last executing test programs:

3.704503044s ago: executing program 1 (id=2548):
mount$bpf(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0x80081272, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000440), 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
r6 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
pwritev2(r7, &(0x7f0000000240), 0x0, 0x4, 0x0, 0x5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0)
accept4$phonet_pipe(r1, &(0x7f00000001c0), &(0x7f0000000340)=0x10, 0x80000)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="090308000000f4dadf251d03ef00"], 0x14}, 0x1, 0x0, 0x0, 0xc015}, 0x20040800)
sync_file_range(r6, 0x1, 0x0, 0x6)

3.622162215s ago: executing program 4 (id=2549):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

3.561563025s ago: executing program 4 (id=2552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r1 = socket$kcm(0x10, 0x9, 0x0)
r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000600)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x70bd2d, 0x4, {0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @broadcast}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
recvfrom$inet(r2, &(0x7f0000000240)=""/238, 0xee, 0x2, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000010)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
syz_emit_ethernet(0x45, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="17e7166528a57c2d"}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r10=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)

3.399384966s ago: executing program 4 (id=2556):
getpid()
sendmsg$key(0xffffffffffffffff, 0x0, 0x20008060)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0, 0x0, 0x1}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r1, 0x20, &(0x7f0000001440)={0x0, 0x0, <r2=>0x0, &(0x7f00000018c0)=""/249, 0xf9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
r6 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r6, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
setns(r10, 0x24020000)
syz_clone(0x12200000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.250992637s ago: executing program 2 (id=2561):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0ed20100008da25ae999ddbe85000000"], 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa71}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x100}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r10 = fcntl$dupfd(r7, 0x0, r8)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r12=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bind$unix(r7, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e)

2.982805688s ago: executing program 2 (id=2563):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(r2, 0x0, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "7774fa315790a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38)
close(r5)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r6, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

2.767302159s ago: executing program 1 (id=2564):
r0 = io_uring_setup(0x1a70, &(0x7f0000000140)={0x0, 0x3399, 0x0, 0x2, 0x35d})
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0xc0000d7a)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100))
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2, 0x5}]})
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000640)=""/4086, 0x0, 0xff6, 0x0, 0x3, 0x0, @void, @value}, 0x28)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\b'], 0x1c}}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e4ffffff1bffffff00000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10)
setitimer(0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.702714699s ago: executing program 2 (id=2565):
io_uring_setup(0x67b8, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0xb, 0x7, 0x2, 0xf, 0x20000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = io_uring_setup(0x23d8, &(0x7f0000000440)={0x0, 0xed1c, 0x200, 0x800000, 0xbd})
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000000))
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r8, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=<r10=>r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r9, @ANYRESDEC=0x0, @ANYRESOCT=r0], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002ac0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)="e1d430610aaeeca5cbe32347624fb2f60653d81304", 0x15}, {&(0x7f0000002b40)="0c7ec11ed2f42a47e91b83cb59b5be6a0429211a189b47882c4caf68e0bb18a1c33fb3968563e1627c9336f6886c1ec95efe9a7ac4c43665e8c1d008433f2ade13116a70505a36879c5a3bee436256b664d3d6f5e62098b49878e1d748ecf8324d88060961f8d22f3069569a686dd8297d05af48523b9bae6fff693f8237d0bc088c516a988540f9", 0x88}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000680)="4fea63adc0653861c227a509fb31cb35879d60a3b069d22c3f387d3b346875acd5d7", 0x22}, {&(0x7f0000000700)="fadb3495576418ac41dcf74c09665dbec0e0b1628e0cd2261dbdf35535fd7f434a0853ab2535a2e947c7be4e8e4d6426c416ab3385dd198d0a2b3c2483afab", 0x3f}, {&(0x7f0000000780)="22b93bca9c49051636eae391b7bc457bab5de7f3e64bf3a29c8e", 0x1a}, {&(0x7f0000002900)="3aa6a6dcc5f8e3502ebb2ab61e229f21bbd6ec43b5ca1414340ca39593cdec1303beccc20d888ababbdce195f33c050292b564fdbd028694c2b1070d81bfa9ae0a08e15dda6414111e365a081a8540d20ec73a61ef1bffad559fdd9c57560e11862aa56d853fec7a6d1746fe36ed02b76249671888c506c2fdc3978dd1eb9606f55217f6209f0c1502c1a595", 0x8c}, {&(0x7f00000029c0)="291a088c780b39391d87f2573fb57b2b7a4383a54511edcc66f377c2849975e3e0aa09abda13ff9501506190cbb550b502186b53d711aadaed727ae5c5fa190fda464e8694cbc3d439b869e1221e34d625aff15cdd9737b7ddc7bf21ccb51298a16490bd96e2872907c0744beb73c9a62ba809d654a3d17b0a81a8ad403183d50b20577f9aa8e31b1c65422a2c5f9faf92f2aed50659ffa97fe6098b0ebf9819a0ab2a446f8cd68863b4885ab14b7c64a46309f86d657e3efda99bfe8622948f6938b76b00000000000000", 0xcb}], 0x8, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYRES32=r7, @ANYRES32=0x0, @ANYRESDEC=r10, @ANYBLOB="00000e0014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x1}, 0x4080)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1e, 0x20000002, r11)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)

2.700540669s ago: executing program 3 (id=2566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x200000000, 0xffffffffffffffff, 0x2)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x285d, &(0x7f0000000480)={0x0, 0xb418, 0x0, 0x2, 0x5}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
r4 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x100, 0x0)
pidfd_send_signal(r5, 0x32, &(0x7f00000008c0)={0x3b, 0x34c, 0x4}, 0x0)
ftruncate(r4, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000680)="a5b6dafd6408bdd4411e6a3f7c6d119c0e7058eb943ed4250ba9ee4f0c73efceed58b7ce0f9ef126c7c02cc50703104241c2f5d700e18a068d27c6798cc3a9b21b53fc961135d24f19f658170b410b105b06ceb8c6efe0d666760252cd09b2c29775ced72aaaa8af82c44e48d1ea0ba3e5c0966c4c5bc0356414c661cac90552c2d54b2989760fc088d08b198716e3b2490dbf0d22ea4140596bb0b23e1fa2865644e45e52a41a4750dda948f7443d06a0da3ae6ba7241e2096a93fb416dfa074ff06b98d264cf683c533aeac5fc6f288fb8e617482ce1b898daf2b992938185", &(0x7f0000000780)=""/245}, 0x20)
lseek(r4, 0x0, 0x4)
io_uring_enter(r2, 0x13d8, 0x6, 0x0, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x2)
accept(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="61030280022108032b959402"], 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

1.963995932s ago: executing program 1 (id=2568):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_io_uring_setup(0x609, &(0x7f0000000480), &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000300))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e10000e1ff400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
execve(0x0, 0x0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18)
r7 = syz_open_dev$usbfs(&(0x7f0000000280), 0x80000000006, 0x5a3501)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"])
close_range(r4, r7, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc4, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xaa4b3fcbfe98f432, 0x9, 0x4, 0x6, 0x0, 0xfff, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_loaded', 0x22300, 0x12a)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c)
r10 = fsopen(&(0x7f0000001680)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0)
close(r10)

1.805008033s ago: executing program 1 (id=2570):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB], 0x48)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01)
setreuid(0x0, 0x0)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0))
sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24004091)
io_uring_enter(r0, 0x4d10, 0x2, 0x1a, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$FITHAW(r4, 0xc0045878)
pipe2(0x0, 0x0)
ioperm(0xd6, 0x4, 0x6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='&(\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
flistxattr(r5, 0x0, 0x2)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000140))
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="adffec440000aaaaaaaaaa000800450000280000000000069078000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000cf83b7ea9d9b2ccc0090780000"], 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
pidfd_send_signal(r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xc2}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})

1.683543934s ago: executing program 1 (id=2571):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x2)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x0, 0x12d9, 0x8001}], 0x18)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000040)={0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000548500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r5, @ANYRES32=r3, @ANYRES8, @ANYRES8, @ANYRES64=r6, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$eJzs3E+LG2UcB/Bf49Zut+4fa622B33Qi6ehuwdPgiyyBdmAUrtCKwhTd6IhYxIyYSEiVk9efR3i0ZsgvoG99DV424vHHsQRk61t2rS6h27E/Xwu8yPP75t5HkIGJsyTg7e++7zTqrJWPozGqVPR6EekuylSNOKeV7Ynxxs3tzebza1rKV3dvL7+Zkpp5dWfP/ryh9d+GZ778MeVn87E/trHB79t/Lp/cf/SwR/XP2tXqV2lbm+Y8nSr1xvmt8oi7barTpbS+2WRV0Vqd6tiMDXeKnv9/ijl3d3lpf6gqKqUd0epU4zSsJeGg1HKP83b3ZRlWVpeCh7r9D+37Hx/t67riLo+Hc9GXdf12ViKc/FcLMdKfB0Rz8f5eCEuxItxMV6Kl+PSuOs4pg8AAAAAAAAAAAAAAAAAAAAnx5P2/6/Gmv3/AAAAAAAAAAAAAAAAAAAAcAw+uHFze7PZ3LqW0mJE+e3ezt7O5DgZ32xFO8oo4kqsxu8x3v0/MamvvtvcupLG1uKb8vZh/vbezjPT+fXx3wkc5hfGY/fy65N8ms6fiaUH8xuxGhdmn39jZn4x3nj9gXwWq3Hnk+hFGbvjc9/Pf7We0jvvNR/KXx73AQAAwP9Blv428/49yx43Pskf4feBh+6vF+LywnzXTkQ1+qKTl2UxmC4WH3lF8e+LxlN650b8RxZ4Qouzh1+aI8b/uszNf/KPFHfOP7FnzhcmjsX9D33eMwEAAAAAAAAAAOAonvKThgsx48myt+ezVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2YFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAP//i0XIUQ==")
r7 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3)
socket(0xa, 0x3, 0x3a)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sync_file_range(0xffffffffffffffff, 0x5408, 0x1, 0x3)

1.682347014s ago: executing program 2 (id=2572):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(r2, 0x0, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "7774fa315790a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38)
close(r5)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r6, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

1.611719034s ago: executing program 3 (id=2573):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0ed20100008da25ae999ddbe85000000"], 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa71}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x100}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r10 = fcntl$dupfd(r7, 0x0, r8)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r12=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bind$unix(r7, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e)

1.478650734s ago: executing program 3 (id=2575):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(r2, 0x0, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "7774fa315790a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38)
close(r5)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r6, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

1.342967145s ago: executing program 4 (id=2576):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(r2, 0x0, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "7774fa315790a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38)
close(r6)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r7, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

1.318719465s ago: executing program 2 (id=2577):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x32, @local, 0x4e24, 0x2, 'dh\x00', 0x32, 0x6, 0x21}, 0x2c)
r4 = socket(0x1d, 0x2, 0x6)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x0, <r5=>0x0}, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
close(r4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x5c}}, 0x0)

1.315017315s ago: executing program 0 (id=2578):
r0 = socket(0x25, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x2a4c0, 0x0)
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="7b790100000055c5eae31cd080b16368655f6672656500"])
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
r4 = syz_open_dev$sg(0x0, 0x0, 0x401)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6}, 0x10)
ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x24000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
truncate(0x0, 0x7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

1.268557665s ago: executing program 0 (id=2579):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

1.267768215s ago: executing program 1 (id=2580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000380)={{0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x20, {0x2, 0x4e20, @broadcast}, 'ip6tnl0\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82004080}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000063ee6f0c763cde310a2c000000140a04020000000000000000000000050c0006400000000000000005050006400000000000000001140000001100050000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4c014)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
statfs(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
lseek(r6, 0xffffff7a, 0x0)

1.207301995s ago: executing program 0 (id=2581):
unshare(0x6020400)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001d00"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x4, 0x800, 0x0, 0x80118}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
r8 = getpid()
kcmp(0xffffffffffffffff, r8, 0x0, r4, r5)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
syz_io_uring_submit(r6, 0x0, &(0x7f0000000140))
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@private0, @in=@dev}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
readlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000340)=""/41, 0x29)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
getgid()

1.206180446s ago: executing program 3 (id=2582):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xc, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x0, 0x2f8, 0xffffffff, 0xd8, 0x1d0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x1, 0x2, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x18d542, 0x2)
ftruncate(r4, 0xee77)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40281, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
sigaltstack(0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)

1.130017706s ago: executing program 4 (id=2583):
io_uring_setup(0x67b8, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0xb, 0x7, 0x2, 0xf, 0x20000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = io_uring_setup(0x23d8, &(0x7f0000000440)={0x0, 0xed1c, 0x200, 0x800000, 0xbd})
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000000))
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r8, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=<r10=>r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r9, @ANYRESDEC=0x0, @ANYRESOCT=r0], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002ac0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)="e1d430610aaeeca5cbe32347624fb2f60653d81304", 0x15}, {&(0x7f0000002b40)="0c7ec11ed2f42a47e91b83cb59b5be6a0429211a189b47882c4caf68e0bb18a1c33fb3968563e1627c9336f6886c1ec95efe9a7ac4c43665e8c1d008433f2ade13116a70505a36879c5a3bee436256b664d3d6f5e62098b49878e1d748ecf8324d88060961f8d22f3069569a686dd8297d05af48523b9bae6fff693f8237d0bc088c516a988540f9", 0x88}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000680)="4fea63adc0653861c227a509fb31cb35879d60a3b069d22c3f387d3b346875acd5d7", 0x22}, {&(0x7f0000000700)="fadb3495576418ac41dcf74c09665dbec0e0b1628e0cd2261dbdf35535fd7f434a0853ab2535a2e947c7be4e8e4d6426c416ab3385dd198d0a2b3c2483afab", 0x3f}, {&(0x7f0000000780)="22b93bca9c49051636eae391b7bc457bab5de7f3e64bf3a29c8e", 0x1a}, {&(0x7f0000002900)="3aa6a6dcc5f8e3502ebb2ab61e229f21bbd6ec43b5ca1414340ca39593cdec1303beccc20d888ababbdce195f33c050292b564fdbd028694c2b1070d81bfa9ae0a08e15dda6414111e365a081a8540d20ec73a61ef1bffad559fdd9c57560e11862aa56d853fec7a6d1746fe36ed02b76249671888c506c2fdc3978dd1eb9606f55217f6209f0c1502c1a595", 0x8c}, {&(0x7f00000029c0)="291a088c780b39391d87f2573fb57b2b7a4383a54511edcc66f377c2849975e3e0aa09abda13ff9501506190cbb550b502186b53d711aadaed727ae5c5fa190fda464e8694cbc3d439b869e1221e34d625aff15cdd9737b7ddc7bf21ccb51298a16490bd96e2872907c0744beb73c9a62ba809d654a3d17b0a81a8ad403183d50b20577f9aa8e31b1c65422a2c5f9faf92f2aed50659ffa97fe6098b0ebf9819a0ab2a446f8cd68863b4885ab14b7c64a46309f86d657e3efda99bfe8622948f6938b76b00000000000000", 0xcb}], 0x8, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYRES32=r7, @ANYRES32=0x0, @ANYRESDEC=r10, @ANYBLOB="00000e0014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x1}, 0x4080)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1e, 0x20000002, r11)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)

982.117596ms ago: executing program 0 (id=2584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
close(0xffffffffffffffff)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x5c}}, 0x0)

908.820517ms ago: executing program 0 (id=2585):
r0 = syz_clone(0x40003180, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000340))
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="7a8e", 0x2}], 0x1}}], 0x2, 0x40080)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000440))
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x2}, 0x8)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, r5, 0xe0c0af128ed817ad, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = io_uring_setup(0x4724, &(0x7f0000000140))
r9 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
listen(r9, 0x3)
r10 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r10, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
accept4(r9, 0x0, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f0000000280)='%pS    \x00'}, 0x20)
close(0xffffffffffffffff)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

532.559339ms ago: executing program 0 (id=2586):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000580)='GPL\x00', 0x2cf2, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0xa8}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r1 = getpid()
symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_subtree(r4, 0x0, 0xf5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRESOCT, @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xfe, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
ioctl$TCSETSW2(r2, 0x5453, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x94)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r8 = socket$inet(0x10, 0x2000000002, 0x0)
sendmsg(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="240000002e00074c8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e280000005e00ff03c81f8374b4a04181f2d0fdcad693d58d31d42c0b3ad0c1846e6db77c292ebf0a", 0x4c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3ff, 0x4b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)

275.62827ms ago: executing program 2 (id=2587):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x2f8, 0x1d0, 0xffffffff, 0x1d0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
sigaltstack(0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x13, &(0x7f0000000500)={[{@dax_inode}, {@journal_dev={'journal_dev', 0x3d, 0x100000001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0xfe, 0x631, &(0x7f0000001940)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)

269.167519ms ago: executing program 3 (id=2588):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(r2, 0x0, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "7774fa315790a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38)
close(r5)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r6, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

136.72499ms ago: executing program 4 (id=2589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102009, 0x0, 0x0, 0x6, 0x3, 0x0, 0x104, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
writev(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f56", 0x2}], 0x2)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008042, &(0x7f0000000c00)={[{@norecovery}, {@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5e4, &(0x7f0000001300)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2], 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002c6fb5e1327adb0bde21102510abfe035ef55a2c5523a753284414b699f8dd487be38fda1d06dfd4cda439afde2b4e3fb09aced8d8433f7479e8897ce26356ad480100378fe620e84b130cdb0a9ba924c6af493f038e51ee2b9968dcd5143b679d242351ba49877db368cfe958e4dceb6003988380169fc3822384e8"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x38)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
truncate(&(0x7f0000000200)='./file2\x00', 0x7)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = socket(0x2b, 0x1, 0x1)
sendmmsg$sock(r8, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001)
connect$netlink(r8, &(0x7f0000000000)=@unspec, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x6}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x7176, 0x8, 0x0, 0x4, 0x8}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

0s ago: executing program 3 (id=2590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2e03c760", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x30000894)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, r3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0x5, 0xee4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000280))
write$binfmt_script(r5, &(0x7f0000000180), 0xfea7)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
readv(r4, &(0x7f0000000040)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

kernel console output (not intermixed with test programs):

0-0000-000000000000.
[  201.008605][ T9113] atomic_op ffff8881587ca128 conn xmit_atomic 0000000000000000
[  201.083845][ T9118] smc: net device bond0 applied user defined pnetid SYZ0
[  201.447845][ T9139] atomic_op ffff88813e8d0d28 conn xmit_atomic 0000000000000000
[  201.534877][ T9141] loop1: detected capacity change from 0 to 1764
[  201.546172][ T9143] loop2: detected capacity change from 0 to 512
[  201.572184][ T9143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.585380][ T9143] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.833534][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.966875][ T5575] usb 3-1: enqueue for inactive port 0
[  202.013302][ T5575] usb 3-1: enqueue for inactive port 0
[  202.047059][ T9158] atomic_op ffff88813e8d0d28 conn xmit_atomic 0000000000000000
[  202.169366][ T5575] vhci_hcd: vhci_device speed not set
[  202.695685][ T9174] loop2: detected capacity change from 0 to 1024
[  202.715280][ T9174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.781059][ T9174] EXT4-fs: Cannot change quota options when quota turned on
[  202.877859][ T9179] atomic_op ffff888100063528 conn xmit_atomic 0000000000000000
[  203.448714][ T9196] netlink: 'syz.3.1677': attribute type 10 has an invalid length.
[  203.466071][   T29] kauditd_printk_skb: 953 callbacks suppressed
[  203.466089][   T29] audit: type=1400 audit(1733193481.973:45628): avc:  denied  { create } for  pid=9194 comm="syz.0.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  203.492089][   T29] audit: type=1400 audit(1733193481.973:45629): avc:  denied  { connect } for  pid=9194 comm="syz.0.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  203.514540][   T29] audit: type=1326 audit(1733193482.020:45630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac286c6ee7 code=0x7ffc0000
[  203.538196][   T29] audit: type=1326 audit(1733193482.020:45631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac2866c129 code=0x7ffc0000
[  203.561645][   T29] audit: type=1326 audit(1733193482.029:45632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  203.684647][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.844056][ T9203] atomic_op ffff8881587c9928 conn xmit_atomic 0000000000000000
[  204.193036][   T29] audit: type=1326 audit(1733193482.086:45633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac286c6ee7 code=0x7ffc0000
[  204.216575][   T29] audit: type=1326 audit(1733193482.086:45634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac2866c129 code=0x7ffc0000
[  204.240038][   T29] audit: type=1326 audit(1733193482.086:45635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  204.263536][   T29] audit: type=1326 audit(1733193482.095:45636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac286c6ee7 code=0x7ffc0000
[  204.287052][   T29] audit: type=1326 audit(1733193482.095:45637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac2866c129 code=0x7ffc0000
[  204.317553][ T9210] loop1: detected capacity change from 0 to 1024
[  204.368334][ T9210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.386086][ T9217] atomic_op ffff8881587c8d28 conn xmit_atomic 0000000000000000
[  204.405302][ T9210] EXT4-fs: Cannot change quota options when quota turned on
[  204.486660][ T9225] loop2: detected capacity change from 0 to 1024
[  204.517128][ T9225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.541878][ T9225] EXT4-fs: Cannot change quota options when quota turned on
[  204.901686][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.414809][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.518431][ T9250] atomic_op ffff88813e8d1928 conn xmit_atomic 0000000000000000
[  205.719883][ T9260] loop2: detected capacity change from 0 to 1024
[  205.734279][ T9260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.791728][ T9260] EXT4-fs: Cannot change quota options when quota turned on
[  205.814906][ T9270] netlink: 'syz.0.1705': attribute type 21 has an invalid length.
[  205.822865][ T9270] netlink: 'syz.0.1705': attribute type 20 has an invalid length.
[  205.830696][ T9270] IPv6: NLM_F_CREATE should be specified when creating new route
[  206.601233][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.807605][ T9302] loop1: detected capacity change from 0 to 8192
[  206.899066][ T9308] atomic_op ffff8881587cb528 conn xmit_atomic 0000000000000000
[  207.097632][ T9320] atomic_op ffff88813e8d1128 conn xmit_atomic 0000000000000000
[  207.110288][ T9320] usb usb5: usbfs: process 9320 (syz.4.1722) did not claim interface 4 before use
[  207.609694][ T9335] atomic_op ffff8881587cb528 conn xmit_atomic 0000000000000000
[  207.744313][ T9342] atomic_op ffff888104631528 conn xmit_atomic 0000000000000000
[  208.084598][ T9365] atomic_op ffff88815c5b2928 conn xmit_atomic 0000000000000000
[  208.105187][ T9365] usb usb5: usbfs: process 9365 (syz.0.1737) did not claim interface 4 before use
[  208.238174][ T9369] ALSA: seq fatal error: cannot create timer (-22)
[  208.304529][ T9371] No source specified
[  208.311627][ T9372] s: rxe_newlink: already configured on lo
[  208.321841][ T9371] x_tables: duplicate underflow at hook 4
[  208.330115][ T9371] SELinux: failed to load policy
[  208.389796][ T9374] loop2: detected capacity change from 0 to 1024
[  208.408900][ T9374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.441789][ T9374] EXT4-fs: Cannot change quota options when quota turned on
[  208.883366][   T29] kauditd_printk_skb: 1021 callbacks suppressed
[  208.883395][   T29] audit: type=1326 audit(1733193487.048:46659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.002677][   T29] audit: type=1326 audit(1733193487.086:46660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.026279][   T29] audit: type=1326 audit(1733193487.086:46661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.049824][   T29] audit: type=1326 audit(1733193487.086:46662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.073448][   T29] audit: type=1326 audit(1733193487.086:46663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.097101][   T29] audit: type=1326 audit(1733193487.086:46664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.120732][   T29] audit: type=1326 audit(1733193487.095:46665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.144379][   T29] audit: type=1326 audit(1733193487.095:46666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.167924][   T29] audit: type=1326 audit(1733193487.095:46667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.191687][   T29] audit: type=1326 audit(1733193487.095:46668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb37fafff19 code=0x7ffc0000
[  209.380674][ T9391] netlink: 'syz.3.1746': attribute type 27 has an invalid length.
[  209.432088][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.455959][ T9391] ip6gre1: left allmulticast mode
[  209.496815][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.622626][ T9396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.844043][ T9407] netlink: 'syz.4.1751': attribute type 39 has an invalid length.
[  210.071176][ T9416] ALSA: seq fatal error: cannot create timer (-22)
[  210.162792][ T9416] rdma_rxe: rxe_newlink: failed to add lo
[  210.275475][ T9428] atomic_op ffff88815c5b2528 conn xmit_atomic 0000000000000000
[  211.089329][ T9467] atomic_op ffff88815c5b1128 conn xmit_atomic 0000000000000000
[  211.898721][ T9492] netlink: 'syz.3.1782': attribute type 39 has an invalid length.
[  212.221199][ T9497] lo speed is unknown, defaulting to 1000
[  212.310345][ T9501] loop2: detected capacity change from 0 to 1024
[  212.338586][ T9501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.362698][ T9497] lo speed is unknown, defaulting to 1000
[  212.370392][ T9497] lo speed is unknown, defaulting to 1000
[  212.399229][ T9503] atomic_op ffff8881182dd528 conn xmit_atomic 0000000000000000
[  212.427088][ T9501] EXT4-fs: Cannot change quota options when quota turned on
[  212.504232][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.512442][ T9508] lo: entered allmulticast mode
[  212.522187][ T9508] lo: left allmulticast mode
[  212.891079][ T9532] serio: Serial port ptm1
[  213.030754][ T9538] loop2: detected capacity change from 0 to 1024
[  213.041374][ T9538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.064516][ T9538] EXT4-fs: Cannot change quota options when quota turned on
[  213.435582][ T9541] cgroup: Invalid name
[  213.467155][ T9543] atomic_op ffff888131b58d28 conn xmit_atomic 0000000000000000
[  213.749167][ T9556] lo speed is unknown, defaulting to 1000
[  213.820946][ T9556] lo speed is unknown, defaulting to 1000
[  213.827284][ T9556] lo speed is unknown, defaulting to 1000
[  213.934542][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.954529][ T9570] atomic_op ffff88811af3e528 conn xmit_atomic 0000000000000000
[  213.981823][ T9572] atomic_op ffff88811af3e528 conn xmit_atomic 0000000000000000
[  214.137113][ T9582] cgroup: Invalid name
[  214.213313][ T9587] netlink: 'syz.1.1817': attribute type 10 has an invalid length.
[  214.232938][   T29] kauditd_printk_skb: 894 callbacks suppressed
[  214.232996][   T29] audit: type=1326 audit(1733193492.057:47563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.264976][   T29] audit: type=1326 audit(1733193492.057:47564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.288582][   T29] audit: type=1326 audit(1733193492.057:47565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.312135][   T29] audit: type=1326 audit(1733193492.057:47566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.335773][   T29] audit: type=1326 audit(1733193492.057:47567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.359405][   T29] audit: type=1326 audit(1733193492.057:47568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.383285][   T29] audit: type=1326 audit(1733193492.057:47569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.406843][   T29] audit: type=1326 audit(1733193492.057:47570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.430559][   T29] audit: type=1326 audit(1733193492.057:47571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.454109][   T29] audit: type=1326 audit(1733193492.057:47572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  214.519167][ T9597] 9pnet_fd: Insufficient options for proto=fd
[  214.686570][ T9602] atomic_op ffff888116252928 conn xmit_atomic 0000000000000000
[  214.743022][ T9600] lo speed is unknown, defaulting to 1000
[  214.775724][ T9607] atomic_op ffff888116252928 conn xmit_atomic 0000000000000000
[  214.871525][ T9600] lo speed is unknown, defaulting to 1000
[  214.877921][ T9600] lo speed is unknown, defaulting to 1000
[  216.135178][ T9634] loop2: detected capacity change from 0 to 512
[  216.146074][ T9637] atomic_op ffff8881181c2128 conn xmit_atomic 0000000000000000
[  216.169864][ T9634] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.203311][ T9634] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1835: corrupted in-inode xattr: invalid ea_ino
[  216.262613][ T9634] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1835: couldn't read orphan inode 15 (err -117)
[  216.296330][ T9641] atomic_op ffff8881181c2128 conn xmit_atomic 0000000000000000
[  216.310790][ T9634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.417203][ T9644] atomic_op ffff8881207e6528 conn xmit_atomic 0000000000000000
[  216.568811][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.918628][ T9652] lo speed is unknown, defaulting to 1000
[  217.036500][ T9652] lo speed is unknown, defaulting to 1000
[  217.042711][ T9652] lo speed is unknown, defaulting to 1000
[  217.081708][ T9662] loop2: detected capacity change from 0 to 1024
[  217.101248][ T9662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.392259][ T9681] atomic_op ffff8881170b1528 conn xmit_atomic 0000000000000000
[  217.571114][ T9686] lo speed is unknown, defaulting to 1000
[  217.637369][ T9686] lo speed is unknown, defaulting to 1000
[  217.643574][ T9686] lo speed is unknown, defaulting to 1000
[  217.940769][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.585553][ T5574] kernel write not supported for file /1091/net/psched (pid: 5574 comm: kworker/0:12)
[  219.075851][ T9742] lo speed is unknown, defaulting to 1000
[  219.187397][ T9742] lo speed is unknown, defaulting to 1000
[  219.194983][ T9742] lo speed is unknown, defaulting to 1000
[  219.251948][ T9754] No such timeout policy "syz0"
[  219.758540][   T29] kauditd_printk_skb: 710 callbacks suppressed
[  219.758557][   T29] audit: type=1326 audit(1733193497.217:48283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.788326][   T29] audit: type=1326 audit(1733193497.217:48284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.812107][   T29] audit: type=1326 audit(1733193497.217:48285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.835683][   T29] audit: type=1326 audit(1733193497.217:48286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.859334][   T29] audit: type=1326 audit(1733193497.217:48287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.882934][   T29] audit: type=1326 audit(1733193497.217:48288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.906530][   T29] audit: type=1326 audit(1733193497.217:48289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.930069][   T29] audit: type=1326 audit(1733193497.217:48290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.953651][   T29] audit: type=1326 audit(1733193497.226:48291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  219.977233][   T29] audit: type=1326 audit(1733193497.226:48292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  220.244675][ T9769] atomic_op ffff888131b58128 conn xmit_atomic 0000000000000000
[  220.355710][ T5574] kernel write not supported for file /1195/net/psched (pid: 5574 comm: kworker/0:12)
[  220.386783][ T9777] syz1: rxe_newlink: already configured on team_slave_0
[  220.408562][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'.
[  220.852670][ T9792] loop1: detected capacity change from 0 to 1024
[  220.917830][ T9792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.611233][ T9789] erspan0: left allmulticast mode
[  221.616318][ T9789] erspan0: left promiscuous mode
[  221.621998][ T9789] bridge0: port 4(erspan0) entered disabled state
[  221.662721][ T9789] bond0: left allmulticast mode
[  221.667651][ T9789] bond_slave_0: left allmulticast mode
[  221.673183][ T9789] bond_slave_1: left allmulticast mode
[  221.678659][ T9789] bond0: left promiscuous mode
[  221.683548][ T9789] bond_slave_0: left promiscuous mode
[  221.689079][ T9789] bond_slave_1: left promiscuous mode
[  221.694753][ T9789] bridge0: port 3(bond0) entered disabled state
[  221.812533][ T9789] bridge_slave_0: left allmulticast mode
[  221.818217][ T9789] bridge_slave_0: left promiscuous mode
[  221.824138][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.020915][ T9789] bridge_slave_1: left allmulticast mode
[  222.026641][ T9789] bridge_slave_1: left promiscuous mode
[  222.032348][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.079483][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.220977][ T9789] bond0: (slave bond_slave_0): Releasing backup interface
[  222.260454][ T9789] bond0: (slave bond_slave_1): Releasing backup interface
[  222.286769][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.310394][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.332575][ T9789] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  222.339713][ T9789] batman_adv: batadv0: Removing interface: ip6gretap1
[  222.572775][ T9812] atomic_op ffff8881182dcd28 conn xmit_atomic 0000000000000000
[  222.658197][ T9820] atomic_op ffff8881182dc128 conn xmit_atomic 0000000000000000
[  222.852799][ T9828] bond2: entered promiscuous mode
[  222.857924][ T9828] bond2: entered allmulticast mode
[  222.873086][ T9828] 8021q: adding VLAN 0 to HW filter on device bond2
[  222.886599][ T9828] bond2 (unregistering): Released all slaves
[  223.226830][ T9828] block device autoloading is deprecated and will be removed.
[  223.601448][ T9846] atomic_op ffff88811689e128 conn xmit_atomic 0000000000000000
[  223.902735][ T9858] atomic_op ffff88811689fd28 conn xmit_atomic 0000000000000000
[  224.039916][ T9861] loop0: detected capacity change from 0 to 1024
[  224.127524][ T9861] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1909: Failed to acquire dquot type 0
[  224.160755][ T9861] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  224.197889][ T9861] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.1909: corrupted inode contents
[  224.236719][ T9861] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.1909: mark_inode_dirty error
[  224.275575][ T9861] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.1909: corrupted inode contents
[  224.313953][ T9861] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.1909: mark_inode_dirty error
[  224.354224][ T9861] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.1909: corrupted inode contents
[  224.397196][ T9861] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  224.423979][ T9861] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.1909: corrupted inode contents
[  224.472644][ T9861] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.1909: mark_inode_dirty error
[  224.535802][ T9861] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  224.569304][ T9861] EXT4-fs (loop0): 1 truncate cleaned up
[  224.598876][ T9861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.669306][ T9871] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  224.687480][ T9871] vhci_hcd: invalid port number 23
[  224.693662][ T9871] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[  224.763704][ T9873] 9pnet_fd: Insufficient options for proto=fd
[  224.823447][ T9875] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  224.852338][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.872355][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.906080][ T9875] tmpfs: Unknown parameter 'inodes\2'
[  224.913874][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.925225][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1916'.
[  224.936185][ T9875] ÿÿÿÿ: renamed from ip6gre0
[  225.082024][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'.
[  225.134584][ T9887] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  225.153237][ T9885] ipt_REJECT: TCP_RESET invalid for non-tcp
[  225.200688][   T29] kauditd_printk_skb: 462 callbacks suppressed
[  225.200705][   T29] audit: type=1326 audit(1733193502.329:48753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.214502][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.235739][   T29] audit: type=1326 audit(1733193502.338:48754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.241447][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.262485][   T29] audit: type=1326 audit(1733193502.357:48755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.294014][   T29] audit: type=1326 audit(1733193502.357:48756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.299544][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  225.317660][   T29] audit: type=1326 audit(1733193502.357:48757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.327387][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.352900][   T29] audit: type=1326 audit(1733193502.469:48758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.361366][ T9892] dummy0: entered promiscuous mode
[  225.384203][   T29] audit: type=1326 audit(1733193502.469:48759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.389889][ T9892] macsec1: entered promiscuous mode
[  225.418386][ T9892] macsec1: entered allmulticast mode
[  225.423727][ T9892] dummy0: entered allmulticast mode
[  225.429978][   T29] audit: type=1326 audit(1733193502.544:48760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.464250][   T29] audit: type=1326 audit(1733193502.544:48761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  225.487850][   T29] audit: type=1326 audit(1733193502.544:48762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.1.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  228.689120][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  228.779677][ T9949] loop1: detected capacity change from 0 to 1024
[  228.788167][ T9960] ipt_REJECT: TCP_RESET invalid for non-tcp
[  228.815039][ T9949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.882395][ T9972] 9pnet_fd: Insufficient options for proto=fd
[  228.913983][ T9973] syz.2.1953[9973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.914124][ T9973] syz.2.1953[9973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.938879][ T9973] syz.2.1953[9973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  229.022017][ T9973] loop2: detected capacity change from 0 to 512
[  229.088079][ T9953] batman_adv: batadv0: Interface deactivated: dummy0
[  229.094855][ T9953] batman_adv: batadv0: Removing interface: dummy0
[  229.124257][ T9973] EXT4-fs: Ignoring removed bh option
[  229.129799][ T9973] EXT4-fs: Ignoring removed orlov option
[  229.182226][ T9973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.195563][ T9973] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.211466][ T9953] @: (slave bond_slave_0): Releasing backup interface
[  229.251198][ T9953] @: (slave bond_slave_1): Releasing backup interface
[  229.289250][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.296739][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.324568][ T9977] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1953'.
[  229.336219][ T9977] netlink: 18430 bytes leftover after parsing attributes in process `syz.2.1953'.
[  229.364562][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.372155][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.497587][ T9986] atomic_op ffff888116253528 conn xmit_atomic 0000000000000000
[  229.565727][ T9983] loop0: detected capacity change from 0 to 164
[  229.647782][ T9989] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  229.654348][ T9989] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  229.661826][ T9989] vhci_hcd vhci_hcd.0: Device attached
[  229.769899][ T9990] vhci_hcd: cannot find the pending unlink 0
[  229.832576][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.873943][ T5586] vhci_hcd: vhci_device speed not set
[  229.926013][ T9997] loop2: detected capacity change from 0 to 1024
[  229.939660][ T5586] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  229.952409][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.977432][ T9997] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  230.021774][ T9997] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  230.056054][ T9997] EXT4-fs (loop2): orphan cleanup on readonly fs
[  230.088659][ T9997] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  230.118597][ T9997] EXT4-fs (loop2): Remounting filesystem read-only
[  230.136494][ T9997] EXT4-fs (loop2): 1 orphan inode deleted
[  230.217816][ T9990] vhci_hcd: connection reset by peer
[  230.236525][   T87] vhci_hcd: stop threads
[  230.240823][   T87] vhci_hcd: release socket
[  230.245260][   T87] vhci_hcd: disconnect device
[  230.391718][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'.
[  230.535363][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  230.548080][ T9997] SELinux: (dev loop2, type ext4) getxattr errno 5
[  230.555089][ T9997] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.579105][ T9997] loop2: detected capacity change from 0 to 128
[  230.588945][ T9997] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  230.601571][ T9997] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.650814][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.673509][   T29] kauditd_printk_skb: 201 callbacks suppressed
[  230.673574][   T29] audit: type=1400 audit(1733193507.450:48960): avc:  denied  { setopt } for  pid=10013 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  230.709044][T10021] atomic_op ffff88810147a128 conn xmit_atomic 0000000000000000
[  230.720179][   T29] audit: type=1326 audit(1733193507.497:48961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.743850][   T29] audit: type=1326 audit(1733193507.497:48962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.767644][   T29] audit: type=1326 audit(1733193507.497:48963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.791353][   T29] audit: type=1326 audit(1733193507.497:48964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.815109][   T29] audit: type=1326 audit(1733193507.497:48965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.838762][   T29] audit: type=1326 audit(1733193507.497:48966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.862505][   T29] audit: type=1326 audit(1733193507.497:48967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.886386][   T29] audit: type=1326 audit(1733193507.497:48968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.910147][   T29] audit: type=1326 audit(1733193507.497:48969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  230.967815][T10030] syz.3.1960[10030] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.967931][T10030] syz.3.1960[10030] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.980761][T10030] syz.3.1960[10030] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  231.026496][T10025] loop2: detected capacity change from 0 to 164
[  231.063569][T10030] 9pnet: Could not find request transport: twitch
[  231.128585][T10030] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1960'.
[  231.139689][T10030] netlink: 18430 bytes leftover after parsing attributes in process `syz.3.1960'.
[  231.362773][T10048] loop2: detected capacity change from 0 to 512
[  231.366958][T10050] atomic_op ffff8881182e1528 conn xmit_atomic 0000000000000000
[  231.534453][T10048] EXT4-fs (loop2): orphan cleanup on readonly fs
[  231.541765][T10048] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  231.560329][T10057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  231.567293][T10057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  231.574818][T10057] vhci_hcd vhci_hcd.0: Device attached
[  231.669432][T10058] vhci_hcd: cannot find the pending unlink 0
[  231.706946][T10048] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  231.793524][T10048] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.1967: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  231.908035][T10067] loop1: detected capacity change from 0 to 512
[  231.987801][T10048] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1967: couldn't read orphan inode 13 (err -117)
[  232.019170][T10067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  232.109908][T10048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback.
[  232.158812][T10067] EXT4-fs (loop1): 1 truncate cleaned up
[  232.164988][T10067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.424380][T10058] vhci_hcd: connection closed
[  232.424774][ T1987] vhci_hcd: stop threads
[  232.433922][ T1987] vhci_hcd: release socket
[  232.438417][ T1987] vhci_hcd: disconnect device
[  232.509207][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0b00-0000-000000000000.
[  232.615632][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.056384][T10098] atomic_op ffff8881182e3d28 conn xmit_atomic 0000000000000000
[  233.117819][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  233.608099][T10113] netlink: 'syz.3.1988': attribute type 195 has an invalid length.
[  233.616194][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'.
[  233.741061][T10122] loop1: detected capacity change from 0 to 164
[  233.749533][T10122] ISOFS: unable to read i-node block
[  233.755011][T10122] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  234.120226][T10134] atomic_op ffff88811874a528 conn xmit_atomic 0000000000000000
[  234.840088][T10142] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  234.846769][T10142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  234.854617][T10142] vhci_hcd vhci_hcd.0: Device attached
[  234.902886][T10140] loop0: detected capacity change from 0 to 764
[  234.966856][T10143] vhci_hcd: cannot find the pending unlink 0
[  235.052780][    T9] vhci_hcd: vhci_device speed not set
[  235.117402][    T9] usb 3-1: new full-speed USB device number 3 using vhci_hcd
[  235.248559][T10143] vhci_hcd: connection reset by peer
[  235.258152][ T1987] vhci_hcd: stop threads
[  235.262416][ T1987] vhci_hcd: release socket
[  235.266962][ T1987] vhci_hcd: disconnect device
[  235.365303][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'.
[  235.629707][ T5586] usb 9-1: enqueue for inactive port 0
[  235.635430][ T5586] usb 9-1: enqueue for inactive port 0
[  235.655261][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  235.666447][T10170] atomic_op ffff8881182e3d28 conn xmit_atomic 0000000000000000
[  235.715281][ T5586] vhci_hcd: vhci_device speed not set
[  235.719611][T10172] loop0: detected capacity change from 0 to 1024
[  235.735279][T10172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.768329][T10172] EXT4-fs: Cannot change quota options when quota turned on
[  235.860285][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.943288][T10178] Cannot find set identified by id 0 to match
[  236.039379][   T29] kauditd_printk_skb: 467 callbacks suppressed
[  236.039396][   T29] audit: type=1400 audit(1733193512.478:49436): avc:  denied  { write } for  pid=10185 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  236.076600][   T29] audit: type=1400 audit(1733193512.478:49437): avc:  denied  { read } for  pid=10185 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  236.141531][   T29] audit: type=1400 audit(1733193512.534:49438): avc:  denied  { create } for  pid=10191 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  236.161253][   T29] audit: type=1400 audit(1733193512.534:49439): avc:  denied  { setopt } for  pid=10191 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  236.200623][   T29] audit: type=1326 audit(1733193512.619:49440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8697ff19 code=0x7ffc0000
[  236.224464][   T29] audit: type=1326 audit(1733193512.619:49441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb8697ff19 code=0x7ffc0000
[  236.248273][   T29] audit: type=1326 audit(1733193512.619:49442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8697ff19 code=0x7ffc0000
[  236.272438][   T29] audit: type=1326 audit(1733193512.619:49443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb8697ff19 code=0x7ffc0000
[  236.296154][   T29] audit: type=1326 audit(1733193512.619:49444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8697ff19 code=0x7ffc0000
[  236.319834][   T29] audit: type=1326 audit(1733193512.628:49445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb8697ff19 code=0x7ffc0000
[  236.350286][T10196] loop2: detected capacity change from 0 to 1024
[  236.372044][T10196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.396533][T10201] netlink: 'syz.4.2014': attribute type 33 has an invalid length.
[  236.406734][T10196] EXT4-fs: Cannot change quota options when quota turned on
[  236.423606][T10201] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  236.459895][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.713295][T10201] netlink: 'syz.4.2014': attribute type 3 has an invalid length.
[  236.721613][T10213] geneve0: entered allmulticast mode
[  237.580598][T10231] tipc: Can't bind to reserved service type 0
[  238.084677][T10237] loop1: detected capacity change from 0 to 8192
[  238.174259][T10239] syz.2.2024[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  238.174388][T10239] syz.2.2024[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  238.198675][T10239] syz.2.2024[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  238.244722][T10239] tipc: Started in network mode
[  238.261100][T10239] tipc: Node identity ac1414aa, cluster identity 4711
[  238.277046][T10239] tipc: New replicast peer: 100.1.1.1
[  238.282658][T10239] tipc: Enabled bearer <udp:syz2>, priority 10
[  238.313335][T10239] netlink: 'syz.2.2024': attribute type 1 has an invalid length.
[  238.321267][T10239] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2024'.
[  238.330476][T10239] NCSI netlink: No device for ifindex 262188
[  238.648941][T10254] wireguard0: entered promiscuous mode
[  238.654578][T10254] wireguard0: entered allmulticast mode
[  238.689938][T10248] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  238.730219][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  238.739293][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'.
[  238.820804][T10262] loop2: detected capacity change from 0 to 2048
[  238.835621][T10262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.848522][T10262] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.862431][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'.
[  239.418184][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.474796][ T5574] tipc: Node number set to 2886997162
[  239.551360][T10286] loop2: detected capacity change from 0 to 764
[  239.585266][T10288] loop2: detected capacity change from 0 to 512
[  239.592761][T10288] ext2: Unknown parameter 'subj_user'
[  239.634091][T10290] atomic_op ffff8881182e3d28 conn xmit_atomic 0000000000000000
[  239.753454][T10301] loop2: detected capacity change from 0 to 1024
[  239.786065][T10301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.916444][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.953722][T10317] wireguard0: entered promiscuous mode
[  239.959507][T10317] wireguard0: entered allmulticast mode
[  240.007669][T10321] loop2: detected capacity change from 0 to 512
[  240.015978][T10321] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.2048: corrupted xattr block 95: invalid header
[  240.030630][T10321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2048: bg 0: block 7: invalid block bitmap
[  240.043757][T10321] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  240.053230][T10321] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.2048: corrupted xattr block 95: invalid header
[  240.067560][T10321] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117)
[  240.083092][T10321] EXT4-fs (loop2): 1 orphan inode deleted
[  240.091062][T10321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.479214][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.500431][    T9] usb 3-1: enqueue for inactive port 0
[  240.510996][T10333] loop2: detected capacity change from 0 to 512
[  240.517337][    T9] usb 3-1: enqueue for inactive port 0
[  240.524255][T10333] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[  240.606606][    T9] vhci_hcd: vhci_device speed not set
[  240.798413][T10346] lo speed is unknown, defaulting to 1000
[  240.879506][T10346] lo speed is unknown, defaulting to 1000
[  240.886230][T10346] lo speed is unknown, defaulting to 1000
[  241.293189][T10352] loop0: detected capacity change from 0 to 2048
[  241.331697][T10352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.518521][   T29] kauditd_printk_skb: 737 callbacks suppressed
[  241.518538][   T29] audit: type=1400 audit(1733193517.609:50183): avc:  denied  { read write } for  pid=10351 comm="syz.0.2059" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.558787][T10352] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  241.590572][   T29] audit: type=1400 audit(1733193517.637:50184): avc:  denied  { open } for  pid=10351 comm="syz.0.2059" path="/447/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.613907][   T29] audit: type=1400 audit(1733193517.647:50185): avc:  denied  { map } for  pid=10351 comm="syz.0.2059" path="/447/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.645526][T10352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.654740][T10352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.735354][T10363] lo speed is unknown, defaulting to 1000
[  241.824861][T10363] lo speed is unknown, defaulting to 1000
[  241.838096][T10363] lo speed is unknown, defaulting to 1000
[  242.027769][   T29] audit: type=1326 audit(1733193518.068:50186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.051532][   T29] audit: type=1326 audit(1733193518.068:50187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.075065][   T29] audit: type=1326 audit(1733193518.068:50188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.098678][   T29] audit: type=1326 audit(1733193518.068:50189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.122382][   T29] audit: type=1326 audit(1733193518.068:50190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.145983][   T29] audit: type=1326 audit(1733193518.068:50191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.169730][   T29] audit: type=1326 audit(1733193518.068:50192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  242.486149][T10372] netlink: 'syz.3.2064': attribute type 21 has an invalid length.
[  242.494106][T10372] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2064'.
[  243.184534][T10390] raw_sendmsg: syz.3.2071 forgot to set AF_INET. Fix it!
[  243.726986][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.962551][T10398] geneve0: left allmulticast mode
[  243.968493][T10398] bond1: left promiscuous mode
[  243.973317][T10398] bond1: left allmulticast mode
[  243.979975][T10398] siw: device registration error -23
[  244.090310][T10416] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2080'.
[  244.099697][T10416] smc: net device bond0 erased user defined pnetid SYZ0
[  244.147460][T10418] loop2: detected capacity change from 0 to 4096
[  244.156469][T10418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.170357][T10418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.176678][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2080'.
[  244.955718][T10429] loop0: detected capacity change from 0 to 512
[  244.962582][T10429] EXT4-fs: inline encryption not supported
[  244.981499][T10429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.004042][T10429] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.019630][T10429] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2083: corrupted inode contents
[  245.034529][T10429] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.2083: mark_inode_dirty error
[  245.049650][T10429] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2083: corrupted inode contents
[  245.049693][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2084'.
[  245.071649][T10429] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.2083: mark_inode_dirty error
[  245.154187][T10444] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2086'.
[  245.294447][T10454] smc: net device bond0 applied user defined pnetid SYZ0
[  245.507480][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.121969][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'.
[  246.172777][T10467] loop1: detected capacity change from 0 to 2048
[  246.195330][T10467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.208391][T10471] ipt_REJECT: TCP_RESET invalid for non-tcp
[  246.936784][   T29] kauditd_printk_skb: 537 callbacks suppressed
[  246.936807][   T29] audit: type=1400 audit(1733193522.656:50730): avc:  denied  { read write open } for  pid=10466 comm="syz.1.2095" path="/405/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  246.966805][   T29] audit: type=1400 audit(1733193522.665:50731): avc:  denied  { create } for  pid=10466 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  246.987444][   T29] audit: type=1400 audit(1733193522.665:50732): avc:  denied  { write } for  pid=10466 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  247.008172][   T29] audit: type=1400 audit(1733193522.665:50733): avc:  denied  { nlmsg_read } for  pid=10466 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  247.029319][   T29] audit: type=1400 audit(1733193522.665:50734): avc:  denied  { ioctl } for  pid=10466 comm="syz.1.2095" path="socket:[29634]" dev="sockfs" ino=29634 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  247.113168][T10479] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  247.129385][   T29] audit: type=1400 audit(1733193522.852:50735): avc:  denied  { relabelto } for  pid=10476 comm="syz.2.2096" name="memory.events" dev="tmpfs" ino=2248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  247.156670][   T29] audit: type=1400 audit(1733193522.852:50736): avc:  denied  { associate } for  pid=10476 comm="syz.2.2096" name="memory.events" dev="tmpfs" ino=2248 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768"
[  247.446027][   T29] audit: type=1326 audit(1733193523.058:50737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  247.469749][   T29] audit: type=1326 audit(1733193523.058:50738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  247.493407][   T29] audit: type=1326 audit(1733193523.058:50739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  247.618403][T10489] ip6gre1: entered allmulticast mode
[  247.667835][T10489] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2099'.
[  247.899187][T10506] hub 5-0:1.0: USB hub found
[  247.913005][T10506] hub 5-0:1.0: 8 ports detected
[  247.972464][T10510] netlink: 'syz.4.2106': attribute type 21 has an invalid length.
[  247.992432][T10510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2106'.
[  248.012046][T10512] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  248.035408][T10515] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  248.218392][T10521] loop0: detected capacity change from 0 to 2048
[  248.245838][T10521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.261720][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.326105][T10520] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[  248.326105][T10520]    program syz.0.2110 not setting count and/or reply_len properly
[  248.465069][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.602412][T10538] loop1: detected capacity change from 0 to 256
[  248.617268][T10538] FAT-fs (loop1): Directory bread(block 64) failed
[  248.623913][T10538] FAT-fs (loop1): Directory bread(block 65) failed
[  248.630746][T10538] FAT-fs (loop1): Directory bread(block 66) failed
[  248.637508][T10538] FAT-fs (loop1): Directory bread(block 67) failed
[  248.644226][T10538] FAT-fs (loop1): Directory bread(block 68) failed
[  248.650937][T10538] FAT-fs (loop1): Directory bread(block 69) failed
[  248.657537][T10538] FAT-fs (loop1): Directory bread(block 70) failed
[  248.664223][T10538] FAT-fs (loop1): Directory bread(block 71) failed
[  248.670959][T10538] FAT-fs (loop1): Directory bread(block 72) failed
[  248.677500][T10538] FAT-fs (loop1): Directory bread(block 73) failed
[  248.811710][T10544] vlan1: entered promiscuous mode
[  248.825963][T10544] vlan1: left promiscuous mode
[  248.868558][T10550] syz.1.2116: attempt to access beyond end of device
[  248.868558][T10550] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256
[  249.241320][T10564] atomic_op ffff888129554528 conn xmit_atomic 0000000000000000
[  249.279984][T10566] x_tables: duplicate underflow at hook 4
[  249.325333][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'.
[  249.325372][T10572] loop2: detected capacity change from 0 to 512
[  249.355239][T10568] support for the xor transformation has been removed.
[  249.358256][T10572] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2129: bg 0: block 393: padding at end of block bitmap is not set
[  249.377215][T10572] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  249.386436][T10572] EXT4-fs (loop2): 2 truncates cleaned up
[  249.392710][T10572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.428350][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.790272][T10604] tun0: tun_chr_ioctl cmd 1074025675
[  249.795666][T10604] tun0: persist enabled
[  250.461710][T10618] atomic_op ffff888129554528 conn xmit_atomic 0000000000000000
[  250.554318][T10620] program syz.4.2144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  251.340758][T10644] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in;
[  251.340758][T10644]    program syz.0.2153 not setting count and/or reply_len properly
[  251.385356][T10644] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2153'.
[  251.576021][T10653] lo speed is unknown, defaulting to 1000
[  251.665646][T10653] lo speed is unknown, defaulting to 1000
[  251.672311][T10653] lo speed is unknown, defaulting to 1000
[  252.102286][T10663] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  252.367628][   T29] kauditd_printk_skb: 668 callbacks suppressed
[  252.367643][   T29] audit: type=1326 audit(1733193527.768:51408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.439853][   T29] audit: type=1326 audit(1733193527.796:51409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.463637][   T29] audit: type=1326 audit(1733193527.796:51410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.487352][   T29] audit: type=1326 audit(1733193527.796:51411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.510999][   T29] audit: type=1326 audit(1733193527.796:51412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.534495][   T29] audit: type=1326 audit(1733193527.796:51413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.558196][   T29] audit: type=1326 audit(1733193527.796:51414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.581798][   T29] audit: type=1326 audit(1733193527.796:51415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.605448][   T29] audit: type=1326 audit(1733193527.805:51416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  252.629062][   T29] audit: type=1326 audit(1733193527.805:51417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  253.247203][T10686] atomic_op ffff8881182dc528 conn xmit_atomic 0000000000000000
[  253.538085][T10692] loop0: detected capacity change from 0 to 512
[  253.561116][T10692] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  253.597433][T10692] EXT4-fs (loop0): 1 truncate cleaned up
[  253.617720][T10692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.884428][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.533812][T10719] veth0_to_team: entered promiscuous mode
[  254.539739][T10719] veth0_to_team: entered allmulticast mode
[  254.650044][T10721] loop2: detected capacity change from 0 to 512
[  254.656853][T10721] EXT4-fs: Ignoring removed bh option
[  254.663330][T10721] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  254.673474][T10721] EXT4-fs (loop2): 1 truncate cleaned up
[  254.680012][T10721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.692289][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'.
[  254.702302][T10721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26880 sclass=netlink_route_socket pid=10721 comm=syz.2.2172
[  254.755671][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.803027][T10729] atomic_op ffff888131b5ad28 conn xmit_atomic 0000000000000000
[  254.870513][T10731] loop2: detected capacity change from 0 to 1024
[  254.883588][T10731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.257021][T10759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2187'.
[  255.269710][T10759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=10759 comm=syz.3.2187
[  255.352633][    T9] IPVS: starting estimator thread 0...
[  255.363521][T10731] netlink: 'syz.2.2176': attribute type 6 has an invalid length.
[  255.390415][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.474578][T10767] IPVS: using max 2544 ests per chain, 127200 per kthread
[  255.633352][T10788] blktrace: Concurrent blktraces are not allowed on sg0
[  255.656924][T10788] dccp_invalid_packet: P.Data Offset(0) too small
[  255.664405][T10788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2197'.
[  256.132738][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'.
[  256.545039][T10807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2203'.
[  256.560050][T10806] loop0: detected capacity change from 0 to 512
[  256.570221][T10806] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent
[  256.628395][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'.
[  256.642437][T10809] loop2: detected capacity change from 0 to 256
[  256.649244][T10809] vfat: Unknown parameter ''
[  256.909334][T10818] lo speed is unknown, defaulting to 1000
[  257.005734][T10818] lo speed is unknown, defaulting to 1000
[  257.012257][T10818] lo speed is unknown, defaulting to 1000
[  257.191103][T10822] loop1: detected capacity change from 0 to 512
[  257.236584][T10822] EXT4-fs: Ignoring removed orlov option
[  257.279565][T10822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  257.377971][T10822] EXT4-fs (loop1): 1 orphan inode deleted
[  257.383752][T10822] EXT4-fs (loop1): 1 truncate cleaned up
[  257.423097][T10822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.617703][T10822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  257.718664][   T29] kauditd_printk_skb: 363 callbacks suppressed
[  257.718704][   T29] audit: type=1326 audit(1733193532.777:51781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  257.881175][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.923056][   T29] audit: type=1326 audit(1733193532.805:51782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  257.946949][   T29] audit: type=1326 audit(1733193532.805:51783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  257.970696][   T29] audit: type=1326 audit(1733193532.805:51784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  257.994450][   T29] audit: type=1326 audit(1733193532.805:51785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  258.018608][   T29] audit: type=1326 audit(1733193532.814:51786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  258.026318][T10831] lo speed is unknown, defaulting to 1000
[  258.042388][   T29] audit: type=1326 audit(1733193532.814:51787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  258.072027][   T29] audit: type=1326 audit(1733193532.833:51788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  258.096239][   T29] audit: type=1326 audit(1733193532.833:51789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  258.120258][   T29] audit: type=1326 audit(1733193532.889:51790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.2.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  258.181268][T10838] loop2: detected capacity change from 0 to 2048
[  258.360189][T10837] IPVS: Unknown mcast interface: netdevsim0
[  258.372563][T10831] lo speed is unknown, defaulting to 1000
[  258.394151][T10841] ------------[ cut here ]------------
[  258.399666][T10841] refcount_t: underflow; use-after-free.
[  258.405820][T10841] WARNING: CPU: 1 PID: 10841 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230
[  258.415417][T10841] Modules linked in:
[  258.418637][T10837] loop1: detected capacity change from 0 to 128
[  258.419345][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.3.2214 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  258.436415][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  258.436986][T10831] lo speed is unknown, defaulting to 1000
[  258.446577][T10841] RIP: 0010:refcount_warn_saturate+0x1c6/0x230
[  258.459089][T10841] Code: 72 ff ff ff e8 bb 28 70 ff 48 c7 c7 eb ce b2 86 e8 3f 76 89 ff c6 05 b3 4c f0 04 01 90 48 c7 c7 f3 04 1c 86 e8 db b8 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 8c 28 70 ff 48 c7 c7 e8 ce b2 86 e8
[  258.478870][T10841] RSP: 0018:ffffc90013123b28 EFLAGS: 00010246
[  258.484965][T10841] RAX: 51eabc0d3cfe6400 RBX: ffff88811c3526e4 RCX: 0000000000080000
[  258.493005][T10841] RDX: ffffc900054c2000 RSI: 00000000000011ab RDI: 00000000000011ac
[  258.501095][T10841] RBP: 0000000000000003 R08: ffffffff81143c87 R09: 0000000000000000
[  258.509137][T10841] R10: 0001ffffffffffff R11: ffff888128d6d280 R12: ffff8881177c9068
[  258.517201][T10841] R13: 0000000000000002 R14: ffff88811c3526e4 R15: 0000000000000000
[  258.525213][T10841] FS:  00007fdec93476c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[  258.534355][T10841] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.541058][T10841] CR2: 0000000000000000 CR3: 000000011df20000 CR4: 00000000003506f0
[  258.549061][T10841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  258.557142][T10841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  258.565183][T10841] Call Trace:
[  258.568495][T10841]  <TASK>
[  258.571448][T10841]  ? __warn+0x141/0x350
[  258.575731][T10841]  ? report_bug+0x315/0x420
[  258.580267][T10841]  ? refcount_warn_saturate+0x1c6/0x230
[  258.585986][T10841]  ? handle_bug+0x60/0x90
[  258.590345][T10841]  ? exc_invalid_op+0x1a/0x50
[  258.595081][T10841]  ? asm_exc_invalid_op+0x1a/0x20
[  258.600152][T10841]  ? __warn_printk+0x167/0x1b0
[  258.605008][T10841]  ? refcount_warn_saturate+0x1c6/0x230
[  258.610596][T10841]  ? refcount_warn_saturate+0x1c5/0x230
[  258.616208][T10841]  sk_skb_reason_drop+0xe9/0x290
[  258.621175][T10841]  j1939_session_put+0x157/0x2a0
[  258.626203][T10841]  j1939_sk_sendmsg+0xa71/0xc00
[  258.631146][T10841]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  258.636649][T10841]  __sock_sendmsg+0x140/0x180
[  258.641452][T10841]  ____sys_sendmsg+0x312/0x410
[  258.646328][T10841]  __sys_sendmsg+0x19d/0x230
[  258.650970][T10841]  __x64_sys_sendmsg+0x46/0x50
[  258.655832][T10841]  x64_sys_call+0x2734/0x2dc0
[  258.660581][T10841]  do_syscall_64+0xc9/0x1c0
[  258.665136][T10841]  ? clear_bhb_loop+0x55/0xb0
[  258.669920][T10841]  ? clear_bhb_loop+0x55/0xb0
[  258.674936][T10841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.681002][T10841] RIP: 0033:0x7fdecaccff19
[  258.685435][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.705351][T10841] RSP: 002b:00007fdec9347058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.713845][T10841] RAX: ffffffffffffffda RBX: 00007fdecae95fa0 RCX: 00007fdecaccff19
[  258.722100][T10841] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 000000000000000d
[  258.730379][T10841] RBP: 00007fdecad43986 R08: 0000000000000000 R09: 0000000000000000
[  258.738990][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.747660][T10841] R13: 0000000000000000 R14: 00007fdecae95fa0 R15: 00007fff9c753928
[  258.755840][T10841]  </TASK>
[  258.758950][T10841] ---[ end trace 0000000000000000 ]---
[  259.104764][T10866] loop1: detected capacity change from 0 to 2048
[  259.119625][T10866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.252977][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.413534][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'.
[  260.999583][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'.
[  261.015228][T10927] hsr_slave_1 (unregistering): left promiscuous mode
[  261.063147][T10933] loop0: detected capacity change from 0 to 256
[  261.076511][T10933] vfat: Unknown parameter ''
[  261.097280][T10918] geneve0: entered allmulticast mode
[  261.296384][T10942] netlink: 132 bytes leftover after parsing attributes in process `+}[@'.
[  261.471181][T10948] SELinux: syz.4.2248 (10948) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  264.087892][T10970] IPVS: Unknown mcast interface: netdevsim0
[  264.100640][T10970] loop2: detected capacity change from 0 to 128
[  264.147309][   T29] kauditd_printk_skb: 378 callbacks suppressed
[  264.147370][   T29] audit: type=1400 audit(1733193538.731:52169): avc:  denied  { create } for  pid=10963 comm="syz.2.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  264.173622][   T29] audit: type=1400 audit(1733193538.731:52170): avc:  denied  { setopt } for  pid=10963 comm="syz.2.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  264.193481][   T29] audit: type=1400 audit(1733193538.759:52171): avc:  denied  { mount } for  pid=10963 comm="syz.2.2252" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  264.480356][T10982] blktrace: Concurrent blktraces are not allowed on loop7
[  264.487278][   T29] audit: type=1326 audit(1733193539.096:52172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  264.511253][   T29] audit: type=1326 audit(1733193539.096:52173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  264.535192][   T29] audit: type=1326 audit(1733193539.096:52174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  264.554162][T10987] loop0: detected capacity change from 0 to 1024
[  264.558956][   T29] audit: type=1326 audit(1733193539.096:52175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  264.570377][T10989] audit: audit_backlog=65 > audit_backlog_limit=64
[  264.588727][   T29] audit: type=1326 audit(1733193539.096:52176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecaccff19 code=0x7ffc0000
[  264.595222][T10989] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  264.608652][T10988] random: crng reseeded on system resumption
[  264.634880][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.643874][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.663586][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.695565][T10992] loop2: detected capacity change from 0 to 512
[  264.713011][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.722076][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.733949][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.746242][T10992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2258'.
[  264.755295][T10992] netlink: 'syz.2.2258': attribute type 6 has an invalid length.
[  264.763081][T10992] netlink: 'syz.2.2258': attribute type 5 has an invalid length.
[  264.771397][T10987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.940625][T11003] cgroup: Need name or subsystem set
[  264.981821][T11003] netlink: 'syz.2.2263': attribute type 29 has an invalid length.
[  264.998402][T11003] loop2: detected capacity change from 0 to 512
[  265.005921][T11003] EXT4-fs: Ignoring removed oldalloc option
[  265.012792][T11003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  265.024712][T11003] EXT4-fs (loop2): 1 truncate cleaned up
[  265.030947][T11003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.066659][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.081514][T11011] atomic_op ffff8881207e4528 conn xmit_atomic 0000000000000000
[  265.531727][T11028] lo speed is unknown, defaulting to 1000
[  265.539714][T11028] lo speed is unknown, defaulting to 1000
[  265.548947][T11027] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  265.565195][T11028] lo speed is unknown, defaulting to 1000
[  265.627638][T11030] loop2: detected capacity change from 0 to 512
[  265.635669][T11030] EXT4-fs: Ignoring removed orlov option
[  265.647963][T11028] infiniband s
z1: set active
[  265.650272][T11030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  265.652661][T11028] infiniband s
z1: added lo
[  265.667389][ T3380] lo speed is unknown, defaulting to 1000
[  265.679707][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.691439][T11030] EXT4-fs (loop2): 1 orphan inode deleted
[  265.697301][T11030] EXT4-fs (loop2): 1 truncate cleaned up
[  265.707111][T11030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.721537][T11028] RDS/IB: s
z1: added
[  265.725667][T11028] smc: adding ib device s
z1 with port count 1
[  265.733364][T11030] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  265.733522][T11028] smc:    ib device s
z1 port 1 has pnetid 
[  265.753640][ T3380] lo speed is unknown, defaulting to 1000
[  265.759959][T11028] lo speed is unknown, defaulting to 1000
[  265.793892][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.798902][T11028] lo speed is unknown, defaulting to 1000
[  265.838688][T11028] lo speed is unknown, defaulting to 1000
[  265.871746][T11028] lo speed is unknown, defaulting to 1000
[  265.904586][T11028] lo speed is unknown, defaulting to 1000
[  265.910478][T11032] geneve0: entered allmulticast mode
[  265.984950][T11052] atomic_op ffff888101070528 conn xmit_atomic 0000000000000000
[  266.143930][T11059] loop2: detected capacity change from 0 to 8192
[  266.609533][T11086] 9pnet_fd: Insufficient options for proto=fd
[  266.937640][T11106] atomic_op ffff88810104ed28 conn xmit_atomic 0000000000000000
[  266.984796][T11109] xt_hashlimit: max too large, truncated to 1048576
[  267.048282][T11116] loop0: detected capacity change from 0 to 128
[  267.394404][T11135] SELinux: syz.0.2304 (11135) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  267.432017][T11135] loop0: detected capacity change from 0 to 1024
[  267.448182][T11135] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  267.457818][T11135] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  267.478009][T11135] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.2304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  267.500055][T11135] EXT4-fs (loop0): no journal found
[  267.505565][T11135] EXT4-fs (loop0): can't get journal size
[  267.544246][T11135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11c, mo2=0002]
[  267.560438][T11145] atomic_op ffff88810104f128 conn xmit_atomic 0000000000000000
[  267.568961][T11135] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.2304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  267.600590][T11135] EXT4-fs (loop0): failed to initialize system zone (-117)
[  267.714624][T11135] EXT4-fs (loop0): mount failed
[  268.035921][T11161] atomic_op ffff88811689d128 conn xmit_atomic 0000000000000000
[  268.305205][T11170] loop0: detected capacity change from 0 to 4096
[  268.325404][T11170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.391005][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.404327][T11175] sctp: [Deprecated]: syz.1.2320 (pid 11175) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.404327][T11175] Use struct sctp_sack_info instead
[  268.425592][T11175] random: crng reseeded on system resumption
[  268.440418][T11178] atomic_op ffff888116251928 conn xmit_atomic 0000000000000000
[  268.539514][T11183] loop1: detected capacity change from 0 to 512
[  268.854418][T11204] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  268.938533][T11214] sctp: [Deprecated]: syz.2.2333 (pid 11214) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.938533][T11214] Use struct sctp_sack_info instead
[  268.957370][T11214] random: crng reseeded on system resumption
[  269.517745][   T29] kauditd_printk_skb: 2859 callbacks suppressed
[  269.517762][   T29] audit: type=1400 audit(1733193543.815:55020): avc:  denied  { ioctl } for  pid=11235 comm="syz.3.2340" path="socket:[34295]" dev="sockfs" ino=34295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  269.589360][T11241] block device autoloading is deprecated and will be removed.
[  269.611589][   T29] audit: type=1326 audit(1733193543.871:55021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.635385][   T29] audit: type=1326 audit(1733193543.871:55022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.659134][   T29] audit: type=1326 audit(1733193543.871:55023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.682601][   T29] audit: type=1326 audit(1733193543.871:55024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.706293][   T29] audit: type=1326 audit(1733193543.871:55025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.730083][   T29] audit: type=1326 audit(1733193543.871:55026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.753737][   T29] audit: type=1326 audit(1733193543.871:55027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.777479][   T29] audit: type=1326 audit(1733193543.871:55028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  269.801097][   T29] audit: type=1326 audit(1733193543.871:55029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37623ff19 code=0x7ffc0000
[  270.112094][T11251] IPv6: Can't replace route, no match found
[  270.369014][T11254] sctp: [Deprecated]: syz.3.2346 (pid 11254) Use of struct sctp_assoc_value in delayed_ack socket option.
[  270.369014][T11254] Use struct sctp_sack_info instead
[  270.389067][T11254] random: crng reseeded on system resumption
[  270.722338][T11270] loop3: detected capacity change from 0 to 1024
[  270.729635][T11270] EXT4-fs: Ignoring removed nobh option
[  270.735935][T11270] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  270.748080][T11270] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  270.767978][T11270] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2353: couldn't read orphan inode 11 (err -117)
[  270.781080][T11270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.813368][T11270] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2353: Invalid block bitmap block 0 in block_group 0
[  270.827114][T11270] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2353: Failed to acquire dquot type 0
[  270.889747][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.899158][ T2164] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:8: Failed to release dquot type 0
[  270.934847][T11278] loop3: detected capacity change from 0 to 2048
[  270.953871][T11278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.292243][T11291] xt_hashlimit: max too large, truncated to 1048576
[  271.325652][T11294] __nla_validate_parse: 5 callbacks suppressed
[  271.325671][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'.
[  271.735122][T11314] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2376'.
[  271.757529][T11314] smc: net device bond0 erased user defined pnetid SYZ0
[  271.801221][T11315] infiniband s
z1: set active
[  271.806717][T11315] infiniband s
z1: set active
[  271.852978][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'.
[  271.911713][    T9] lo speed is unknown, defaulting to 1000
[  271.917639][ T5574] lo speed is unknown, defaulting to 1000
[  271.936620][T11319] infiniband s
z1: set active
[  271.949207][T11320] siw: device registration error -23
[  271.961079][T11319] infiniband s
z1: set active
[  272.046123][T11319] veth0_to_team: left promiscuous mode
[  272.051819][T11319] veth0_to_team: left allmulticast mode
[  272.098952][T11319] geneve0: left allmulticast mode
[  272.105802][T11319] macsec1: left promiscuous mode
[  272.110845][T11319] macsec1: left allmulticast mode
[  272.115960][T11319] dummy0: left allmulticast mode
[  272.125654][    T9] lo speed is unknown, defaulting to 1000
[  272.131781][ T5574] lo speed is unknown, defaulting to 1000
[  272.260088][T11325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11325 comm=syz.4.2368
[  272.464222][T11338] atomic_op ffff88815c5b0528 conn xmit_atomic 0000000000000000
[  272.512900][T11340] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  272.630812][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.917625][T11365] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  272.925045][T11367] atomic_op ffff888116252d28 conn xmit_atomic 0000000000000000
[  272.989825][T11373] atomic_op ffff888116252d28 conn xmit_atomic 0000000000000000
[  273.010756][T11372] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  273.063410][T11376] loop0: detected capacity change from 0 to 2048
[  273.087341][T11369] geneve0: left allmulticast mode
[  273.098513][T11369] siw: device registration error -23
[  273.139409][T11376] atomic_op ffff888116252d28 conn xmit_atomic 0000000000000000
[  273.142426][T11380] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2388'.
[  273.151398][T11383] loop1: detected capacity change from 0 to 512
[  273.164697][T11383] EXT4-fs (loop1): orphan cleanup on readonly fs
[  273.171508][T11383] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  273.187219][T11383] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  273.194611][T11383] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.2398: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  273.213206][T11383] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2398: couldn't read orphan inode 13 (err -117)
[  273.225770][T11383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback.
[  273.257679][T11383] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  273.259310][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2388'.
[  273.447869][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0b00-0000-000000000000.
[  273.496285][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'.
[  273.538576][T11397] 9pnet_fd: Insufficient options for proto=fd
[  273.625184][T11403] loop2: detected capacity change from 0 to 2048
[  273.629007][T11405] atomic_op ffff88815c5b2128 conn xmit_atomic 0000000000000000
[  273.646030][T11403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.679428][T11410] loop1: detected capacity change from 0 to 1024
[  273.687636][T11410] EXT4-fs: Ignoring removed nobh option
[  273.693860][T11410] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  273.706024][T11410] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.2399: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  273.725589][T11410] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2399: couldn't read orphan inode 11 (err -117)
[  273.739411][T11410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.780116][T11410] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2399: Invalid block bitmap block 0 in block_group 0
[  273.794268][T11410] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2399: Failed to acquire dquot type 0
[  273.825056][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.835009][   T28] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 0
[  273.922684][T11414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11414 comm=syz.1.2400
[  274.135131][T11424] loop1: detected capacity change from 0 to 512
[  274.170263][T11424] EXT4-fs: Ignoring removed i_version option
[  274.176422][T11424] EXT4-fs: Ignoring removed mblk_io_submit option
[  274.199553][T11424] EXT4-fs: dax option not supported
[  274.221136][T11425] ªªªªª»: renamed from vlan1
[  274.232116][T11424] loop1: detected capacity change from 0 to 256
[  274.500972][T11433] tmpfs: Bad value for 'nr_blocks'
[  275.281894][T11431] ip6gre1: entered allmulticast mode
[  275.295575][   T29] kauditd_printk_skb: 1117 callbacks suppressed
[  275.295656][   T29] audit: type=1400 audit(1733193548.487:56140): avc:  denied  { mounton } for  pid=11423 comm="syz.1.2402" path="/460/file0/file1/file1" dev="loop1" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  275.326416][   T29] audit: type=1400 audit(1733193548.543:56141): avc:  denied  { map } for  pid=11423 comm="syz.1.2402" path="socket:[33466]" dev="sockfs" ino=33466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  275.349789][   T29] audit: type=1400 audit(1733193549.226:56142): avc:  denied  { name_bind } for  pid=11430 comm="syz.3.2405" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  275.664593][T11431] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2404'.
[  275.702275][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2406'.
[  275.711395][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2406'.
[  275.902158][   T29] audit: type=1400 audit(1733193549.591:56143): avc:  denied  { read } for  pid=11436 comm="syz.4.2406" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  275.925982][   T29] audit: type=1400 audit(1733193549.591:56144): avc:  denied  { open } for  pid=11436 comm="syz.4.2406" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  275.950469][   T29] audit: type=1400 audit(1733193549.610:56145): avc:  denied  { create } for  pid=11436 comm="syz.4.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  275.988349][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2406'.
[  276.019527][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.051457][T11443] netlink: 'syz.4.2406': attribute type 6 has an invalid length.
[  276.059331][T11443] netlink: 'syz.4.2406': attribute type 5 has an invalid length.
[  276.106089][   T29] audit: type=1400 audit(1733193549.872:56146): avc:  denied  { read write } for  pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  276.129552][   T29] audit: type=1400 audit(1733193549.872:56147): avc:  denied  { open } for  pid=3300 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  276.152805][   T29] audit: type=1400 audit(1733193549.872:56148): avc:  denied  { ioctl } for  pid=3300 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=719 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  276.177544][   T29] audit: type=1400 audit(1733193549.891:56149): avc:  denied  { read } for  pid=11440 comm="syz.0.2408" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  276.223955][T11449] atomic_op ffff88815c5b1128 conn xmit_atomic 0000000000000000
[  276.317417][T11457] loop1: detected capacity change from 0 to 512
[  276.325148][T11457] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  276.347810][T11457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.392565][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.405597][T11468] netlink: 'syz.0.2416': attribute type 21 has an invalid length.
[  276.593212][T11482] atomic_op ffff888116253528 conn xmit_atomic 0000000000000000
[  276.647277][T11486] atomic_op ffff88815c5b3928 conn xmit_atomic 0000000000000000
[  276.883307][T11501] loop1: detected capacity change from 0 to 1024
[  276.893212][T11501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.996766][T11508] atomic_op ffff88815c5b1128 conn xmit_atomic 0000000000000000
[  277.032615][T11512] atomic_op ffff88815c5b1128 conn xmit_atomic 0000000000000000
[  277.062789][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.089055][T11514] loop0: detected capacity change from 0 to 512
[  277.096835][T11514] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  277.127052][T11514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.135823][T11521] loop1: detected capacity change from 0 to 164
[  277.185117][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.186363][T11523] vlan2: entered promiscuous mode
[  277.199508][T11523] vlan2: entered allmulticast mode
[  277.204673][T11523] hsr_slave_1: entered allmulticast mode
[  277.223393][T11523] __nla_validate_parse: 12 callbacks suppressed
[  277.223440][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'.
[  277.238864][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'.
[  277.273417][T11523] loop1: detected capacity change from 0 to 2048
[  277.297276][T11523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.309772][T11523] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.322494][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'.
[  277.338339][T11523] hsr_slave_1 (unregistering): left allmulticast mode
[  277.349633][T11523] hsr_slave_1 (unregistering): left promiscuous mode
[  277.534415][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'.
[  277.548847][T11547] ipt_REJECT: TCP_RESET invalid for non-tcp
[  277.961130][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.019808][T11555] loop3: detected capacity change from 0 to 164
[  278.365282][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'.
[  278.502738][T11568] tun0: tun_chr_ioctl cmd 1074025675
[  278.508315][T11568] tun0: persist enabled
[  278.927749][T11570] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in;
[  278.927749][T11570]    program syz.3.2461 not setting count and/or reply_len properly
[  278.970468][T11574] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  278.986715][T11570] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2461'.
[  279.057676][T11578] loop1: detected capacity change from 0 to 512
[  279.072993][T11580] rds_sendmsg: 4 callbacks suppressed
[  279.073040][T11580] atomic_op ffff888116897928 conn xmit_atomic 0000000000000000
[  279.082847][T11583] atomic_op ffff888134d78d28 conn xmit_atomic 0000000000000000
[  279.095781][T11578] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2452: bg 0: block 393: padding at end of block bitmap is not set
[  279.111289][T11578] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  279.121270][T11578] EXT4-fs (loop1): 2 truncates cleaned up
[  279.127905][T11578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.181775][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.186606][T11587] vlan0: entered promiscuous mode
[  279.196062][T11587] hsr_slave_1: entered promiscuous mode
[  279.201756][T11587] vlan0: entered allmulticast mode
[  279.206920][T11587] hsr_slave_1: entered allmulticast mode
[  279.222635][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'.
[  279.231645][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'.
[  279.267377][T11587] loop3: detected capacity change from 0 to 2048
[  279.275013][T11592] loop1: detected capacity change from 0 to 2048
[  279.295499][T11587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.296136][T11592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.308691][T11587] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.339151][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2458'.
[  279.344039][T11587] hsr_slave_1 (unregistering): left allmulticast mode
[  279.344089][T11587] hsr_slave_1 (unregistering): left promiscuous mode
[  279.373841][T11592] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  279.424757][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.433877][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.459014][T11592] lo speed is unknown, defaulting to 1000
[  279.515860][T11592] lo speed is unknown, defaulting to 1000
[  279.522181][T11592] lo speed is unknown, defaulting to 1000
[  279.528393][T11592] lo speed is unknown, defaulting to 1000
[  279.961871][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.129297][T11613] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2464'.
[  280.189078][T11611] loop3: detected capacity change from 0 to 764
[  280.196991][T11611] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  280.351820][T11620] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  280.387136][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.390025][T11624] loop3: detected capacity change from 0 to 2048
[  280.416577][T11624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.422820][T11630] atomic_op ffff88815c5b3528 conn xmit_atomic 0000000000000000
[  280.483459][T11634] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in;
[  280.483459][T11634]    program syz.1.2470 not setting count and/or reply_len properly
[  280.797234][   T29] kauditd_printk_skb: 1095 callbacks suppressed
[  280.797260][   T29] audit: type=1400 audit(1733193554.263:57245): avc:  denied  { read write open } for  pid=11623 comm="syz.3.2468" path="/502/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  280.827348][   T29] audit: type=1400 audit(1733193554.263:57246): avc:  denied  { nlmsg_read } for  pid=11623 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  280.848353][   T29] audit: type=1400 audit(1733193554.263:57247): avc:  denied  { ioctl } for  pid=11623 comm="syz.3.2468" path="socket:[35976]" dev="sockfs" ino=35976 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  281.255326][T11646] loop2: detected capacity change from 0 to 2048
[  281.413986][   T29] audit: type=1400 audit(1733193554.703:57248): avc:  denied  { perfmon } for  pid=11643 comm="syz.2.2473" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  281.435156][   T29] audit: type=1400 audit(1733193554.731:57249): avc:  denied  { prog_load } for  pid=11643 comm="syz.2.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  281.454586][   T29] audit: type=1400 audit(1733193554.731:57250): avc:  denied  { bpf } for  pid=11643 comm="syz.2.2473" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  281.475326][   T29] audit: type=1400 audit(1733193554.731:57251): avc:  denied  { prog_run } for  pid=11643 comm="syz.2.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  281.494994][   T29] audit: type=1400 audit(1733193554.731:57252): avc:  denied  { map_create } for  pid=11643 comm="syz.2.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  281.514354][   T29] audit: type=1400 audit(1733193554.731:57253): avc:  denied  { map_read map_write } for  pid=11643 comm="syz.2.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  281.534397][   T29] audit: type=1400 audit(1733193554.797:57254): avc:  denied  { read write } for  pid=11643 comm="syz.2.2473" name="loop2" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  281.804224][T11646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.892199][T11653] SELinux: syz.4.2476 (11653) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  281.955213][T11644] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[  281.955213][T11644]    program syz.2.2473 not setting count and/or reply_len properly
[  282.159945][T11649] lo speed is unknown, defaulting to 1000
[  282.217787][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.346012][T11664] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  282.367168][T11664] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  282.374866][T11662] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  282.468702][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.480163][T11667] atomic_op ffff88815c5b3128 conn xmit_atomic 0000000000000000
[  282.536464][T11669] smc: net device bond0 applied user defined pnetid SYZ0
[  282.564632][T11671] loop1: detected capacity change from 0 to 2048
[  282.597805][T11671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.772307][T11679] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  282.798981][T11649] lo speed is unknown, defaulting to 1000
[  282.808573][T11649] lo speed is unknown, defaulting to 1000
[  282.851954][T11682] loop2: detected capacity change from 0 to 2048
[  282.861374][T11649] lo speed is unknown, defaulting to 1000
[  282.981660][T11682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.006149][T11682] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.2485: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  283.031851][T11688] atomic_op ffff88815c5b3528 conn xmit_atomic 0000000000000000
[  283.074164][T11682] EXT4-fs (loop2): Remounting filesystem read-only
[  283.158492][T11682] ªªªªª»: renamed from vlan1
[  283.186108][T11691] __nla_validate_parse: 3 callbacks suppressed
[  283.186127][T11691] netlink: 272 bytes leftover after parsing attributes in process `GPL'.
[  283.211074][T11693] loop0: detected capacity change from 0 to 128
[  283.230992][T11693] EXT4-fs: Ignoring removed nobh option
[  283.253683][T11693] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  283.296328][T11693] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.545196][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  283.628758][T11702] loop3: detected capacity change from 0 to 2048
[  283.653088][T11702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.743207][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.765034][T11701] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[  283.765034][T11701]    program syz.3.2491 not setting count and/or reply_len properly
[  284.015595][T11711] tun0: tun_chr_ioctl cmd 1074025675
[  284.020950][T11711] tun0: persist enabled
[  284.360501][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.385468][T11649] Process accounting resumed
[  284.491412][T11719] atomic_op ffff88811af3e528 conn xmit_atomic 0000000000000000
[  284.510672][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'.
[  284.519815][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'.
[  284.530338][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'.
[  284.573100][T11725] atomic_op ffff8881042ad528 conn xmit_atomic 0000000000000000
[  284.599764][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.639892][T11732] loop3: detected capacity change from 0 to 512
[  284.675625][T11732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  284.689034][T11732] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.712718][T11735] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  284.713080][ T5574] IPVS: starting estimator thread 0...
[  284.763287][T11732] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.2495: corrupted inode contents
[  284.776488][T11732] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #18: comm syz.3.2495: mark_inode_dirty error
[  284.793497][T11732] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.2495: corrupted inode contents
[  284.803431][T11741] loop0: detected capacity change from 0 to 2048
[  284.824406][T11732] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #18: comm syz.3.2495: mark_inode_dirty error
[  284.825541][T11744] netlink: 'syz.1.2504': attribute type 3 has an invalid length.
[  284.845653][T11739] IPVS: using max 2016 ests per chain, 100800 per kthread
[  284.863075][T11732] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #18: comm syz.3.2495: mark inode dirty (error -117)
[  284.867367][T11747] loop2: detected capacity change from 0 to 2048
[  284.879255][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'.
[  284.883732][T11741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.905765][T11732] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[  284.917690][T11741] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.2503: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  284.928032][T11747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.943172][T11741] EXT4-fs (loop0): Remounting filesystem read-only
[  284.992628][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  285.113490][T11761] netlink: 'syz.1.2507': attribute type 4 has an invalid length.
[  285.123699][T11761] infiniband s
z1: set down
[  285.128577][ T5586] lo speed is unknown, defaulting to 1000
[  285.134544][ T5586] lo speed is unknown, defaulting to 1000
[  285.348870][T11769] tmpfs: Unknown parameter 'nr_ino'
[  285.486867][T11773] bond0: entered promiscuous mode
[  285.498820][T11773] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  285.552113][T11773] bond0: left promiscuous mode
[  285.577824][T11780] atomic_op ffff88811af3e528 conn xmit_atomic 0000000000000000
[  285.809567][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.949969][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2517'.
[  286.004274][T11788] loop3: detected capacity change from 0 to 8192
[  286.097426][T11788]  loop3: p2 p3 p4
[  286.104906][T11788] loop3: p2 start 14935 is beyond EOD, truncated
[  286.111369][T11788] loop3: p3 size 196608 extends beyond EOD, truncated
[  286.122515][T11788] loop3: p4 start 4026530307 is beyond EOD, truncated
[  286.247084][   T29] kauditd_printk_skb: 688 callbacks suppressed
[  286.247161][   T29] audit: type=1400 audit(1733193559.487:57943): avc:  denied  { getopt } for  pid=11787 comm="syz.3.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  286.295712][   T29] audit: type=1400 audit(1733193559.506:57944): avc:  denied  { ioctl } for  pid=11787 comm="syz.3.2516" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  286.366909][   T29] audit: type=1400 audit(1733193559.600:57945): avc:  denied  { create } for  pid=11787 comm="syz.3.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  286.765258][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.807128][   T29] audit: type=1400 audit(1733193559.993:57946): avc:  denied  { create } for  pid=11800 comm="syz.4.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  286.827317][   T29] audit: type=1400 audit(1733193559.993:57947): avc:  denied  { sys_admin } for  pid=11800 comm="syz.4.2518" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  286.933001][   T29] audit: type=1400 audit(1733193560.124:57948): avc:  denied  { connect } for  pid=11807 comm="syz.1.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  286.953055][   T29] audit: type=1400 audit(1733193560.124:57949): avc:  denied  { name_connect } for  pid=11807 comm="syz.1.2520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  287.027923][T11808] loop1: detected capacity change from 0 to 512
[  287.051063][T11808] EXT4-fs: inline encryption not supported
[  287.067441][   T29] audit: type=1400 audit(1733193560.246:57950): avc:  denied  { setopt } for  pid=11812 comm="syz.3.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  287.093689][T11808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.107085][T11808] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.123750][   T29] audit: type=1400 audit(1733193560.302:57951): avc:  denied  { ioctl } for  pid=11812 comm="syz.3.2521" path="socket:[36321]" dev="sockfs" ino=36321 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  287.156754][T11818] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2521'.
[  287.172620][T11808] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.2520: corrupted inode contents
[  287.210736][T11808] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.2520: mark_inode_dirty error
[  287.282393][T11808] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.2520: corrupted inode contents
[  287.377490][   T29] audit: type=1400 audit(1733193560.536:57952): avc:  denied  { read } for  pid=11824 comm="syz.3.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  287.423895][T11808] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2520: mark_inode_dirty error
[  287.543277][T11830] atomic_op ffff888103188528 conn xmit_atomic 0000000000000000
[  287.735287][T11836] lo speed is unknown, defaulting to 1000
[  287.868854][T11838] loop3: detected capacity change from 0 to 128
[  287.877912][T11838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  287.890904][T11838] ext4 filesystem being mounted at /517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  287.995776][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.021460][T11846] atomic_op ffff88811622f528 conn xmit_atomic 0000000000000000
[  288.233272][T11836] lo speed is unknown, defaulting to 1000
[  288.257314][T11836] lo speed is unknown, defaulting to 1000
[  288.280050][T11850] loop0: detected capacity change from 0 to 2048
[  288.289407][T11836] lo speed is unknown, defaulting to 1000
[  288.337268][T11850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.957319][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  288.999285][T11862] IPVS: persistence engine module ip_vs_pe_@ not found
[  289.028768][T11865] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  289.083299][T11862] 9pnet: Could not find request transport: fdº€
Œ>pµfOPQ±}àvÄ9P	v<™ýe"÷vµŒ}}«ôc‰nÏgû9'óêˆèkRL#"ÈàUkp*ßU8½cŠª…9ŽKSW�î¼j
[  289.083299][T11862] ®Ç¯/T…0kcõ"¹•{¿4°ËÍ8©°vKÚn�©XAîFé�éz6�7VxJ<<}òûæTkëKñ„šDûá'§(^€cáÈèˆ]ö®[ތϵ$B�ÌŸ
[  289.083299][T11862] pùý
[  289.254675][T11874] ip6gre2: entered allmulticast mode
[  289.319669][T11874] futex_wake_op: syz.4.2536 tries to shift op by 144; fix this program
[  289.339979][T11876] loop1: detected capacity change from 0 to 128
[  289.362634][T11876] EXT4-fs: Ignoring removed nobh option
[  289.409906][T11874] xt_hashlimit: max too large, truncated to 1048576
[  289.473748][T11876] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  289.503276][T11876] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.707020][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  290.151578][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.252313][T11897] ALSA: seq fatal error: cannot create timer (-16)
[  290.305938][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2535'.
[  290.614233][T11922] atomic_op ffff888103180528 conn xmit_atomic 0000000000000000
[  290.637621][T11920] loop1: detected capacity change from 0 to 4096
[  290.660823][T11920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.693152][T11920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.727887][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'.
[  290.747612][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  290.756658][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  290.765842][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  290.918682][T11944] atomic_op ffff888103181928 conn xmit_atomic 0000000000000000
[  291.612377][T11967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2566'.
[  291.634836][   T29] kauditd_printk_skb: 378 callbacks suppressed
[  291.634853][   T29] audit: type=1400 audit(1733193564.524:58331): avc:  denied  { watch watch_reads } for  pid=11960 comm="syz.1.2564" path="/496" dev="tmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  291.726736][T11964] lo speed is unknown, defaulting to 1000
[  291.804684][   T29] audit: type=1326 audit(1733193564.608:58332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac286c6ee7 code=0x7ffc0000
[  291.828310][   T29] audit: type=1326 audit(1733193564.608:58333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac2866c129 code=0x7ffc0000
[  291.851941][   T29] audit: type=1326 audit(1733193564.608:58334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  291.875475][   T29] audit: type=1326 audit(1733193564.608:58335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac286c6ee7 code=0x7ffc0000
[  291.898999][   T29] audit: type=1326 audit(1733193564.608:58336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac2866c129 code=0x7ffc0000
[  291.922549][   T29] audit: type=1326 audit(1733193564.608:58337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  291.946278][   T29] audit: type=1326 audit(1733193564.618:58338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac286c6ee7 code=0x7ffc0000
[  291.969789][   T29] audit: type=1326 audit(1733193564.618:58339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac2866c129 code=0x7ffc0000
[  291.993313][   T29] audit: type=1326 audit(1733193564.618:58340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac286cff19 code=0x7ffc0000
[  292.059907][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2567'.
[  292.167609][T11964] lo speed is unknown, defaulting to 1000
[  292.175340][T11964] lo speed is unknown, defaulting to 1000
[  292.182086][T11964] lo speed is unknown, defaulting to 1000
[  292.188497][ T2164] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x21
[  292.411097][T11985] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  292.418610][T11985] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  292.427419][T11981] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  292.604172][T11989] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  292.772790][T11989] loop1: detected capacity change from 0 to 8192
[  292.779590][T11989] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000008'
[  292.959899][T12017] loop0: detected capacity change from 0 to 512
[  292.989321][T12017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.008057][T12017] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.105410][T12031] random: crng reseeded on system resumption
[  293.191218][T12017] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.238129][T12031] loop3: detected capacity change from 0 to 1024
[  293.268349][T12031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.321410][T12054] lo speed is unknown, defaulting to 1000
[  293.472748][T12054] lo speed is unknown, defaulting to 1000
[  293.484928][T12054] lo speed is unknown, defaulting to 1000
[  293.491400][T12054] lo speed is unknown, defaulting to 1000
[  293.944045][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.956532][T12076] loop2: detected capacity change from 0 to 1024
[  293.964034][T12076] EXT4-fs: Ignoring removed orlov option
[  294.018139][T12076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.267182][T12088] ==================================================================
[  294.275489][T12088] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data
[  294.283605][T12088] 
[  294.285949][T12088] write to 0xffff8881249dc6f4 of 4 bytes by task 12089 on cpu 0:
[  294.293697][T12088]  rxrpc_input_call_event+0x8ef/0x12e0
[  294.299304][T12088]  rxrpc_io_thread+0x30e/0x1fb0
[  294.304193][T12088]  kthread+0x1d1/0x210
[  294.308281][T12088]  ret_from_fork+0x4b/0x60
[  294.312723][T12088]  ret_from_fork_asm+0x1a/0x30
[  294.317507][T12088] 
[  294.319875][T12088] read to 0xffff8881249dc6f4 of 4 bytes by task 12088 on cpu 1:
[  294.327526][T12088]  rxrpc_send_data+0x889/0x1820
[  294.332521][T12088]  rxrpc_do_sendmsg+0xb92/0xc30
[  294.337421][T12088]  rxrpc_sendmsg+0x417/0x520
[  294.342039][T12088]  __sock_sendmsg+0x140/0x180
[  294.346757][T12088]  ____sys_sendmsg+0x312/0x410
[  294.351556][T12088]  __sys_sendmsg+0x19d/0x230
[  294.356191][T12088]  __x64_sys_sendmsg+0x46/0x50
[  294.360979][T12088]  x64_sys_call+0x2734/0x2dc0
[  294.365675][T12088]  do_syscall_64+0xc9/0x1c0
[  294.370208][T12088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.376151][T12088] 
[  294.378509][T12088] value changed: 0x00000000 -> 0x00000001
[  294.384245][T12088] 
[  294.386586][T12088] Reported by Kernel Concurrency Sanitizer on:
[  294.392748][T12088] CPU: 1 UID: 0 PID: 12088 Comm: syz.3.2590 Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  294.405019][T12088] Tainted: [W]=WARN
[  294.408828][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  294.418905][T12088] ==================================================================
[  294.574590][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'.
[  294.889000][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.