute type 3 has an invalid length.
[  451.100387][T16602] netlink: 'syz.3.3706': attribute type 3 has an invalid length.
[  451.574407][T16616] lo speed is unknown, defaulting to 1000
[  451.610562][T16616] lo speed is unknown, defaulting to 1000
[  451.616697][T16616] lo speed is unknown, defaulting to 1000
[  451.928623][T16628] lo speed is unknown, defaulting to 1000
[  451.974891][T16628] lo speed is unknown, defaulting to 1000
[  451.981180][T16628] lo speed is unknown, defaulting to 1000
[  452.804126][T16662] sit0: left promiscuous mode
[  452.809343][T16662] $Hÿ: left promiscuous mode
[  452.819179][T16662] bridge1: left promiscuous mode
[  452.824779][T16662] geneve2: left promiscuous mode
[  452.830054][T16662] ip6erspan0: left promiscuous mode
[  452.838228][T16662] ip6gre1: left promiscuous mode
[  453.206410][T16669] lo speed is unknown, defaulting to 1000
[  453.250366][T16669] lo speed is unknown, defaulting to 1000
[  453.256673][T16669] lo speed is unknown, defaulting to 1000
[  453.459403][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3731'.
[  453.607006][T16684] bridge_slave_0: left allmulticast mode
[  453.612816][T16684] bridge_slave_0: left promiscuous mode
[  453.618760][T16684] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.629558][   T29] kauditd_printk_skb: 1325 callbacks suppressed
[  453.629573][   T29] audit: type=1400 audit(1758285219.523:82329): avc:  denied  { map_create } for  pid=16678 comm="syz.3.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  453.657542][   T29] audit: type=1400 audit(1758285219.533:82330): avc:  denied  { prog_load } for  pid=16678 comm="syz.3.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  453.676910][   T29] audit: type=1400 audit(1758285219.533:82331): avc:  denied  { prog_load } for  pid=16678 comm="syz.3.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  453.706032][   T29] audit: type=1400 audit(1758285219.583:82332): avc:  denied  { name_bind } for  pid=16682 comm="syz.6.3733" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0
[  453.728107][   T29] audit: type=1400 audit(1758285219.583:82333): avc:  denied  { module_request } for  pid=16682 comm="syz.6.3733" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  453.750380][   T29] audit: type=1400 audit(1758285219.583:82334): avc:  denied  { sys_module } for  pid=16682 comm="syz.6.3733" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[  453.777374][   T29] audit: type=1400 audit(1758285219.673:82335): avc:  denied  { create } for  pid=16687 comm="syz.1.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  453.800266][   T29] audit: type=1400 audit(1758285219.693:82336): avc:  denied  { create } for  pid=16687 comm="syz.1.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  453.820960][   T29] audit: type=1400 audit(1758285219.693:82337): avc:  denied  { create } for  pid=16687 comm="syz.1.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  453.841774][   T29] audit: type=1400 audit(1758285219.693:82338): avc:  denied  { create } for  pid=16687 comm="syz.1.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  453.988335][T16685] lo speed is unknown, defaulting to 1000
[  454.035381][T16685] lo speed is unknown, defaulting to 1000
[  454.041766][T16685] lo speed is unknown, defaulting to 1000
[  454.531713][T16698] lo speed is unknown, defaulting to 1000
[  454.571968][T16698] lo speed is unknown, defaulting to 1000
[  454.578921][T16698] lo speed is unknown, defaulting to 1000
[  455.799551][T16727] syzkaller0: entered promiscuous mode
[  455.805209][T16727] syzkaller0: entered allmulticast mode
[  455.925276][T16739] netlink: 'syz.3.3749': attribute type 10 has an invalid length.
[  455.933853][T16739] netlink: 'syz.3.3749': attribute type 10 has an invalid length.
[  456.039232][T16745] netlink: 'syz.3.3750': attribute type 21 has an invalid length.
[  456.049592][T16745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3750'.
[  456.398919][T16755] lo speed is unknown, defaulting to 1000
[  456.445618][T16755] lo speed is unknown, defaulting to 1000
[  456.452233][T16755] lo speed is unknown, defaulting to 1000
[  456.483849][T16743] lo speed is unknown, defaulting to 1000
[  456.628829][T16743] lo speed is unknown, defaulting to 1000
[  456.930875][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3757'.
[  457.023307][T16743] lo speed is unknown, defaulting to 1000
[  457.050784][T16770] netlink: 'syz.1.3759': attribute type 10 has an invalid length.
[  457.217882][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3758'.
[  457.298786][T16784] netlink: 'syz.4.3763': attribute type 10 has an invalid length.
[  457.309722][T16774] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3761'.
[  458.040753][T16807] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  458.049516][T16807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3772'.
[  458.070168][T16807] $Hÿ: (slave syz_tun): Releasing backup interface
[  458.236731][T16811] lo speed is unknown, defaulting to 1000
[  458.280549][T16811] lo speed is unknown, defaulting to 1000
[  458.291103][T16811] lo speed is unknown, defaulting to 1000
[  458.429204][T16812] lo speed is unknown, defaulting to 1000
[  458.546874][T16812] lo speed is unknown, defaulting to 1000
[  458.560996][T16812] lo speed is unknown, defaulting to 1000
[  458.630917][   T29] kauditd_printk_skb: 976 callbacks suppressed
[  458.630932][   T29] audit: type=1400 audit(1758285224.533:83315): avc:  denied  { allowed } for  pid=16816 comm="syz.6.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  458.770027][   T29] audit: type=1400 audit(1758285224.563:83316): avc:  denied  { map_create } for  pid=16816 comm="syz.6.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  458.789554][   T29] audit: type=1326 audit(1758285224.643:83317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.4.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0883a1ae09 code=0x7ffc0000
[  458.813167][   T29] audit: type=1326 audit(1758285224.643:83318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.4.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0883a75be7 code=0x7ffc0000
[  458.836660][   T29] audit: type=1326 audit(1758285224.643:83319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.4.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0883a1ae09 code=0x7ffc0000
[  458.860288][   T29] audit: type=1326 audit(1758285224.643:83320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.4.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0883a7ec29 code=0x7ffc0000
[  458.883918][   T29] audit: type=1400 audit(1758285224.653:83321): avc:  denied  { prog_load } for  pid=16816 comm="syz.6.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  458.903272][   T29] audit: type=1400 audit(1758285224.663:83322): avc:  denied  { mac_admin } for  pid=16816 comm="syz.6.3775" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  458.924599][   T29] audit: type=1401 audit(1758285224.663:83323): op=setxattr invalid_context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
[  458.925616][   T29] audit: type=1326 audit(1758285224.663:83324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.4.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0883a75be7 code=0x7ffc0000
[  459.333781][T16835] lo speed is unknown, defaulting to 1000
[  459.384714][T16835] lo speed is unknown, defaulting to 1000
[  459.426580][T16835] lo speed is unknown, defaulting to 1000
[  459.672475][T16844] lo speed is unknown, defaulting to 1000
[  459.714273][T16833] netlink: 'syz.1.3779': attribute type 1 has an invalid length.
[  459.720187][T16844] lo speed is unknown, defaulting to 1000
[  459.736818][T16833] 8021q: adding VLAN 0 to HW filter on device bond3
[  459.744844][T16844] lo speed is unknown, defaulting to 1000
[  459.754600][T16833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'.
[  459.763720][T16833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'.
[  460.570371][T16877] lo speed is unknown, defaulting to 1000
[  460.632003][T16877] lo speed is unknown, defaulting to 1000
[  460.638184][T16877] lo speed is unknown, defaulting to 1000
[  461.292085][T16887] lo speed is unknown, defaulting to 1000
[  461.336349][T16887] lo speed is unknown, defaulting to 1000
[  461.343761][T16887] lo speed is unknown, defaulting to 1000
[  461.389020][T16890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3794'.
[  461.641831][T16894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16894 comm=syz.3.3796
[  461.676716][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'.
[  461.732491][T16894] 8021q: adding VLAN 0 to HW filter on device bond4
[  461.776450][T16899] macvlan0: entered promiscuous mode
[  461.781860][T16899] macvlan0: entered allmulticast mode
[  461.793198][T16899] bond4: entered promiscuous mode
[  461.808811][T16899] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  461.833073][T16899] bond4: left promiscuous mode
[  462.394739][T16912] lo speed is unknown, defaulting to 1000
[  462.436192][T16912] lo speed is unknown, defaulting to 1000
[  462.448499][T16912] lo speed is unknown, defaulting to 1000
[  462.886912][T16926] lo speed is unknown, defaulting to 1000
[  462.944181][T16926] lo speed is unknown, defaulting to 1000
[  462.951408][T16926] lo speed is unknown, defaulting to 1000
[  463.671101][   T29] kauditd_printk_skb: 553 callbacks suppressed
[  463.671121][   T29] audit: type=1400 audit(1758285229.573:83878): avc:  denied  { bpf } for  pid=16950 comm="syz.5.3812" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  463.727000][   T29] audit: type=1400 audit(1758285229.603:83879): avc:  denied  { mounton } for  pid=16950 comm="syz.5.3812" path="/820/file0" dev="tmpfs" ino=4348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0
[  463.823154][   T29] audit: type=1400 audit(1758285229.723:83880): avc:  denied  { create } for  pid=16953 comm="syz.1.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  463.880484][   T29] audit: type=1400 audit(1758285229.753:83881): avc:  denied  { mounton } for  pid=16953 comm="syz.1.3813" path="/780" dev="tmpfs" ino=4126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  463.925064][   T29] audit: type=1400 audit(1758285229.803:83882): avc:  denied  { prog_load } for  pid=16953 comm="syz.1.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  464.006280][   T29] audit: type=1400 audit(1758285229.903:83883): avc:  denied  { create } for  pid=16956 comm="syz.5.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  464.033574][   T29] audit: type=1400 audit(1758285229.923:83884): avc:  denied  { allowed } for  pid=16958 comm="syz.6.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  464.053187][   T29] audit: type=1400 audit(1758285229.933:83885): avc:  denied  { prog_load } for  pid=16958 comm="syz.6.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  464.072479][   T29] audit: type=1400 audit(1758285229.933:83886): avc:  denied  { write } for  pid=16958 comm="syz.6.3815" name="protocols" dev="proc" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0
[  464.176248][   T29] audit: type=1400 audit(1758285229.973:83887): avc:  denied  { create } for  pid=16953 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  464.833282][T16975] netem: change failed
[  465.060450][T16979] lo speed is unknown, defaulting to 1000
[  465.123153][T16985] lo speed is unknown, defaulting to 1000
[  465.129252][T16979] lo speed is unknown, defaulting to 1000
[  465.138807][T16979] lo speed is unknown, defaulting to 1000
[  465.182317][T16985] lo speed is unknown, defaulting to 1000
[  465.188492][T16985] lo speed is unknown, defaulting to 1000
[  466.066306][T17008] pim6reg1: entered promiscuous mode
[  466.348718][T17014] lo speed is unknown, defaulting to 1000
[  466.437621][T17014] lo speed is unknown, defaulting to 1000
[  466.445006][T17014] lo speed is unknown, defaulting to 1000
[  466.710242][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'.
[  466.834904][T17029] lo speed is unknown, defaulting to 1000
[  467.017846][T17029] lo speed is unknown, defaulting to 1000
[  467.044881][T17029] lo speed is unknown, defaulting to 1000
[  467.105117][T17034] lo speed is unknown, defaulting to 1000
[  467.227352][T17034] lo speed is unknown, defaulting to 1000
[  467.233929][T17034] lo speed is unknown, defaulting to 1000
[  467.250350][T17036] lo speed is unknown, defaulting to 1000
[  467.449027][T17036] lo speed is unknown, defaulting to 1000
[  467.455487][T17036] lo speed is unknown, defaulting to 1000
[  467.934952][T17049] lo speed is unknown, defaulting to 1000
[  467.981256][T17049] lo speed is unknown, defaulting to 1000
[  467.987862][T17049] lo speed is unknown, defaulting to 1000
[  468.166329][T17053] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  468.208121][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3842'.
[  468.691797][   T29] kauditd_printk_skb: 484 callbacks suppressed
[  468.691816][   T29] audit: type=1400 audit(1758285234.593:84372): avc:  denied  { map_create } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.717368][   T29] audit: type=1400 audit(1758285234.593:84373): avc:  denied  { prog_load } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.736658][   T29] audit: type=1400 audit(1758285234.593:84374): avc:  denied  { map_create } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.756036][   T29] audit: type=1400 audit(1758285234.593:84375): avc:  denied  { prog_load } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.923245][   T29] audit: type=1400 audit(1758285234.693:84376): avc:  denied  { open } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  468.942771][   T29] audit: type=1400 audit(1758285234.703:84377): avc:  denied  { map_create } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  468.962152][   T29] audit: type=1400 audit(1758285234.703:84378): avc:  denied  { create } for  pid=17064 comm="syz.6.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  468.982895][   T29] audit: type=1400 audit(1758285234.703:84379): avc:  denied  { create } for  pid=17064 comm="syz.6.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  469.004217][   T29] audit: type=1400 audit(1758285234.703:84380): avc:  denied  { prog_load } for  pid=17061 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  469.023587][   T29] audit: type=1400 audit(1758285234.733:84381): avc:  denied  { create } for  pid=17069 comm="syz.1.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  469.031621][T17062] lo speed is unknown, defaulting to 1000
[  469.055906][T17070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17070 comm=syz.1.3848
[  469.230586][T17062] lo speed is unknown, defaulting to 1000
[  469.237098][T17062] lo speed is unknown, defaulting to 1000
[  469.300668][T17065] netlink: 45 bytes leftover after parsing attributes in process `syz.6.3847'.
[  470.050250][T17108] lo speed is unknown, defaulting to 1000
[  470.164085][T17108] lo speed is unknown, defaulting to 1000
[  470.175845][T17108] lo speed is unknown, defaulting to 1000
[  470.214258][T17112] lo speed is unknown, defaulting to 1000
[  470.307024][T17112] lo speed is unknown, defaulting to 1000
[  470.329489][T17112] lo speed is unknown, defaulting to 1000
[  470.499689][T17129] netlink: 'syz.3.3866': attribute type 10 has an invalid length.
[  471.444095][T17154] lo speed is unknown, defaulting to 1000
[  471.489254][T17154] lo speed is unknown, defaulting to 1000
[  471.508957][T17154] lo speed is unknown, defaulting to 1000
[  471.640416][T17162] lo speed is unknown, defaulting to 1000
[  471.725717][T17162] lo speed is unknown, defaulting to 1000
[  471.738440][T17110] lo speed is unknown, defaulting to 1000
[  471.744949][T17162] lo speed is unknown, defaulting to 1000
[  471.911822][T17180] netem: change failed
[  471.953487][T17174] lo speed is unknown, defaulting to 1000
[  471.963964][T17110] lo speed is unknown, defaulting to 1000
[  472.057071][T17174] lo speed is unknown, defaulting to 1000
[  472.073862][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3882'.
[  472.086518][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3882'.
[  472.098403][T17174] lo speed is unknown, defaulting to 1000
[  472.133448][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3882'.
[  472.144618][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3882'.
[  472.593042][T17110] lo speed is unknown, defaulting to 1000
[  472.602877][T17199] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3888'.
[  472.611957][T17199] 0ªX¹¦À: renamed from caif0
[  472.630114][T17199] 0ªX¹¦À: entered allmulticast mode
[  472.635385][T17199] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  472.886898][T17204] lo speed is unknown, defaulting to 1000
[  472.955927][T17204] lo speed is unknown, defaulting to 1000
[  472.970598][T17204] lo speed is unknown, defaulting to 1000
[  473.191873][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3898'.
[  473.469617][T17242] netlink: 'syz.3.3903': attribute type 21 has an invalid length.
[  473.723406][   T29] kauditd_printk_skb: 1596 callbacks suppressed
[  473.723434][   T29] audit: type=1400 audit(1758285239.623:85978): avc:  denied  { map_create } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.749635][T17247] lo speed is unknown, defaulting to 1000
[  473.795926][   T29] audit: type=1400 audit(1758285239.653:85979): avc:  denied  { prog_load } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.815397][   T29] audit: type=1400 audit(1758285239.653:85980): avc:  denied  { open } for  pid=17246 comm="syz.1.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  473.834900][   T29] audit: type=1400 audit(1758285239.663:85981): avc:  denied  { map_create } for  pid=17246 comm="syz.1.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.854261][   T29] audit: type=1400 audit(1758285239.663:85982): avc:  denied  { map_create } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.871434][T17247] lo speed is unknown, defaulting to 1000
[  473.873629][   T29] audit: type=1400 audit(1758285239.663:85983): avc:  denied  { prog_load } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.889892][T17247] lo speed is unknown, defaulting to 1000
[  473.898544][   T29] audit: type=1400 audit(1758285239.673:85984): avc:  denied  { prog_load } for  pid=17246 comm="syz.1.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.898576][   T29] audit: type=1400 audit(1758285239.673:85985): avc:  denied  { prog_load } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  473.942927][   T29] audit: type=1400 audit(1758285239.673:85986): avc:  denied  { create } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  473.942959][   T29] audit: type=1400 audit(1758285239.683:85987): avc:  denied  { create } for  pid=17251 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  473.975475][T17248] lo speed is unknown, defaulting to 1000
[  474.029621][T17248] lo speed is unknown, defaulting to 1000
[  474.030347][T17248] lo speed is unknown, defaulting to 1000
[  474.434508][T17264] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3908'.
[  474.434575][T17264] 0ªî{X¹¦: renamed from gretap0
[  474.443147][T17264] 0ªî{X¹¦: entered allmulticast mode
[  474.444009][T17264] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  474.916982][T17278] lo speed is unknown, defaulting to 1000
[  475.008404][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3914'.
[  475.262748][T17278] lo speed is unknown, defaulting to 1000
[  475.275329][T17278] lo speed is unknown, defaulting to 1000
[  475.294354][T17293] serio: Serial port ptm2
[  475.691473][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3925'.
[  475.767865][T17313] netlink: 'syz.4.3926': attribute type 13 has an invalid length.
[  475.863560][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'.
[  476.500927][T17330] netlink: 'syz.1.3932': attribute type 4 has an invalid length.
[  477.113073][T17353] __nla_validate_parse: 4 callbacks suppressed
[  477.113088][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3939'.
[  477.235364][T17363] bridge0: port 1(gretap0) entered blocking state
[  477.242035][T17363] bridge0: port 1(gretap0) entered disabled state
[  477.248870][T17363] gretap0: entered allmulticast mode
[  477.254811][T17363] gretap0: entered promiscuous mode
[  477.290219][T17355] lo speed is unknown, defaulting to 1000
[  477.327559][T17355] lo speed is unknown, defaulting to 1000
[  477.333795][T17355] lo speed is unknown, defaulting to 1000
[  477.351737][T17368] netlink: 'syz.3.3945': attribute type 4 has an invalid length.
[  477.359537][T17368] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3945'.
[  477.456388][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3947'.
[  477.550717][T17378] netlink: 'syz.3.3948': attribute type 13 has an invalid length.
[  477.968306][T17405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3956'.
[  478.020495][T17397] lo speed is unknown, defaulting to 1000
[  478.139618][T17397] lo speed is unknown, defaulting to 1000
[  478.147163][T17401] lo speed is unknown, defaulting to 1000
[  478.163865][T17412] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3961'.
[  478.166727][T17397] lo speed is unknown, defaulting to 1000
[  478.214550][T17412] 0ªX¹¦À: renamed from caif0
[  478.245492][T17412] 0ªX¹¦À: entered allmulticast mode
[  478.250793][T17412] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  478.268538][T17411] lo speed is unknown, defaulting to 1000
[  478.268547][T17401] lo speed is unknown, defaulting to 1000
[  478.282809][T17401] lo speed is unknown, defaulting to 1000
[  478.381339][T17411] lo speed is unknown, defaulting to 1000
[  478.388011][T17411] lo speed is unknown, defaulting to 1000
[  478.547776][T17434] netlink: 'syz.5.3967': attribute type 1 has an invalid length.
[  478.583573][T17434] 8021q: adding VLAN 0 to HW filter on device bond4
[  478.605301][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3967'.
[  478.633956][T17437] bond4 (unregistering): Released all slaves
[  478.730200][   T29] kauditd_printk_skb: 1599 callbacks suppressed
[  478.730217][   T29] audit: type=1326 audit(1758285244.633:87587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  478.790712][   T29] audit: type=1326 audit(1758285244.663:87588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  478.813854][   T29] audit: type=1326 audit(1758285244.663:87589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  478.837022][   T29] audit: type=1326 audit(1758285244.663:87590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  478.860226][   T29] audit: type=1326 audit(1758285244.663:87591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  478.883397][   T29] audit: type=1326 audit(1758285244.663:87592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f819a2fec63 code=0x7ffc0000
[  478.906490][   T29] audit: type=1400 audit(1758285244.683:87593): avc:  denied  { map_create } for  pid=17443 comm="syz.3.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  478.925865][   T29] audit: type=1400 audit(1758285244.683:87594): avc:  denied  { create } for  pid=17444 comm="syz.5.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[  478.945615][   T29] audit: type=1400 audit(1758285244.693:87595): avc:  denied  { map_create } for  pid=17444 comm="syz.5.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  478.969266][   T29] audit: type=1400 audit(1758285244.693:87596): avc:  denied  { prog_load } for  pid=17444 comm="syz.5.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  479.286943][T17452] lo speed is unknown, defaulting to 1000
[  479.323726][T17452] lo speed is unknown, defaulting to 1000
[  479.329987][T17452] lo speed is unknown, defaulting to 1000
[  479.411035][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3977'.
[  479.490511][T17463] lo speed is unknown, defaulting to 1000
[  479.591574][T17463] lo speed is unknown, defaulting to 1000
[  479.597744][T17463] lo speed is unknown, defaulting to 1000
[  479.838006][T17486] $Hÿ: left allmulticast mode
[  479.843025][T17486] bond_slave_0: left allmulticast mode
[  479.848727][T17486] bond_slave_1: left allmulticast mode
[  479.872516][T17486] !
: left allmulticast mode
[  479.877301][T17486] $Hÿ: left promiscuous mode
[  479.882230][T17486] bond_slave_0: left promiscuous mode
[  479.887886][T17486] bond_slave_1: left promiscuous mode
[  480.008057][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'.
[  480.026710][T17486] !
: left promiscuous mode
[  480.031471][T17486] bridge0: port 1($Hÿ) entered disabled state
[  480.042771][T17486] $Hÿ: (slave 
0!
): Releasing backup interface
[  480.050950][T17486] $Hÿ: (slave bond_slave_0): Releasing backup interface
[  480.059113][T17486] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  480.067760][T17486] bond1: (slave bridge1): Releasing active interface
[  480.200922][T17490] netlink: 'syz.1.3985': attribute type 21 has an invalid length.
[  480.439698][T17498] lo speed is unknown, defaulting to 1000
[  480.476982][T17498] lo speed is unknown, defaulting to 1000
[  480.483440][T17498] lo speed is unknown, defaulting to 1000
[  481.147988][T17530] block device autoloading is deprecated and will be removed.
[  481.149983][T17514] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3993'.
[  481.412853][T17539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17539 comm=syz.5.4004
[  481.418990][T17540] serio: Serial port ptm1
[  481.425587][T17539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17539 comm=syz.5.4004
[  481.475125][T17542] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[  481.485918][T17542] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32
[  481.512591][T17542] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  481.512591][T17542]    program +}[@ not setting count and/or reply_len properly
[  481.576319][T17542] loop3: detected capacity change from 0 to 8192
[  481.644826][T17551] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  481.663349][T17550] loop3: detected capacity change from 0 to 2048
[  481.683531][T17550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  481.703747][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'.
[  481.818223][T17558] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  481.833750][T17558] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1994 with error 28
[  481.846285][T17558] EXT4-fs (loop3): This should not happen!! Data will be lost
[  481.846285][T17558] 
[  481.855971][T17558] EXT4-fs (loop3): Total free blocks count 0
[  481.862117][T17558] EXT4-fs (loop3): Free/Dirty block details
[  481.868156][T17558] EXT4-fs (loop3): free_blocks=2415919104
[  481.873942][T17558] EXT4-fs (loop3): dirty_blocks=2000
[  481.879340][T17558] EXT4-fs (loop3): Block reservation details
[  481.885451][T17558] EXT4-fs (loop3): i_reserved_data_blocks=125
[  482.003377][ T5127] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  482.256024][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4011'.
[  482.270056][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4011'.
[  482.901738][T17594] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[  482.911154][T17594] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32
[  482.923864][T17594] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  482.923864][T17594]    program +}[@ not setting count and/or reply_len properly
[  482.959106][T17597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.983308][T17594] loop3: detected capacity change from 0 to 8192
[  483.153527][T17599] lo speed is unknown, defaulting to 1000
[  483.216988][T17599] lo speed is unknown, defaulting to 1000
[  483.225185][T17597] netlink: 45 bytes leftover after parsing attributes in process `syz.5.4017'.
[  483.234888][T17599] lo speed is unknown, defaulting to 1000
[  483.241113][T17602] siw: device registration error -23
[  483.295763][T17597] tipc: Disabling bearer <eth:syzkaller0>
[  483.363316][T17613] /dev/loop4: Can't lookup blockdev
[  483.394200][T17613] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  483.394200][T17613]    program +}[@ not setting count and/or reply_len properly
[  483.413186][T17607] lo speed is unknown, defaulting to 1000
[  483.423529][T17615] loop3: detected capacity change from 0 to 512
[  483.438027][T17615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  483.479920][T17607] lo speed is unknown, defaulting to 1000
[  483.486273][T17607] lo speed is unknown, defaulting to 1000
[  483.495702][T17615] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4022: bg 0: block 4: invalid block bitmap
[  483.510440][T17615] EXT4-fs (loop3): Remounting filesystem read-only
[  483.526118][T17615] EXT4-fs (loop3): 1 truncate cleaned up
[  483.536826][T17615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.726762][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'.
[  483.751788][   T29] kauditd_printk_skb: 1923 callbacks suppressed
[  483.751803][   T29] audit: type=1400 audit(1758285249.653:89520): avc:  denied  { prog_load } for  pid=17614 comm="syz.3.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  483.763030][T17628] pimreg: entered allmulticast mode
[  483.831980][   T29] audit: type=1400 audit(1758285249.653:89521): avc:  denied  { bpf } for  pid=17614 comm="syz.3.4022" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  483.853075][T17620] bond4: entered promiscuous mode
[  483.853535][   T29] audit: type=1400 audit(1758285249.653:89522): avc:  denied  { perfmon } for  pid=17614 comm="syz.3.4022" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  483.858430][T17620] bond4: entered allmulticast mode
[  483.884734][   T29] audit: type=1400 audit(1758285249.653:89523): avc:  denied  { prog_load } for  pid=17614 comm="syz.3.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  483.899075][T17629] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  483.904049][   T29] audit: type=1400 audit(1758285249.653:89524): avc:  denied  { map_create } for  pid=17614 comm="syz.3.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  483.922896][T17620] 8021q: adding VLAN 0 to HW filter on device bond4
[  483.930230][   T29] audit: type=1400 audit(1758285249.653:89525): avc:  denied  { map_read map_write } for  pid=17614 comm="syz.3.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  483.957172][   T29] audit: type=1400 audit(1758285249.653:89526): avc:  denied  { create } for  pid=17614 comm="syz.3.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  483.977031][   T29] audit: type=1400 audit(1758285249.653:89527): avc:  denied  { setopt } for  pid=17614 comm="syz.3.4022" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  483.990472][T17628] pimreg: left allmulticast mode
[  483.997825][   T29] audit: type=1400 audit(1758285249.703:89528): avc:  denied  { create } for  pid=17625 comm="syz.6.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  484.023517][   T29] audit: type=1400 audit(1758285249.713:89529): avc:  denied  { map_create } for  pid=17625 comm="syz.6.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  484.185963][T17624] netlink: 'syz.4.4023': attribute type 10 has an invalid length.
[  484.310468][T17645] /dev/loop4: Can't lookup blockdev
[  484.328083][T17645] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  484.328083][T17645]    program +}[@ not setting count and/or reply_len properly
[  484.438817][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.480489][T17648] loop3: detected capacity change from 0 to 2048
[  484.492009][T17648] Alternate GPT is invalid, using primary GPT.
[  484.498425][T17648]  loop3: p1 p2 p3
[  484.577709][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'.
[  484.933704][T17669] SELinux: security_context_str_to_sid (Ö) failed with errno=-22
[  485.092312][T17669] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4036'.
[  485.468964][T17714] loop3: detected capacity change from 0 to 1024
[  485.523347][T17714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.560201][T17714] ext4 filesystem being mounted at /849/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.612883][T17714] usb usb1: check_ctrlrecip: process 17714 (+}[@) requesting ep 01 but needs 81
[  485.652826][T17714] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[  485.660383][T17726] netlink: 'syz.1.4039': attribute type 10 has an invalid length.
[  485.705241][T17714] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 15)
[  485.721383][T17726] netlink: 'syz.1.4039': attribute type 1 has an invalid length.
[  485.729176][T17726] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4039'.
[  485.805199][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4047'.
[  485.818110][T17714] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  485.830528][T17714] EXT4-fs (loop3): This should not happen!! Data will be lost
[  485.830528][T17714] 
[  486.025868][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.422296][T17781] loop3: detected capacity change from 0 to 512
[  486.431050][T17781] ext4: Unknown parameter 'fsname'
[  486.513482][T17784] netlink: 'syz.3.4045': attribute type 10 has an invalid length.
[  486.727027][T17789] loop3: detected capacity change from 0 to 8192
[  486.736632][T17789] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  486.766126][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'.
[  486.890300][T17794] loop3: detected capacity change from 8192 to 0
[  486.896877][    C0] I/O error, dev loop3, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 3
[  486.906404][    C0] Buffer I/O error on dev loop3, logical block 33, lost sync page write
[  486.915224][    C0] I/O error, dev loop3, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 3
[  486.924492][    C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  486.933090][    C1] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[  486.942785][T17789] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050)
[  486.952199][    C1] I/O error, dev loop3, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 3
[  486.961742][    C1] Buffer I/O error on dev loop3, logical block 85, lost async page write
[  486.970215][    C1] I/O error, dev loop3, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 10 prio class 3
[  486.979809][    C1] Buffer I/O error on dev loop3, logical block 97, lost async page write
[  486.988312][    C1] Buffer I/O error on dev loop3, logical block 98, lost async page write
[  486.996769][    C1] Buffer I/O error on dev loop3, logical block 99, lost async page write
[  487.005258][    C1] Buffer I/O error on dev loop3, logical block 100, lost async page write
[  487.012559][T17796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  487.013816][    C1] Buffer I/O error on dev loop3, logical block 101, lost async page write
[  487.020331][T17796] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  487.020481][T17796] vhci_hcd vhci_hcd.0: Device attached
[  487.028866][    C1] Buffer I/O error on dev loop3, logical block 102, lost async page write
[  487.051435][    C1] Buffer I/O error on dev loop3, logical block 103, lost async page write
[  487.099742][T17793] vhci_hcd vhci_hcd.0: port 0 already used
[  487.168647][T17807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4052'.
[  487.310306][ T3385] usb 10-1: SetAddress Request (6) to port 0
[  487.316367][ T3385] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd
[  487.463006][T17810] __nla_validate_parse: 2 callbacks suppressed
[  487.463026][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4053'.
[  487.522814][T17813] raw_sendmsg: syz.1.4054 forgot to set AF_INET. Fix it!
[  487.597947][T17816] ref_ctr increment failed for inode: 0x11b6 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888108716d40
[  487.602214][T17813] lo speed is unknown, defaulting to 1000
[  487.647425][T17813] lo speed is unknown, defaulting to 1000
[  487.653731][T17813] lo speed is unknown, defaulting to 1000
[  487.670521][T17800] vhci_hcd: connection reset by peer
[  487.680527][ T5125] vhci_hcd: stop threads
[  487.684831][ T5125] vhci_hcd: release socket
[  487.689300][ T5125] vhci_hcd: disconnect device
[  487.767434][T17816] uprobe: syz.3.4055:17816 failed to unregister, leaking uprobe
[  487.964389][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4059'.
[  488.038176][T17829] /dev/loop3: Can't open blockdev
[  488.056491][T17829] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  488.056491][T17829]    program +}[@ not setting count and/or reply_len properly
[  488.363109][T17834] lo speed is unknown, defaulting to 1000
[  488.442297][T17834] lo speed is unknown, defaulting to 1000
[  488.449138][T17834] lo speed is unknown, defaulting to 1000
[  488.763120][   T29] kauditd_printk_skb: 2096 callbacks suppressed
[  488.763138][   T29] audit: type=1400 audit(1758285254.663:91626): avc:  denied  { unlink } for  pid=17830 comm="syz.6.4061" name="file0" dev="tmpfs" ino=2885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  489.061121][T17838] /dev/loop1: Can't lookup blockdev
[  489.150841][T17838] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  489.150841][T17838]    program +}[@ not setting count and/or reply_len properly
[  489.197511][   T29] audit: type=1400 audit(1758285254.953:91627): avc:  denied  { create } for  pid=17837 comm="syz.1.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  489.217327][   T29] audit: type=1400 audit(1758285254.953:91628): avc:  denied  { mounton } for  pid=17837 comm="syz.1.4062" path="/839" dev="tmpfs" ino=4447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  489.239867][   T29] audit: type=1326 audit(1758285254.983:91629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17827 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fce7987ecb7 code=0x7ffc0000
[  489.263034][   T29] audit: type=1326 audit(1758285254.983:91630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17827 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce7987d590 code=0x7ffc0000
[  489.286189][   T29] audit: type=1400 audit(1758285254.983:91631): avc:  denied  { read write } for  pid=17827 comm="+}[@" name="loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  489.309304][   T29] audit: type=1400 audit(1758285254.983:91632): avc:  denied  { read write open } for  pid=17827 comm="+}[@" path="/dev/loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  489.333033][   T29] audit: type=1326 audit(1758285254.983:91633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17827 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fce7987d88a code=0x7ffc0000
[  489.355966][   T29] audit: type=1400 audit(1758285255.023:91634): avc:  denied  { prog_load } for  pid=17837 comm="syz.1.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  489.375201][   T29] audit: type=1400 audit(1758285255.023:91635): avc:  denied  { bpf } for  pid=17837 comm="syz.1.4062" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  489.787760][T17851] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4066'.
[  489.803283][T17851] 0ªî{X¹¦: renamed from gretap0
[  489.828203][T17851] 0ªî{X¹¦: entered allmulticast mode
[  489.978304][T17851] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  490.267229][T17858] lo speed is unknown, defaulting to 1000
[  490.328635][T17858] lo speed is unknown, defaulting to 1000
[  490.335092][T17858] lo speed is unknown, defaulting to 1000
[  490.627614][T17865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4070'.
[  490.749596][T17869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4069'.
[  491.125278][T17866] lo speed is unknown, defaulting to 1000
[  491.126299][T17878] /dev/loop3: Can't open blockdev
[  491.152472][T17878] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  491.152472][T17878]    program +}[@ not setting count and/or reply_len properly
[  491.290818][T17866] lo speed is unknown, defaulting to 1000
[  491.297125][T17866] lo speed is unknown, defaulting to 1000
[  491.446232][T17879] random: crng reseeded on system resumption
[  491.892434][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4077'.
[  491.958853][T17898] usb usb1: check_ctrlrecip: process 17898 (+}[@) requesting ep 01 but needs 81
[  491.968467][T17898] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[  492.205296][T17904] SELinux:  policydb version 0 does not match my version range 15-35
[  492.213546][T17904] SELinux: failed to load policy
[  492.289862][T17903] SELinux:  policydb version 280 does not match my version range 15-35
[  492.298573][T17903] SELinux: failed to load policy
[  492.420035][ T3385] usb 10-1: device descriptor read/8, error -110
[  492.608434][T17916] atomic_op ffff8881046e2d28 conn xmit_atomic 0000000000000000
[  492.994698][ T3385] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd
[  493.023331][ T3385] usb 10-1: enqueue for inactive port 0
[  493.045691][ T3385] usb 10-1: enqueue for inactive port 0
[  493.053573][T17921] /dev/loop4: Can't lookup blockdev
[  493.054635][ T3385] usb 10-1: enqueue for inactive port 0
[  493.093381][T17921] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  493.093381][T17921]    program +}[@ not setting count and/or reply_len properly
[  493.384644][T17933] SELinux:  Context Ü is not valid (left unmapped).
[  493.506725][T17941] SELinux:  Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped).
[  493.732691][T17941] lo speed is unknown, defaulting to 1000
[  493.813255][T17941] lo speed is unknown, defaulting to 1000
[  493.819825][T17941] lo speed is unknown, defaulting to 1000
[  493.996365][   T29] kauditd_printk_skb: 929 callbacks suppressed
[  493.996385][   T29] audit: type=1400 audit(1758285259.393:92427): avc:  denied  { prog_load } for  pid=17924 comm="syz.5.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  494.022086][   T29] audit: type=1400 audit(1758285259.393:92428): avc:  denied  { bpf } for  pid=17924 comm="syz.5.4086" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  494.042838][   T29] audit: type=1400 audit(1758285259.393:92429): avc:  denied  { perfmon } for  pid=17924 comm="syz.5.4086" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  494.064630][   T29] audit: type=1400 audit(1758285259.393:92430): avc:  denied  { prog_run } for  pid=17924 comm="syz.5.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  494.083825][   T29] audit: type=1400 audit(1758285259.403:92431): avc:  denied  { relabelfrom } for  pid=17924 comm="syz.5.4086" name="NETLINK" dev="sockfs" ino=59752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  494.108353][   T29] audit: type=1400 audit(1758285259.403:92432): avc:  denied  { mac_admin } for  pid=17924 comm="syz.5.4086" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  494.130037][   T29] audit: type=1400 audit(1758285259.413:92433): avc:  denied  { relabelto } for  pid=17924 comm="syz.5.4086" name="NETLINK" dev="sockfs" ino=59752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  494.159270][   T29] audit: type=1400 audit(1758285259.423:92434): avc:  denied  { allowed } for  pid=17924 comm="syz.5.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  494.178813][   T29] audit: type=1400 audit(1758285259.423:92435): avc:  denied  { create } for  pid=17924 comm="syz.5.4086" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  494.200831][   T29] audit: type=1400 audit(1758285259.423:92436): avc:  denied  { map } for  pid=17924 comm="syz.5.4086" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  494.320729][T17949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4088'.
[  494.375989][T17935] random: crng reseeded on system resumption
[  494.415068][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4093'.
[  494.440304][ T3385] usb usb10-port1: attempt power cycle
[  494.450836][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4093'.
[  494.549249][T17940] lo speed is unknown, defaulting to 1000
[  494.664392][T17961] netlink: 'syz.5.4095': attribute type 10 has an invalid length.
[  494.708865][T17940] lo speed is unknown, defaulting to 1000
[  494.731679][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4094'.
[  494.810056][T17940] lo speed is unknown, defaulting to 1000
[  494.904419][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4092'.
[  495.403187][T17978] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  495.426190][T17978] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  495.466276][T17978] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  495.466276][T17978]    program +}[@ not setting count and/or reply_len properly
[  495.537249][T17978] loop1: detected capacity change from 0 to 8192
[  495.737241][T17983] lo speed is unknown, defaulting to 1000
[  495.781058][T17983] lo speed is unknown, defaulting to 1000
[  495.787542][T17983] lo speed is unknown, defaulting to 1000
[  496.024103][T17991] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4102'.
[  496.146990][T18001] pim6reg: entered allmulticast mode
[  496.163393][T18001] pim6reg: left allmulticast mode
[  496.211242][T18001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4104'.
[  496.310985][T18001] tipc: New replicast peer: 10.1.1.2
[  496.316392][T18001] tipc: Enabled bearer <udp:syz2>, priority 10
[  496.653204][T18018] lo speed is unknown, defaulting to 1000
[  496.735529][T18018] lo speed is unknown, defaulting to 1000
[  496.742306][T18018] lo speed is unknown, defaulting to 1000
[  497.304240][ T3385] usb usb10-port1: unable to enumerate USB device
[  497.386772][T18021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'.
[  498.083522][T18016] lo speed is unknown, defaulting to 1000
[  498.203630][T18016] lo speed is unknown, defaulting to 1000
[  498.211067][T18023] lo speed is unknown, defaulting to 1000
[  498.254577][T18016] lo speed is unknown, defaulting to 1000
[  498.296396][ T3385] tipc: Node number set to 2821751390
[  498.352025][T18023] lo speed is unknown, defaulting to 1000
[  498.390467][T18023] lo speed is unknown, defaulting to 1000
[  498.460913][T18033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4115'.
[  498.470048][T18033] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4115'.
[  498.500565][T18032] netlink: 'syz.6.4114': attribute type 6 has an invalid length.
[  498.702031][T18040] SELinux:  policydb version 280 does not match my version range 15-35
[  498.760861][T18040] SELinux: failed to load policy
[  499.000589][   T29] kauditd_printk_skb: 760 callbacks suppressed
[  499.000605][   T29] audit: type=1400 audit(1758285264.903:93197): avc:  denied  { prog_run } for  pid=18025 comm="syz.3.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  499.051002][   T29] audit: type=1400 audit(1758285264.903:93198): avc:  denied  { map_create } for  pid=18034 comm="syz.4.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  499.070416][   T29] audit: type=1400 audit(1758285264.903:93199): avc:  denied  { prog_load } for  pid=18034 comm="syz.4.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  499.089776][   T29] audit: type=1400 audit(1758285264.903:93200): avc:  denied  { bpf } for  pid=18034 comm="syz.4.4113" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  499.110681][   T29] audit: type=1400 audit(1758285264.903:93201): avc:  denied  { perfmon } for  pid=18034 comm="syz.4.4113" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  499.131775][   T29] audit: type=1400 audit(1758285264.903:93202): avc:  denied  { perfmon } for  pid=18034 comm="syz.4.4113" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  499.152989][   T29] audit: type=1400 audit(1758285264.903:93203): avc:  denied  { bpf } for  pid=18034 comm="syz.4.4113" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  499.173731][   T29] audit: type=1400 audit(1758285264.903:93204): avc:  denied  { map_create } for  pid=18034 comm="syz.4.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  499.193208][   T29] audit: type=1326 audit(1758285264.903:93205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88cb5ec29 code=0x7ffc0000
[  499.216840][   T29] audit: type=1400 audit(1758285264.903:93206): avc:  denied  { prog_load } for  pid=18046 comm="syz.5.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  499.301766][T18027] netlink: 'syz.3.4112': attribute type 1 has an invalid length.
[  499.365708][T18052] random: crng reseeded on system resumption
[  499.740121][T18028] __nla_validate_parse: 5 callbacks suppressed
[  499.740136][T18028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4112'.
[  499.755525][T18028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4112'.
[  499.792703][T18027] 8021q: adding VLAN 0 to HW filter on device bond5
[  499.901603][T18067] loop1: detected capacity change from 0 to 128
[  499.917886][T18067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  499.926023][T18067] System zones: 1-3, 19-19, 35-36
[  499.946206][T18067] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  499.965805][T18076] netlink: 'syz.5.4123': attribute type 29 has an invalid length.
[  499.977408][T18076] netlink: 'syz.5.4123': attribute type 29 has an invalid length.
[  499.985170][T18067] ext4 filesystem being mounted at /852/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  499.992129][T18076] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4123'.
[  500.052881][T18076] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.4123'.
[  500.086820][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  500.141694][T18077] lo speed is unknown, defaulting to 1000
[  500.222896][T18077] lo speed is unknown, defaulting to 1000
[  500.237072][T18077] lo speed is unknown, defaulting to 1000
[  500.539062][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4127'.
[  500.668552][T18091] lo speed is unknown, defaulting to 1000
[  500.743008][T18091] lo speed is unknown, defaulting to 1000
[  500.774335][T18091] lo speed is unknown, defaulting to 1000
[  501.196197][T18102] lo speed is unknown, defaulting to 1000
[  501.269401][T18102] lo speed is unknown, defaulting to 1000
[  501.276529][T18102] lo speed is unknown, defaulting to 1000
[  501.831836][T18107] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4130'.
[  502.075915][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4132'.
[  502.682028][T18114] /dev/loop4: Can't lookup blockdev
[  502.693826][T18124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4135'.
[  502.756541][T18128] netlink: 'syz.5.4136': attribute type 1 has an invalid length.
[  502.764392][T18128] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4136'.
[  502.886359][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'.
[  502.897547][T18134] loop1: detected capacity change from 0 to 2048
[  502.900587][T18114] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  502.900587][T18114]    program syz.4.4133 not setting count and/or reply_len properly
[  502.951428][T18134]  loop1: p1 < > p4
[  502.957535][T18134] loop1: p4 size 8388608 extends beyond EOD, truncated
[  503.013183][T18134] syzkaller1: entered promiscuous mode
[  503.018784][T18134] syzkaller1: entered allmulticast mode
[  503.101893][T18144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.111049][T18144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.884891][T18158] netlink: 'syz.1.4143': attribute type 3 has an invalid length.
[  503.976633][T18167] netlink: 'syz.1.4149': attribute type 21 has an invalid length.
[  503.995035][T18167] netlink: 'syz.1.4149': attribute type 1 has an invalid length.
[  504.013762][   T29] kauditd_printk_skb: 1338 callbacks suppressed
[  504.013781][   T29] audit: type=1400 audit(1758285269.913:94488): avc:  denied  { bpf } for  pid=18164 comm="syz.3.4148" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  504.041060][   T29] audit: type=1400 audit(1758285269.913:94489): avc:  denied  { create } for  pid=18166 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  504.061737][   T29] audit: type=1400 audit(1758285269.913:94490): avc:  denied  { perfmon } for  pid=18164 comm="syz.3.4148" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  504.083206][   T29] audit: type=1400 audit(1758285269.913:94491): avc:  denied  { create } for  pid=18166 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  504.104154][   T29] audit: type=1400 audit(1758285269.913:94492): avc:  denied  { map_create } for  pid=18166 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  504.123663][   T29] audit: type=1400 audit(1758285269.913:94493): avc:  denied  { perfmon } for  pid=18166 comm="syz.1.4149" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  504.145046][   T29] audit: type=1400 audit(1758285269.913:94494): avc:  denied  { map_read map_write } for  pid=18166 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  504.165206][   T29] audit: type=1400 audit(1758285269.913:94495): avc:  denied  { prog_load } for  pid=18166 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  504.184562][   T29] audit: type=1400 audit(1758285269.913:94496): avc:  denied  { bpf } for  pid=18166 comm="syz.1.4149" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  504.205432][   T29] audit: type=1400 audit(1758285269.913:94497): avc:  denied  { perfmon } for  pid=18166 comm="syz.1.4149" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  504.408709][T18175] /dev/loop3: Can't open blockdev
[  504.441842][T18175] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  504.441842][T18175]    program +}[@ not setting count and/or reply_len properly
[  505.054762][T18194] lo speed is unknown, defaulting to 1000
[  505.114444][T18194] lo speed is unknown, defaulting to 1000
[  505.120977][T18194] lo speed is unknown, defaulting to 1000
[  505.459830][T18197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  505.466493][T18197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  505.474127][T18197] vhci_hcd vhci_hcd.0: Device attached
[  505.512941][T18198] vhci_hcd: connection closed
[  505.513228][   T37] vhci_hcd: stop threads
[  505.522285][   T37] vhci_hcd: release socket
[  505.526964][   T37] vhci_hcd: disconnect device
[  505.654773][T18204] netlink: zone id is out of range
[  505.660263][T18204] netlink: zone id is out of range
[  505.665498][T18204] netlink: zone id is out of range
[  505.670779][T18204] netlink: zone id is out of range
[  505.676282][T18204] netlink: zone id is out of range
[  505.681756][T18204] netlink: zone id is out of range
[  505.686904][T18204] netlink: zone id is out of range
[  505.692245][T18204] netlink: zone id is out of range
[  505.697463][T18204] netlink: zone id is out of range
[  505.703226][T18204] netlink: zone id is out of range
[  505.801474][T18205] vxcan1: entered allmulticast mode
[  505.808546][T18205] SELinux:  policydb version -299076691 does not match my version range 15-35
[  505.817589][T18205] SELinux: failed to load policy
[  506.101819][T18213] pimreg: entered allmulticast mode
[  506.109278][T18213] pimreg: left allmulticast mode
[  506.601772][T18225] lo speed is unknown, defaulting to 1000
[  506.671972][T18225] lo speed is unknown, defaulting to 1000
[  506.678620][T18225] lo speed is unknown, defaulting to 1000
[  507.058008][T18223] __nla_validate_parse: 8 callbacks suppressed
[  507.058024][T18223] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4166'.
[  507.096782][T18223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  507.411615][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'.
[  507.564433][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'.
[  507.580903][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4173'.
[  507.657334][T18247] 8021q: adding VLAN 0 to HW filter on device bond6
[  507.671914][T18254] vlan0: entered allmulticast mode
[  507.677080][T18254] bond6: entered allmulticast mode
[  507.751672][T18253] netlink: 'syz.6.4174': attribute type 1 has an invalid length.
[  507.833325][T18261] dummy0: entered allmulticast mode
[  507.838747][T18264] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4177'.
[  507.848262][T18264] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4177'.
[  507.857506][T18264] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4177'.
[  507.866950][T18264] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4177'.
[  507.876227][T18261] dummy0: left allmulticast mode
[  507.884249][T18261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18261 comm=syz.5.4176
[  507.897297][T18261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18261 comm=syz.5.4176
[  507.927850][T18261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=18261 comm=syz.5.4176
[  507.998386][T18270] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  508.004956][T18270] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  508.012624][T18270] vhci_hcd vhci_hcd.0: Device attached
[  508.168323][T18275] vhci_hcd: connection closed
[  508.168553][   T37] vhci_hcd: stop threads
[  508.177722][   T37] vhci_hcd: release socket
[  508.182309][   T37] vhci_hcd: disconnect device
[  508.210729][ T3385] vhci_hcd: vhci_device speed not set
[  508.875800][T18300] pimreg: entered allmulticast mode
[  508.884706][T18300] pimreg: left allmulticast mode
[  509.020519][   T29] kauditd_printk_skb: 1517 callbacks suppressed
[  509.020538][   T29] audit: type=1400 audit(1758285274.923:95964): avc:  denied  { prog_run } for  pid=18306 comm="syz.1.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  509.069638][   T29] audit: type=1326 audit(1758285274.923:95965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.093468][   T29] audit: type=1326 audit(1758285274.923:95966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.117076][   T29] audit: type=1326 audit(1758285274.943:95967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.140775][   T29] audit: type=1326 audit(1758285274.943:95968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.164885][   T29] audit: type=1326 audit(1758285274.943:95969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.188567][   T29] audit: type=1326 audit(1758285274.943:95970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.212166][   T29] audit: type=1326 audit(1758285274.943:95971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18306 comm="syz.1.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  509.236083][   T29] audit: type=1400 audit(1758285274.943:95972): avc:  denied  { allowed } for  pid=18306 comm="syz.1.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  509.255828][   T29] audit: type=1400 audit(1758285274.943:95973): avc:  denied  { create } for  pid=18306 comm="syz.1.4185" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  509.278074][T18302] lo speed is unknown, defaulting to 1000
[  509.314161][T18302] lo speed is unknown, defaulting to 1000
[  509.320560][T18302] lo speed is unknown, defaulting to 1000
[  509.508794][T18319] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  509.515359][T18319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  509.522980][T18319] vhci_hcd vhci_hcd.0: Device attached
[  509.552582][T18319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  509.633005][T18326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4188'.
[  509.642560][T18319] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12)
[  509.649190][T18319] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  509.656840][T18319] vhci_hcd vhci_hcd.0: Device attached
[  509.863461][T18316] lo speed is unknown, defaulting to 1000
[  509.937437][T18316] lo speed is unknown, defaulting to 1000
[  509.944418][T18316] lo speed is unknown, defaulting to 1000
[  509.984069][ T3385] vhci_hcd: vhci_device speed not set
[  509.996350][T18318] pim6reg: entered allmulticast mode
[  510.039534][T18323] pim6reg: left allmulticast mode
[  510.049974][ T3385] usb 11-1: new full-speed USB device number 5 using vhci_hcd
[  510.090672][T18315] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  510.118359][T18331] tipc: Started in network mode
[  510.123425][T18331] tipc: Node identity 32421d34d8ae, cluster identity 4711
[  510.130820][T18331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  510.146086][T18320] vhci_hcd: connection reset by peer
[  510.159308][T18322] vhci_hcd: connection closed
[  510.161109][ T7910] vhci_hcd: stop threads
[  510.170278][ T7910] vhci_hcd: release socket
[  510.174745][ T7910] vhci_hcd: disconnect device
[  510.226434][ T7910] vhci_hcd: stop threads
[  510.230878][ T7910] vhci_hcd: release socket
[  510.235305][ T7910] vhci_hcd: disconnect device
[  510.240746][T18332] tipc: Disabling bearer <eth:syzkaller0>
[  510.342291][T18335] ref_ctr increment failed for inode: 0x124b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881466d2840
[  510.528844][T18335] uprobe: syz.3.4190:18335 failed to unregister, leaking uprobe
[  510.824593][T18346] lo speed is unknown, defaulting to 1000
[  510.894427][T18346] lo speed is unknown, defaulting to 1000
[  510.901038][T18346] lo speed is unknown, defaulting to 1000
[  511.550553][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4195'.
[  511.851938][T18361] SELinux:  policydb version 0 does not match my version range 15-35
[  511.860339][T18361] SELinux: failed to load policy
[  512.945121][T18355] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  513.085699][T18360] lo speed is unknown, defaulting to 1000
[  513.125433][T18360] lo speed is unknown, defaulting to 1000
[  513.131916][T18360] lo speed is unknown, defaulting to 1000
[  513.151675][T18367] loop1: detected capacity change from 0 to 1024
[  513.175863][T18367] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  513.210192][T18365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.250296][T18365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.967650][T18393] hub 1-0:1.0: USB hub found
[  513.975064][T18393] hub 1-0:1.0: 8 ports detected
[  514.061056][   T29] kauditd_printk_skb: 700 callbacks suppressed
[  514.061074][   T29] audit: type=1400 audit(1758285279.963:96674): avc:  denied  { create } for  pid=18397 comm="syz.1.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  514.098479][   T29] audit: type=1400 audit(1758285279.983:96675): avc:  denied  { create } for  pid=18397 comm="syz.1.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  514.118782][   T29] audit: type=1400 audit(1758285279.993:96676): avc:  denied  { prog_load } for  pid=18397 comm="syz.1.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  514.138454][   T29] audit: type=1400 audit(1758285279.993:96677): avc:  denied  { bpf } for  pid=18397 comm="syz.1.4208" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  514.160293][   T29] audit: type=1400 audit(1758285279.993:96678): avc:  denied  { ioctl } for  pid=18397 comm="syz.1.4208" path="socket:[60984]" dev="sockfs" ino=60984 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  514.185802][   T29] audit: type=1400 audit(1758285279.993:96679): avc:  denied  { bind } for  pid=18397 comm="syz.1.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  514.242164][   T29] audit: type=1400 audit(1758285280.073:96680): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  514.265942][   T29] audit: type=1400 audit(1758285280.073:96681): avc:  denied  { open } for  pid=3310 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  514.290140][   T29] audit: type=1400 audit(1758285280.093:96682): avc:  denied  { prog_load } for  pid=18401 comm="syz.3.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  514.310389][   T29] audit: type=1400 audit(1758285280.093:96683): avc:  denied  { bpf } for  pid=18401 comm="syz.3.4209" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  514.634287][T18407] lo speed is unknown, defaulting to 1000
[  514.694813][T18407] lo speed is unknown, defaulting to 1000
[  514.701333][T18407] lo speed is unknown, defaulting to 1000
[  515.259637][ T3385] usb 11-1: enqueue for inactive port 0
[  515.289769][ T3385] usb 11-1: enqueue for inactive port 0
[  515.327761][T18411] loop1: detected capacity change from 0 to 1024
[  515.372761][T18411] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  515.381586][ T3385] vhci_hcd: vhci_device speed not set
[  515.456795][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'.
[  515.684827][T18420] netlink: 'syz.6.4213': attribute type 21 has an invalid length.
[  515.693179][T18420] netlink: 'syz.6.4213': attribute type 1 has an invalid length.
[  515.700987][T18420] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4213'.
[  516.270209][T18424] loop1: detected capacity change from 0 to 1024
[  516.881681][T18424] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  516.895962][T18424] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  516.904265][T18424] EXT4-fs (loop1): orphan cleanup on readonly fs
[  516.910989][T18424] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  516.925656][T18424] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  516.932841][T18424] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4210: Freeing blocks not in datazone - block = 0, count = 4096
[  516.946526][T18424] EXT4-fs (loop1): 1 orphan inode deleted
[  516.952706][T18424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  517.004058][T18422] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.4210: iget: bad extended attribute block 6
[  517.021234][T18422] SELinux:  policydb version 0 does not match my version range 15-35
[  517.029399][T18422] SELinux: failed to load policy
[  517.053078][T18423] lo speed is unknown, defaulting to 1000
[  517.227964][T18423] lo speed is unknown, defaulting to 1000
[  517.235626][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.235799][T18423] lo speed is unknown, defaulting to 1000
[  517.611380][T18448] netlink: 'syz.6.4221': attribute type 1 has an invalid length.
[  517.619346][T18448] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4221'.
[  517.688168][    C0] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  517.699376][ T5125] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050)
[  518.151448][T18455] lo speed is unknown, defaulting to 1000
[  518.284342][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4231'.
[  518.287384][T18477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.321758][T18477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.333121][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4231'.
[  518.374072][T18455] lo speed is unknown, defaulting to 1000
[  518.397626][T18455] lo speed is unknown, defaulting to 1000
[  518.875274][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4233'.
[  519.037621][T18488] lo speed is unknown, defaulting to 1000
[  519.083705][   T29] kauditd_printk_skb: 852 callbacks suppressed
[  519.083721][   T29] audit: type=1400 audit(1758285284.983:97535): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  519.113455][   T29] audit: type=1400 audit(1758285284.983:97536): avc:  denied  { open } for  pid=3310 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  519.548943][   T29] audit: type=1400 audit(1758285285.043:97537): avc:  denied  { map_create } for  pid=18476 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.568566][   T29] audit: type=1400 audit(1758285285.043:97538): avc:  denied  { map_read map_write } for  pid=18476 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.588763][   T29] audit: type=1400 audit(1758285285.043:97539): avc:  denied  { prog_load } for  pid=18476 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.608249][   T29] audit: type=1400 audit(1758285285.043:97540): avc:  denied  { bpf } for  pid=18476 comm="syz.4.4229" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  519.629149][   T29] audit: type=1400 audit(1758285285.043:97541): avc:  denied  { perfmon } for  pid=18476 comm="syz.4.4229" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  519.630688][T18488] lo speed is unknown, defaulting to 1000
[  519.650291][   T29] audit: type=1400 audit(1758285285.043:97542): avc:  denied  { prog_run } for  pid=18476 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.675549][   T29] audit: type=1400 audit(1758285285.053:97543): avc:  denied  { create } for  pid=18476 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  519.676663][T18488] lo speed is unknown, defaulting to 1000
[  519.696420][   T29] audit: type=1400 audit(1758285285.053:97544): avc:  denied  { write } for  pid=18476 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  520.496325][T18502] lo speed is unknown, defaulting to 1000
[  520.537788][T18502] lo speed is unknown, defaulting to 1000
[  520.559034][T18502] lo speed is unknown, defaulting to 1000
[  520.657599][T18516] loop1: detected capacity change from 0 to 2048
[  520.701878][T18516] Alternate GPT is invalid, using primary GPT.
[  520.708367][T18516]  loop1: p1 p2 p3
[  520.864731][T18521] 9pnet_fd: Insufficient options for proto=fd
[  521.072682][T18532] netlink: 'syz.1.4245': attribute type 6 has an invalid length.
[  521.378805][T18534] lo speed is unknown, defaulting to 1000
[  521.466361][T18534] lo speed is unknown, defaulting to 1000
[  521.474038][T18534] lo speed is unknown, defaulting to 1000
[  522.137189][T18532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=18532 comm=syz.1.4245
[  522.288463][T18541] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4245'.
[  522.490833][T18536] Falling back ldisc for ttyS3.
[  522.590094][T18546] lo speed is unknown, defaulting to 1000
[  522.634133][T18546] lo speed is unknown, defaulting to 1000
[  522.651274][T18546] lo speed is unknown, defaulting to 1000
[  522.855110][T18553] loop1: detected capacity change from 0 to 512
[  522.872471][T18553] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  522.888216][T18553] EXT4-fs (loop1): mount failed
[  523.121953][T18564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4251'.
[  523.857348][T18567] lo speed is unknown, defaulting to 1000
[  523.903106][T18567] lo speed is unknown, defaulting to 1000
[  523.909417][T18567] lo speed is unknown, defaulting to 1000
[  524.090730][   T29] kauditd_printk_skb: 568 callbacks suppressed
[  524.090939][   T29] audit: type=1400 audit(1758285289.353:98112): avc:  denied  { create } for  pid=18562 comm="syz.5.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  524.116974][   T29] audit: type=1400 audit(1758285289.493:98113): avc:  denied  { bind } for  pid=18562 comm="syz.5.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  524.136590][   T29] audit: type=1400 audit(1758285289.663:98114): avc:  denied  { write } for  pid=18562 comm="syz.5.4252" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  524.159969][   T29] audit: type=1400 audit(1758285289.663:98115): avc:  denied  { write } for  pid=18562 comm="syz.5.4252" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  524.184854][   T29] audit: type=1400 audit(1758285289.833:98116): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  524.208533][   T29] audit: type=1400 audit(1758285289.833:98117): avc:  denied  { open } for  pid=3310 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  524.267410][   T29] audit: type=1400 audit(1758285290.163:98118): avc:  denied  { create } for  pid=18568 comm="syz.6.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  524.288257][   T29] audit: type=1400 audit(1758285290.173:98119): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  524.311959][   T29] audit: type=1400 audit(1758285290.173:98120): avc:  denied  { open } for  pid=3312 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  524.336045][   T29] audit: type=1400 audit(1758285290.173:98121): avc:  denied  { ioctl } for  pid=3312 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=908 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  524.499756][T18574] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  524.511554][T18571] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4254'.
[  524.626652][T18587] /dev/loop6: Can't lookup blockdev
[  524.666443][T18587] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  524.666443][T18587]    program +}[@ not setting count and/or reply_len properly
[  524.741727][T18591] loop1: detected capacity change from 0 to 512
[  524.777422][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  524.791384][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  524.802213][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  524.812428][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  524.823321][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  524.904871][T18591] loop1: detected capacity change from 0 to 512
[  524.913982][T18595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4261'.
[  524.923139][T18595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4261'.
[  524.935703][T18591] EXT4-fs (loop1): orphan cleanup on readonly fs
[  524.943407][T18591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4260: bg 0: block 248: padding at end of block bitmap is not set
[  524.958677][T18591] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4260: Failed to acquire dquot type 1
[  524.971152][T18591] EXT4-fs (loop1): 1 truncate cleaned up
[  524.978589][T18591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  525.008010][T18591] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.4260: deleted inode referenced: 12
[  525.021176][T18591] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.4260: deleted inode referenced: 12
[  525.112516][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.161873][T18604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  525.168526][T18604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  525.176332][T18604] vhci_hcd vhci_hcd.0: Device attached
[  525.186209][T18609] vhci_hcd: unknown pdu 2
[  525.229263][ T5127] vhci_hcd: stop threads
[  525.233616][ T5127] vhci_hcd: release socket
[  525.238134][ T5127] vhci_hcd: disconnect device
[  525.584696][T18612] lo speed is unknown, defaulting to 1000
[  525.660295][T18612] lo speed is unknown, defaulting to 1000
[  525.666976][T18612] lo speed is unknown, defaulting to 1000
[  525.957975][T18616] net_ratelimit: 1 callbacks suppressed
[  525.957994][T18616] netlink: zone id is out of range
[  525.968873][T18616] netlink: zone id is out of range
[  525.974130][T18616] netlink: zone id is out of range
[  525.979246][T18616] netlink: zone id is out of range
[  525.984376][T18616] netlink: zone id is out of range
[  525.989478][T18616] netlink: zone id is out of range
[  525.994622][T18616] netlink: zone id is out of range
[  525.999810][T18616] netlink: zone id is out of range
[  526.005015][T18616] netlink: zone id is out of range
[  526.010191][T18616] netlink: zone id is out of range
[  526.192933][T18621] netlink: 'syz.4.4266': attribute type 1 has an invalid length.
[  526.546708][T18629] lo speed is unknown, defaulting to 1000
[  526.620889][T18629] lo speed is unknown, defaulting to 1000
[  526.627453][T18629] lo speed is unknown, defaulting to 1000
[  526.859875][T18631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18631 comm=syz.1.4269
[  527.265034][   T10] usb usb8-port1: attempt power cycle
[  527.431197][T18638] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  527.446049][T18638] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  527.467853][T18638] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  527.467853][T18638]    program +}[@ not setting count and/or reply_len properly
[  527.498544][T18639] __nla_validate_parse: 1 callbacks suppressed
[  527.498562][T18639] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.4272'.
[  527.513963][T18639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4272'.
[  527.556084][T18638] loop1: detected capacity change from 0 to 8192
[  527.981655][T18647] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4284'.
[  528.011413][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4274'.
[  528.021187][T18644] loop1: detected capacity change from 0 to 128
[  528.218772][T18652] netlink: 'syz.3.4275': attribute type 4 has an invalid length.
[  528.226582][T18652] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4275'.
[  528.370061][T18649] lo speed is unknown, defaulting to 1000
[  528.432248][T18649] lo speed is unknown, defaulting to 1000
[  528.438677][T18649] lo speed is unknown, defaulting to 1000
[  528.586594][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4275'.
[  529.105182][   T29] kauditd_printk_skb: 890 callbacks suppressed
[  529.105197][   T29] audit: type=1400 audit(1758285295.003:99010): avc:  denied  { map_read map_write } for  pid=18656 comm="syz.6.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  529.248694][T18662] pim6reg: entered allmulticast mode
[  529.255544][T18658] serio: Serial port ptm1
[  529.260232][   T29] audit: type=1400 audit(1758285295.053:99011): avc:  denied  { prog_load } for  pid=18656 comm="syz.6.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  529.279953][   T29] audit: type=1400 audit(1758285295.063:99012): avc:  denied  { prog_load } for  pid=18656 comm="syz.6.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  529.299575][   T29] audit: type=1400 audit(1758285295.063:99013): avc:  denied  { bpf } for  pid=18656 comm="syz.6.4277" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.321060][   T29] audit: type=1400 audit(1758285295.063:99014): avc:  denied  { perfmon } for  pid=18656 comm="syz.6.4277" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.342372][   T29] audit: type=1400 audit(1758285295.073:99015): avc:  denied  { mount } for  pid=18656 comm="syz.6.4277" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  529.365017][   T29] audit: type=1400 audit(1758285295.083:99016): avc:  denied  { create } for  pid=18657 comm="syz.1.4288" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  529.385960][   T29] audit: type=1400 audit(1758285295.083:99017): avc:  denied  { create } for  pid=18656 comm="syz.6.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  529.405823][   T29] audit: type=1400 audit(1758285295.083:99018): avc:  denied  { map_create } for  pid=18656 comm="syz.6.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  529.425309][   T29] audit: type=1400 audit(1758285295.083:99019): avc:  denied  { bpf } for  pid=18656 comm="syz.6.4277" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.472271][T18659] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4277'.
[  529.482612][T18663] pim6reg: left allmulticast mode
[  529.517848][T18662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4278'.
[  529.545945][T18662] tipc: New replicast peer: 10.1.1.2
[  529.551862][T18662] tipc: Enabled bearer <udp:syz2>, priority 10
[  529.583916][T18666] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  529.594179][T18666] SELinux: failed to load policy
[  529.760594][T18674] program syz.6.4281 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  529.777763][T18671] program syz.1.4280 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  529.942359][T18678] ref_ctr_offset mismatch. inode: 0x1297 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  530.030606][T18676] Falling back ldisc for ttyS3.
[  530.296568][T18693] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  530.303150][T18693] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  530.311448][T18693] vhci_hcd vhci_hcd.0: Device attached
[  530.320947][T18699] vhci_hcd: unknown pdu 2
[  530.325535][ T5137] vhci_hcd: stop threads
[  530.330012][ T5137] vhci_hcd: release socket
[  530.334450][ T5137] vhci_hcd: disconnect device
[  530.559964][ T3413] tipc: Node number set to 729878766
[  530.990398][T18711] syzkaller0: entered allmulticast mode
[  531.007503][T18711] netlink: 464 bytes leftover after parsing attributes in process `syz.6.4303'.
[  531.022766][T18711] syzkaller0 (unregistering): left allmulticast mode
[  531.034850][T18710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4293'.
[  531.105396][T18713] serio: Serial port ptm1
[  531.288679][T18717] lo speed is unknown, defaulting to 1000
[  531.395222][T18717] lo speed is unknown, defaulting to 1000
[  531.401672][T18717] lo speed is unknown, defaulting to 1000
[  531.560264][   T10] usb usb8-port1: unable to enumerate USB device
[  531.752514][T18744] pim6reg: entered allmulticast mode
[  531.808091][T18744] pim6reg: left allmulticast mode
[  532.052646][T18755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.086030][T18755] syzkaller0: entered promiscuous mode
[  532.091736][T18755] syzkaller0: entered allmulticast mode
[  532.122994][T18755] tipc: Resetting bearer <eth:syzkaller0>
[  532.156039][T18753] tipc: Resetting bearer <eth:syzkaller0>
[  532.176808][T18753] tipc: Disabling bearer <eth:syzkaller0>
[  532.502576][T18778] random: crng reseeded on system resumption
[  532.541163][T18775] block device autoloading is deprecated and will be removed.
[  532.742673][T18782] lo speed is unknown, defaulting to 1000
[  532.792248][T18782] lo speed is unknown, defaulting to 1000
[  532.798719][T18782] lo speed is unknown, defaulting to 1000
[  532.877187][T18782] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  532.883803][T18782] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  532.891334][T18782] vhci_hcd vhci_hcd.0: Device attached
[  532.919998][T18781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  532.992962][T18781] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  532.999657][T18781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  533.007343][T18781] vhci_hcd vhci_hcd.0: Device attached
[  533.279751][T18790] netlink: 'syz.5.4313': attribute type 6 has an invalid length.
[  533.363873][T18784] vhci_hcd: connection closed
[  533.364189][ T5140] vhci_hcd: stop threads
[  533.373236][ T5140] vhci_hcd: release socket
[  533.377959][ T5140] vhci_hcd: disconnect device
[  533.380045][T18786] vhci_hcd: connection closed
[  533.436576][ T5140] vhci_hcd: stop threads
[  533.445684][ T5140] vhci_hcd: release socket
[  533.450212][ T5140] vhci_hcd: disconnect device
[  533.466870][T18775] serio: Serial port ptm1
[  533.505449][T18796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=18796 comm=syz.5.4313
[  533.522853][T18796] __nla_validate_parse: 3 callbacks suppressed
[  533.522871][T18796] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4313'.
[  533.600916][T18790] Falling back ldisc for ttyS3.
[  533.689503][T18804] /dev/loop6: Can't lookup blockdev
[  533.711134][T18804] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  533.711134][T18804]    program +}[@ not setting count and/or reply_len properly
[  533.776483][T18806] 9pnet_virtio: no channels available for device syz
[  533.849149][T18809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4321'.
[  533.858311][T18809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4321'.
[  533.931895][T18802] lo speed is unknown, defaulting to 1000
[  533.973223][T18802] lo speed is unknown, defaulting to 1000
[  533.980011][T18802] lo speed is unknown, defaulting to 1000
[  534.131847][   T29] kauditd_printk_skb: 1518 callbacks suppressed
[  534.131862][   T29] audit: type=1326 audit(1758285300.033:100538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819a29ae09 code=0x7ffc0000
[  534.192928][   T29] audit: type=1326 audit(1758285300.063:100539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  534.198071][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4319'.
[  534.216733][   T29] audit: type=1326 audit(1758285300.063:100540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819a2fec29 code=0x7ffc0000
[  534.249600][   T29] audit: type=1400 audit(1758285300.083:100541): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  534.273389][   T29] audit: type=1400 audit(1758285300.083:100542): avc:  denied  { open } for  pid=3310 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  534.304252][   T29] audit: type=1400 audit(1758285300.093:100543): avc:  denied  { read } for  pid=18805 comm="syz.5.4319" dev="nsfs" ino=4026532995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  534.326472][   T29] audit: type=1400 audit(1758285300.093:100544): avc:  denied  { open } for  pid=18805 comm="syz.5.4319" path="net:[4026532995]" dev="nsfs" ino=4026532995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  534.351841][   T29] audit: type=1400 audit(1758285300.093:100545): avc:  denied  { create } for  pid=18805 comm="syz.5.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  534.373809][   T29] audit: type=1400 audit(1758285300.093:100546): avc:  denied  { write } for  pid=18805 comm="syz.5.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  534.395793][   T29] audit: type=1400 audit(1758285300.153:100547): avc:  denied  { prog_load } for  pid=18805 comm="syz.5.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  534.515551][T18832] netlink: 'syz.4.4327': attribute type 1 has an invalid length.
[  534.524072][T18832] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.4327'.
[  534.599710][T18839] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4327'.
[  534.904896][T18844] serio: Serial port ptm1
[  535.436512][T18856] /dev/loop5: Can't lookup blockdev
[  535.624038][T18849] lo speed is unknown, defaulting to 1000
[  535.664284][T18856] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  535.664284][T18856]    program +}[@ not setting count and/or reply_len properly
[  535.752975][T18849] lo speed is unknown, defaulting to 1000
[  535.760753][T18849] lo speed is unknown, defaulting to 1000
[  535.861434][T18869] /dev/loop5: Can't lookup blockdev
[  535.875208][T18867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.895146][T18871] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.899820][T18867] syzkaller0: entered promiscuous mode
[  535.910483][T18867] syzkaller0: entered allmulticast mode
[  535.936491][T18869] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  535.936491][T18869]    program +}[@ not setting count and/or reply_len properly
[  535.950776][T18871] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  535.969282][T18867] tipc: Resetting bearer <eth:syzkaller0>
[  536.017487][T18871] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  536.017487][T18871]    program +}[@ not setting count and/or reply_len properly
[  536.053508][T18864] tipc: Resetting bearer <eth:syzkaller0>
[  536.093487][T18864] tipc: Disabling bearer <eth:syzkaller0>
[  536.170518][T18874] loop1: detected capacity change from 0 to 8192
[  536.487179][T18875] lo speed is unknown, defaulting to 1000
[  536.543532][T18892] loop1: detected capacity change from 0 to 1024
[  536.566865][T18892] EXT4-fs: Ignoring removed orlov option
[  536.586885][T18892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.644899][T18899] v: renamed from ip6_vti0
[  536.666905][T18892] netlink: 'syz.1.4352': attribute type 1 has an invalid length.
[  536.692437][T18875] lo speed is unknown, defaulting to 1000
[  536.700740][T18875] lo speed is unknown, defaulting to 1000
[  536.713529][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.807644][T18891] lo speed is unknown, defaulting to 1000
[  536.837441][T18902] binfmt_misc: register: failed to install interpreter file ./file2
[  536.881546][T18891] lo speed is unknown, defaulting to 1000
[  536.888399][T18891] lo speed is unknown, defaulting to 1000
[  536.979911][T18908] syzkaller0: entered allmulticast mode
[  537.008358][T18908] netlink: 464 bytes leftover after parsing attributes in process `syz.5.4345'.
[  537.027089][T18908] syzkaller0 (unregistering): left allmulticast mode
[  537.098812][T18907] loop1: detected capacity change from 0 to 1024
[  537.108981][T18907] EXT4-fs: Ignoring removed orlov option
[  537.136840][T18907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.327487][T18912] block device autoloading is deprecated and will be removed.
[  537.400069][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.403356][T18917] ref_ctr_offset mismatch. inode: 0xc93 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  537.426015][T18915] Falling back ldisc for ttyS3.
[  537.519866][T18920] loop1: detected capacity change from 0 to 128
[  537.541278][T18920] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  537.549760][T18920] FAT-fs (loop1): Filesystem has been set read-only
[  537.556776][T18920] syz.1.4347: attempt to access beyond end of device
[  537.556776][T18920] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  537.572841][T18920] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  537.581093][T18918] serio: Serial port ptm1
[  537.581661][T18920] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  537.597180][T18920] syz.1.4347: attempt to access beyond end of device
[  537.597180][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.612526][T18920] syz.1.4347: attempt to access beyond end of device
[  537.612526][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.627609][T18920] syz.1.4347: attempt to access beyond end of device
[  537.627609][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.642004][T18920] syz.1.4347: attempt to access beyond end of device
[  537.642004][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.658633][T18920] syz.1.4347: attempt to access beyond end of device
[  537.658633][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.673789][T18920] syz.1.4347: attempt to access beyond end of device
[  537.673789][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.688911][T18920] syz.1.4347: attempt to access beyond end of device
[  537.688911][T18920] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  537.788964][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4349'.
[  537.811903][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4349'.
[  537.836773][T18930] /dev/loop4: Can't lookup blockdev
[  537.855856][T18930] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  537.855856][T18930]    program +}[@ not setting count and/or reply_len properly
[  537.891778][T18928] net_ratelimit: 85 callbacks suppressed
[  537.891797][T18928] veth0: mtu less than device minimum
[  537.903642][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4349'.
[  538.461935][T18954] lo speed is unknown, defaulting to 1000
[  538.521861][T18954] lo speed is unknown, defaulting to 1000
[  538.530799][T18954] lo speed is unknown, defaulting to 1000
[  538.830972][T18951] __nla_validate_parse: 6 callbacks suppressed
[  538.830990][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4372'.
[  538.950989][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4372'.
[  538.975606][T18958] syzkaller0: entered allmulticast mode
[  538.994417][T18958] netlink: 464 bytes leftover after parsing attributes in process `syz.1.4360'.
[  539.019170][T18958] syzkaller0 (unregistering): left allmulticast mode
[  539.196377][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4372'.
[  539.222533][   T29] kauditd_printk_skb: 1276 callbacks suppressed
[  539.222560][   T29] audit: type=1400 audit(1758285305.123:101824): avc:  denied  { create } for  pid=18966 comm="syz.4.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  539.334455][T18969] usb usb8: usbfs: process 18969 (syz.6.4361) did not claim interface 0 before use
[  539.618800][T18969] lo speed is unknown, defaulting to 1000
[  539.687201][T18969] lo speed is unknown, defaulting to 1000
[  539.693617][T18969] lo speed is unknown, defaulting to 1000
[  539.747429][   T29] audit: type=1400 audit(1758285305.123:101825): avc:  denied  { map_create } for  pid=18966 comm="syz.4.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  539.767608][   T29] audit: type=1400 audit(1758285305.123:101826): avc:  denied  { perfmon } for  pid=18966 comm="syz.4.4364" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  539.790921][   T29] audit: type=1400 audit(1758285305.123:101827): avc:  denied  { map_read map_write } for  pid=18966 comm="syz.4.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  539.811694][   T29] audit: type=1400 audit(1758285305.123:101828): avc:  denied  { prog_load } for  pid=18966 comm="syz.4.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  539.831829][   T29] audit: type=1400 audit(1758285305.123:101829): avc:  denied  { bpf } for  pid=18966 comm="syz.4.4364" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  539.853049][   T29] audit: type=1400 audit(1758285305.123:101830): avc:  denied  { prog_run } for  pid=18966 comm="syz.4.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  539.872802][   T29] audit: type=1400 audit(1758285305.133:101831): avc:  denied  { execmem } for  pid=18966 comm="syz.4.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  539.893225][   T29] audit: type=1400 audit(1758285305.133:101832): avc:  denied  { execute } for  pid=18966 comm="syz.4.4364" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=63322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  539.920110][   T29] audit: type=1326 audit(1758285305.133:101833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18966 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883a7ec29 code=0x7ffc0000
[  540.103113][T18976] loop1: detected capacity change from 0 to 512
[  540.141388][T18976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  540.162140][T18976] ext4 filesystem being mounted at /912/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  540.224506][T18976] program syz.1.4365 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  540.311328][T18988] /dev/loop3: Can't open blockdev
[  540.329683][T18988] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  540.329683][T18988]    program +}[@ not setting count and/or reply_len properly
[  540.645195][T18992] lo speed is unknown, defaulting to 1000
[  540.656385][T18997] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.4371'.
[  540.665738][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4371'.
[  540.687104][T18992] lo speed is unknown, defaulting to 1000
[  540.693693][T18992] lo speed is unknown, defaulting to 1000
[  540.949191][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  541.053485][T19008] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4374'.
[  541.202393][T19020] syzkaller0: entered allmulticast mode
[  541.233505][T19020] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4378'.
[  541.362452][T19020] syzkaller0 (unregistering): left allmulticast mode
[  541.400350][ T3413] usb usb8-port1: attempt power cycle
[  541.408238][T19026] 9pnet_fd: Insufficient options for proto=fd
[  541.506651][T19029] netlink: 464 bytes leftover after parsing attributes in process `syz.1.4380'.
[  541.563373][T19027] lo speed is unknown, defaulting to 1000
[  541.602340][T19031] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  541.608921][T19031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  541.616508][T19031] vhci_hcd vhci_hcd.0: Device attached
[  541.650309][T19027] lo speed is unknown, defaulting to 1000
[  541.657520][T19027] lo speed is unknown, defaulting to 1000
[  541.677997][T19031] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4382'.
[  541.745261][T19031] siw: device registration error -23
[  541.787908][T19032] vhci_hcd: connection closed
[  541.789549][T19035] can0: slcan on ttyS3.
[  541.800372][   T37] vhci_hcd: stop threads
[  541.804689][   T37] vhci_hcd: release socket
[  541.809122][   T37] vhci_hcd: disconnect device
[  541.850147][T19038] can0 (unregistered): slcan off ttyS3.
[  542.251087][T19044] lo speed is unknown, defaulting to 1000
[  542.321985][T19044] lo speed is unknown, defaulting to 1000
[  542.337187][T19044] lo speed is unknown, defaulting to 1000
[  542.420121][T19048] serio: Serial port ptm1
[  542.535163][T19057] program syz.5.4390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  542.599414][T19058] loop1: detected capacity change from 0 to 1024
[  542.671405][T19058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  542.798899][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.808417][T19069] siw: device registration error -23
[  543.060350][T19077] netlink: 'syz.1.4395': attribute type 1 has an invalid length.
[  543.260304][ T3413] usb usb8-port1: unable to enumerate USB device
[  543.549671][T19090] atomic_op ffff8881023bc528 conn xmit_atomic 0000000000000000
[  543.908840][T19091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.029242][T19091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.045735][T19096] loop4: detected capacity change from 0 to 512
[  544.068994][T19096] __nla_validate_parse: 11 callbacks suppressed
[  544.069012][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'.
[  544.086339][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'.
[  544.098507][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'.
[  544.109018][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'.
[  544.276822][T19101] lo speed is unknown, defaulting to 1000
[  544.317281][T19101] lo speed is unknown, defaulting to 1000
[  544.323516][T19101] lo speed is unknown, defaulting to 1000
[  544.453232][T19103] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  544.465960][   T29] kauditd_printk_skb: 1381 callbacks suppressed
[  544.465978][   T29] audit: type=1326 audit(1758285310.343:103215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="syz.3.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.496022][   T29] audit: type=1326 audit(1758285310.343:103216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="syz.3.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.519982][   T29] audit: type=1326 audit(1758285310.343:103217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="syz.3.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.543910][   T29] audit: type=1326 audit(1758285310.343:103218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.567001][   T29] audit: type=1326 audit(1758285310.343:103219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.590187][   T29] audit: type=1326 audit(1758285310.343:103220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.613924][   T29] audit: type=1400 audit(1758285310.343:103221): avc:  denied  { prog_load } for  pid=19095 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  544.634738][   T29] audit: type=1400 audit(1758285310.353:103222): avc:  denied  { bpf } for  pid=19095 comm="gtp" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  544.656434][   T29] audit: type=1326 audit(1758285310.353:103223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.682804][   T29] audit: type=1326 audit(1758285310.353:103224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19095 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7987ec29 code=0x7ffc0000
[  544.735317][ T3385] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  544.834848][T19101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  544.841512][T19101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  544.849833][T19101] vhci_hcd vhci_hcd.0: Device attached
[  544.855930][T19103] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13)
[  544.862739][T19103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  544.870515][T19103] vhci_hcd vhci_hcd.0: Device attached
[  544.892742][T19104] vhci_hcd: connection closed
[  544.893441][T19092] vhci_hcd: stop threads
[  544.894031][T19106] vhci_hcd: connection closed
[  544.898259][T19092] vhci_hcd: release socket
[  544.898269][T19092] vhci_hcd: disconnect device
[  544.916840][ T3385] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  544.942678][T19099] lo speed is unknown, defaulting to 1000
[  544.951109][ T7910] vhci_hcd: stop threads
[  544.955583][ T7910] vhci_hcd: release socket
[  544.960115][ T7910] vhci_hcd: disconnect device
[  544.976520][T19096] loop4: detected capacity change from 0 to 512
[  544.987018][T19096] EXT4-fs (loop4): orphan cleanup on readonly fs
[  544.994653][T19096] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4400: bg 0: block 248: padding at end of block bitmap is not set
[  545.001712][T19099] lo speed is unknown, defaulting to 1000
[  545.009813][T19096] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4400: Failed to acquire dquot type 1
[  545.028207][T19096] EXT4-fs (loop4): 1 truncate cleaned up
[  545.030703][T19099] lo speed is unknown, defaulting to 1000
[  545.034899][T19096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  545.075404][T19096] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.4400: deleted inode referenced: 12
[  545.098901][T19096] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.4400: deleted inode referenced: 12
[  545.177870][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4403'.
[  545.221859][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.618494][T19134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4406'.
[  545.700943][T19133] lo speed is unknown, defaulting to 1000
[  545.766945][T19133] lo speed is unknown, defaulting to 1000
[  545.773905][T19133] lo speed is unknown, defaulting to 1000
[  546.334104][T19139] program syz.3.4408 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  546.363168][T19143] can0: slcan on ttyS3.
[  546.430179][T19143] can0 (unregistered): slcan off ttyS3.
[  546.554707][T19141] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19141 comm=syz.6.4418
[  546.591765][T19153] netlink: 'syz.4.4412': attribute type 1 has an invalid length.
[  546.609258][T19153] 8021q: adding VLAN 0 to HW filter on device bond2
[  546.653605][T19153] loop4: detected capacity change from 0 to 1024
[  546.662102][T19153] EXT4-fs: Ignoring removed bh option
[  546.664814][T19157] netlink: 'syz.6.4413': attribute type 1 has an invalid length.
[  546.668083][T19153] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  546.675495][T19157] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.4413'.
[  546.707147][T19153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  546.744020][T19162] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4413'.
[  547.010550][T19165] lo speed is unknown, defaulting to 1000
[  547.056550][T19165] lo speed is unknown, defaulting to 1000
[  547.069077][T19165] lo speed is unknown, defaulting to 1000
[  547.134580][T19153] ==================================================================
[  547.142737][T19153] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range
[  547.151961][T19153] 
[  547.151972][T19153] read-write to 0xffff88811a4b8b88 of 8 bytes by task 19168 on cpu 0:
[  547.151989][T19153]  __filemap_remove_folio+0x1bc/0x2a0
[  547.152029][T19153]  folio_unmap_invalidate+0x1dd/0x360
[  547.152057][T19153]  invalidate_inode_pages2_range+0x27c/0x3d0
[  547.152087][T19153]  filemap_invalidate_pages+0x16d/0x1a0
[  547.152110][T19153]  kiocb_invalidate_pages+0x6e/0x80
[  547.152134][T19153]  __iomap_dio_rw+0x5d4/0x1250
[  547.152160][T19153]  iomap_dio_rw+0x40/0x90
[  547.152185][T19153]  ext4_file_write_iter+0xad9/0xf00
[  547.152225][T19153]  iter_file_splice_write+0x666/0xa60
[  547.152248][T19153]  direct_splice_actor+0x156/0x2a0
[  547.152271][T19153]  splice_direct_to_actor+0x312/0x680
[  547.152294][T19153]  do_splice_direct+0xda/0x150
[  547.152316][T19153]  do_sendfile+0x380/0x650
[  547.152351][T19153]  __x64_sys_sendfile64+0x105/0x150
[  547.152384][T19153]  x64_sys_call+0x2bb0/0x2ff0
[  547.152409][T19153]  do_syscall_64+0xd2/0x200
[  547.152448][T19153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.152472][T19153] 
[  547.152479][T19153] read to 0xffff88811a4b8b88 of 8 bytes by task 19153 on cpu 1:
[  547.152498][T19153]  filemap_write_and_wait_range+0x59/0x340
[  547.152536][T19153]  ext4_file_write_iter+0xe04/0xf00
[  547.152573][T19153]  iter_file_splice_write+0x666/0xa60
[  547.152595][T19153]  direct_splice_actor+0x156/0x2a0
[  547.152618][T19153]  splice_direct_to_actor+0x312/0x680
[  547.152641][T19153]  do_splice_direct+0xda/0x150
[  547.152662][T19153]  do_sendfile+0x380/0x650
[  547.152696][T19153]  __x64_sys_sendfile64+0x105/0x150
[  547.152729][T19153]  x64_sys_call+0x2bb0/0x2ff0
[  547.152754][T19153]  do_syscall_64+0xd2/0x200
[  547.152792][T19153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.152816][T19153] 
[  547.152821][T19153] value changed: 0x0000000000000001 -> 0x0000000000000000
[  547.152834][T19153] 
[  547.152838][T19153] Reported by Kernel Concurrency Sanitizer on:
[  547.152852][T19153] CPU: 1 UID: 0 PID: 19153 Comm: syz.4.4412 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  547.152888][T19153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  547.152902][T19153] ==================================================================
[  547.587252][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.