last executing test programs:

1m1.858320809s ago: executing program 2 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='nr_inodes=2'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x4}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)

1m1.77938599s ago: executing program 2 (id=30):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x11, &(0x7f0000000880)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc6a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$keyring(&(0x7f0000000780), 0xfffffffffffffffe, 0x0, 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
dup(r6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)

1m1.702005471s ago: executing program 2 (id=31):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"})
r5 = syz_open_pts(r4, 0x900)
r6 = dup3(r5, r4, 0x80000)
read(r6, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000380)={'ip_vti0\x00', <r7=>0x0, 0x7800, 0x20, 0x4, 0xffffff0f, {{0x31, 0x4, 0x2, 0x1, 0xc4, 0x65, 0x0, 0xc3, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x0, 0xb, "c91df7ac80f5392f38"}, @cipso={0x86, 0x2b, 0x3, [{0x6, 0x2}, {0x5, 0x6, "aa3914e0"}, {0x2, 0x12, "725ef091a458335cd55b8e8abcaf3510"}, {0x0, 0xb, "3a7e74b35dbded6a13"}]}, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x3, [0x7, 0x4, 0x0, 0x10, 0x4, 0x9, 0x9, 0x7, 0x4e]}, @timestamp={0x44, 0xc, 0x75, 0x0, 0x8, [0x1, 0x1]}, @timestamp_addr={0x44, 0x44, 0xfd, 0x1, 0xc, [{@loopback, 0x6}, {@local, 0x3ff}, {@rand_addr=0x64010101, 0x2}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@multicast1, 0xc}, {@local, 0x2}, {@remote, 0x2}]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2a}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004002)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0xc, 0x1, 0xa76d669c}, {0x74, 0x3, 0x57, 0x6}, {0x6, 0xfd, 0xbe, 0x7f}]})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000))
prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xfffffffff7ffffe9}, 0x18)
r11 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='cpu~=0|&!')
r12 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0x0)

1m0.812745716s ago: executing program 2 (id=43):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x9, 0x9, "fc1fea243dc780fa56b38145584f927350318ab5ed995ace92a6f17c01fb55047f240dda1596dfe1a6b119072b1e3d8411ad85a45706e396105659412a8889", 0x8}, 0x80, 0x0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x37, 0x1, 0x80, 0x0, 0x0, 0x7, 0x905a4, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x4, 0xa5d4}, 0x4858, 0x5, 0xfffffffd, 0x5, 0x4, 0x2020002, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x8)
unshare(0x22020600)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20)

1m0.374408133s ago: executing program 2 (id=48):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r2, 0x1)

1m0.273520335s ago: executing program 2 (id=52):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010855, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7fff}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xbfd, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000cd772f0ea055e2c56fc07abccaff3b20dcf9b3c1539a656853cd6a4b246e15acaebd7eaa9079cc94c61bde8d691b6bd56a3e967e8eb522d21c0da58fe5955494bfa89632eda2ebd9985189612e7249a1b439b40733d3ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES8=r3, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0xd)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

1m0.247788745s ago: executing program 32 (id=52):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010855, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7fff}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xbfd, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000cd772f0ea055e2c56fc07abccaff3b20dcf9b3c1539a656853cd6a4b246e15acaebd7eaa9079cc94c61bde8d691b6bd56a3e967e8eb522d21c0da58fe5955494bfa89632eda2ebd9985189612e7249a1b439b40733d3ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES8=r3, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0xd)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

52.648757308s ago: executing program 3 (id=128):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000b00)='kfree\x00', r0, 0x0, 0x3}, 0x18)
socket$key(0xf, 0x3, 0x2)
syz_read_part_table(0x5a0, &(0x7f0000001380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
link(0x0, &(0x7f00000005c0)='./file1\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)

51.525205986s ago: executing program 3 (id=143):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="5bebcadd20878cb0d8531ccbdac011e88a12caddaaddecbd8913bec392b2cf504db013a552faefa88296fe8e83840416de716d737923c065e8"], 0x1, 0x122e, &(0x7f0000002580)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x100004}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001010000000000000000100008500000002000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x9, 0x402500)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000240))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000640)={0x0, <r5=>r0, 'id0\x00'})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000540)="c3aa4c50c5d5fcfa141cdfbb33b80c2b33c66f14fdcaa335773e901f7f6c65bb62d5124d856dd3df26381c7e970148a8b249eec567f35d615631ff911904fa06d7a65b0b35b2fc45117da48ffecacc9b2e8bee66ef8304c0bc7f2cfd8011598afce38710a765caeb62285e1b6f6333bd", &(0x7f00000005c0)=@tcp6=r5, 0x1}, 0x20)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r6, &(0x7f0000000180)="e502", 0x2)
r7 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008000)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80800)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000003c0)=0x20003, 0x4)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

50.735820719s ago: executing program 3 (id=150):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
pwrite64(r0, &(0x7f0000000040)="08970e80e4225f703a49effebfeda502cfd82495a1fc27a59a5426f348c30ddd53cd13f8190f798b7146f18257924f88692ab16e840f8e06cc973360f7c32beb7cc8968631e4e57877c80fb3c7710f0f3b27428f55648e36832f5b373130e4de0f8d209644effc3cd069873b34b1b37b3151f9e53978f717824c48a950fbad023d0119b4a7ca5489071239c139e3447879a1a137e913d627da3040dfe4dbadf1d5561e95bec3b99468dba41e", 0xac, 0x693)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

50.68069581s ago: executing program 3 (id=152):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x9, 0x9, "fc1fea243dc780fa56b38145584f927350318ab5ed995ace92a6f17c01fb55047f240dda1596dfe1a6b119072b1e3d8411ad85a45706e396105659412a8889", 0x8}, 0x80, 0x0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x37, 0x1, 0x80, 0x0, 0x0, 0x7, 0x905a4, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x4, 0xa5d4}, 0x4858, 0x5, 0xfffffffd, 0x5, 0x4, 0x2020002, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x8)
unshare(0x22020600)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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")
r2 = socket(0x22, 0x4, 0x3)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)

50.399746944s ago: executing program 3 (id=157):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x48, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x48}}, 0x804)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x11284000, &(0x7f0000000000)="ca80d7a287f3c84b35725d69dd89b8c679e64bf46fc66dab9384dd5cd5645be386", 0x21, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="6027c0c19ea1910a4a8202abeacbdff9ff352530")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$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")
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r4, 0x80)
inotify_init()
timer_create(0x8, 0x0, &(0x7f0000bbdffc)=<r5=>0x0)
timer_gettime(r5, &(0x7f0000000000))

49.995846401s ago: executing program 3 (id=160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a01"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

49.930851022s ago: executing program 33 (id=160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a01"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

47.519321881s ago: executing program 1 (id=184):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

47.488762712s ago: executing program 1 (id=185):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"})
r5 = syz_open_pts(r4, 0x900)
r6 = dup3(r5, r4, 0x80000)
read(r6, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000380)={'ip_vti0\x00', <r7=>0x0, 0x7800, 0x20, 0x4, 0xffffff0f, {{0x32, 0x4, 0x2, 0x1, 0xc8, 0x65, 0x0, 0xc3, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x0, 0xb, "c91df7ac80f5392f38"}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0x4, "69f1"}, {0x6, 0x2}, {0x5, 0x6, "aa3914e0"}, {0x2, 0x12, "725ef091a458335cd55b8e8abcaf3510"}, {0x0, 0xb, "3a7e74b35dbded6a13"}]}, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x3, [0x7, 0x4, 0x0, 0x10, 0x4, 0x9, 0x9, 0x7, 0x4e]}, @timestamp={0x44, 0xc, 0x75, 0x0, 0x8, [0x1, 0x1]}, @timestamp_addr={0x44, 0x44, 0xfd, 0x1, 0xc, [{@loopback, 0x6}, {@local, 0x3ff}, {@rand_addr=0x64010101, 0x2}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@multicast1, 0xc}, {@local, 0x2}, {@remote, 0x2}]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2a}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004002)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0xc, 0x1, 0xa76d669c}, {0x74, 0x3, 0x57, 0x6}, {0x6, 0xfd, 0xbe, 0x7f}]})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xfffffffff7ffffe9}, 0x18)
r11 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='cpu~=0|&!')
r12 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0x0)

46.561102636s ago: executing program 1 (id=190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

46.248425652s ago: executing program 1 (id=191):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@i_version}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)

45.749033189s ago: executing program 1 (id=195):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x9, 0x9, "fc1fea243dc780fa56b38145584f927350318ab5ed995ace92a6f17c01fb55047f240dda1596dfe1a6b119072b1e3d8411ad85a45706e396105659412a8889", 0x8}, 0x80, 0x0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x37, 0x1, 0x80, 0x0, 0x0, 0x7, 0x905a4, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x4, 0xa5d4}, 0x4858, 0x5, 0xfffffffd, 0x5, 0x4, 0x2020002, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x8)
unshare(0x22020600)
r2 = socket(0x22, 0x4, 0x3)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)

45.578375112s ago: executing program 1 (id=199):
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

30.442337437s ago: executing program 34 (id=199):
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

3.944003576s ago: executing program 0 (id=640):
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x120ba, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getgid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
mq_open(0x0, 0x40, 0x9, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"})
r3 = syz_open_pts(r2, 0x40000)
dup3(r3, r2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/527], 0x290)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=r'])
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000078cd000000000000000001140004002001000000000000000000000000000106000340000100000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.041890241s ago: executing program 0 (id=648):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"})
r5 = syz_open_pts(r4, 0x900)
r6 = dup3(r5, r4, 0x80000)
read(r6, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000380)={'ip_vti0\x00', <r7=>0x0, 0x7800, 0x20, 0x4, 0xffffff0f, {{0x32, 0x4, 0x2, 0x1, 0xc8, 0x65, 0x0, 0xc3, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x0, 0xb, "c91df7ac80f5392f38"}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0x4, "69f1"}, {0x6, 0x2}, {0x5, 0x6, "aa3914e0"}, {0x2, 0x12, "725ef091a458335cd55b8e8abcaf3510"}, {0x0, 0xb, "3a7e74b35dbded6a13"}]}, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x3, [0x7, 0x4, 0x0, 0x10, 0x4, 0x9, 0x9, 0x7, 0x4e]}, @timestamp={0x44, 0xc, 0x75, 0x0, 0x8, [0x1, 0x1]}, @timestamp_addr={0x44, 0x44, 0xfd, 0x1, 0xc, [{@loopback, 0x6}, {@local, 0x3ff}, {@rand_addr=0x64010101, 0x2}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@multicast1, 0xc}, {@local, 0x2}, {@remote, 0x2}]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2a}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004002)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0xc, 0x1, 0xa76d669c}, {0x74, 0x3, 0x57, 0x6}, {0x6, 0xfd, 0xbe, 0x7f}]})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xfffffffff7ffffe9}, 0x18)
r11 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, 0x0)
r12 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0x0)

2.782738085s ago: executing program 6 (id=656):
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
brk(0x20ffc004)

2.707926526s ago: executing program 6 (id=657):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
socket$inet_icmp(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
syslog(0x4, 0xfffffffffffffffc, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")

1.536702075s ago: executing program 0 (id=660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000)

1.467482336s ago: executing program 0 (id=661):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000004080)=[{0x0}], 0x1}}], 0x1, 0x4)
sendto$inet(r1, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)

1.128055352s ago: executing program 5 (id=664):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90)

1.048905663s ago: executing program 5 (id=666):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x20b80, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
set_robust_list(0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000640)='rpc_call_rpcerror\x00'}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0xfe, 0x0, 0x0, 0x400, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={0x0, 0xc}, 0x420, 0x10000, 0x0, 0x9, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000700)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc2002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
set_tid_address(0x0)

869.277806ms ago: executing program 5 (id=669):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc10100006cff0000000000000000000000000000000100000000000000000000000000000001"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

743.766638ms ago: executing program 5 (id=670):
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x120ba, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getgid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
mq_open(0x0, 0x40, 0x9, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"})
r3 = syz_open_pts(r2, 0x40000)
dup3(r3, r2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/463], 0x290)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=r'])
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

663.816319ms ago: executing program 6 (id=672):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2f}, 0x94)

573.674191ms ago: executing program 6 (id=677):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180011000000000000000000000000009540000000000000d438c5e15d91952fc1517252a576fd23bf3acd9b9ba0d250841e83b06d18369413a0221e99f47ac4a5dbc6123ed8ef7fe9ba058cbdbdc15e3cf767cfe6943a51dc76d4cd0a5ae87d4b51c98f4540f31f3d79823e00eb08848794634661094d87cc0099158f96fefa198147089800000000000000000000000400000000000000000000ed564bf3e0e396b075e1000000000000000000000000d021f6d67287b0687b5ef7867d7e5649380ab91278495c6ad70bf1a34190c50187318d993288874ad229eeafcc411df82799f905fdd72136ffea8b4391e3020000e12d570b4ed5923bc5818e485adc62cce78b098c3d9b640ab34c187001deb2a35b9a88fcc9331491ef4c2db8b32e9c474dd2dd670a39ddf410bc6e227c786b832844896598b1d335199aca4e4f834b9ac6be97aca76528591240f9f06c788a7bdb50c1405e10f5fe5ae8b20d4525fe41525ef3e08b6d7efe40272f61b3e36198231c1386b8a8a623c50700000000000000bb31c0a8f61314993cbf500375310f11519f97584d8a927c3c252d3b6834eec7c214d96cde0e84239e64fff8c66d9a29668a13999f7e40922ca3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90)

520.618161ms ago: executing program 5 (id=678):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

492.027302ms ago: executing program 0 (id=679):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="02003d0183927ab7a8bb87956d287a62000004", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0x7, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800040000000052000000b2050035ac7e3ce800", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000953075025b5add84e96ee99f3228e879d417853a2955dde36eaa04fa8db5514a76b8ad5aeedf771346661114cd787850ecd63cbd1d0298e0e36df36327e9c23118df83661e87766763f54f8e645f3d77d79d42af6e2d6b5d25b07179694c11e861c806027346576788410313313e286a05144d2447c26c18b85c1b00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x100000000000000)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000))
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808de957082f832f0c28e7672ddf20000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000003dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

485.165712ms ago: executing program 6 (id=680):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

428.906343ms ago: executing program 5 (id=681):
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x120ba, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getgid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
mq_open(0x0, 0x40, 0x9, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"})
r3 = syz_open_pts(r2, 0x40000)
dup3(r3, r2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/463], 0x290)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000078cd000000000000000001140004002001000000000000000000000000000106000340000100000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

414.532763ms ago: executing program 6 (id=683):
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x120ba, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getgid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
mq_open(0x0, 0x40, 0x9, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"})
r3 = syz_open_pts(r2, 0x40000)
dup3(r3, r2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/528], 0x290)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=r'])
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000078cd000000000000000001140004002001000000000000000000000000000106000340000100000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

383.060323ms ago: executing program 4 (id=684):
pwritev2(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x200, 0xff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

357.550304ms ago: executing program 4 (id=686):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)

348.420224ms ago: executing program 7 (id=687):
syz_emit_ethernet(0x62, &(0x7f0000000380)=ANY=[@ANYBLOB="4f22ec2b1831aaaaaaaaaa000000000004007cf4cdbf60701d04a4d7e5135f1781eb3497c112a6968ec20cd8b736e6d2b9de8c3210044dd66b3f2737d237f1c24e8f66db24e1b01ee13f1be60c77d678674340c2809fe917e8370000000000000000"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=<r3=>r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x18, 0x31, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f00000031c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESDEC=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
stat(&(0x7f0000001c40)='./file0\x00', 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)

328.135265ms ago: executing program 4 (id=688):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@nolazytime}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nodioread_nolock}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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")

323.387255ms ago: executing program 7 (id=689):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x4, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

255.544916ms ago: executing program 0 (id=690):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000004080)=[{0x0}], 0x1}}], 0x1, 0x4)
sendto$inet(r1, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)

253.700506ms ago: executing program 4 (id=691):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)

183.476107ms ago: executing program 4 (id=692):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="02003d0183927ab7a8bb87956d287a62000004", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0x7, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800040000000052000000b2050035ac7e3ce800", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000953075025b5add84e96ee99f3228e879d417853a2955dde36eaa04fa8db5514a76b8ad5aeedf771346661114cd787850ecd63cbd1d0298e0e36df36327e9c23118df83661e87766763f54f8e645f3d77d79d42af6e2d6b5d25b07179694c11e861c806027346576788410313313e286a05144d2447c26c18b85c1b00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x100000000000000)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000))
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808de957082f832f0c28e7672ddf20000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000003dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

151.605848ms ago: executing program 7 (id=693):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

114.347408ms ago: executing program 7 (id=694):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xe, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

56.006709ms ago: executing program 7 (id=695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@nolazytime}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nodioread_nolock}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x4)

22.35644ms ago: executing program 7 (id=696):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x4, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=697):
pwritev2(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x200, 0xff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

kernel console output (not intermixed with test programs):

2.117545][ T3997] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   52.138840][ T3994] syz.5.137: attempt to access beyond end of device
[   52.138840][ T3994] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   52.152750][ T3994] Buffer I/O error on dev loop5, logical block 57847, async page read
[   52.172945][ T3998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.137'.
[   52.197805][ T3997] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   52.230912][ T3992] loop9: detected capacity change from 0 to 7
[   52.237392][ T3992] Buffer I/O error on dev loop9, logical block 0, async page read
[   52.263640][ T3992] Buffer I/O error on dev loop9, logical block 0, async page read
[   52.271969][ T3992]  loop9: unable to read partition table
[   52.299511][ T4009] loop4: detected capacity change from 0 to 1024
[   52.312059][ T4009] ext4: Unknown parameter 'fsuuid'
[   52.338323][ T3992] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   52.338323][ T3992] 
) failed (rc=-5)
[   52.379363][ T4012] loop5: detected capacity change from 0 to 512
[   52.382829][ T4017] netlink: 200 bytes leftover after parsing attributes in process `syz.0.135'.
[   52.412060][ T4012] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.140: bg 0: block 131: padding at end of block bitmap is not set
[   52.438611][ T4012] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   52.520027][ T4012] EXT4-fs (loop5): 1 truncate cleaned up
[   52.527617][ T4016] loop3: detected capacity change from 0 to 8192
[   52.559230][ T4012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.583983][ T4016] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.717792][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.020945][ T4041] vhci_hcd: invalid port number 96
[   53.026216][ T4041] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   53.047833][ T4016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2568 sclass=netlink_xfrm_socket pid=4016 comm=syz.3.143
[   53.172327][ T4046] netlink: 'syz.1.151': attribute type 4 has an invalid length.
[   53.199050][ T4046] netlink: 'syz.1.151': attribute type 4 has an invalid length.
[   53.243969][ T4048] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.152'.
[   53.292310][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.316309][ T4051] loop3: detected capacity change from 0 to 128
[   53.334338][ T4054] loop1: detected capacity change from 0 to 1024
[   53.343512][ T4051] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.357037][ T4051] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.392254][ T4051] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.407948][ T4054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   53.437044][ T4061] tmpfs: Unknown parameter 'context�'
[   53.446118][ T4061] Zero length message leads to an empty skb
[   53.454599][ T4054] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.554134][ T4054] FAULT_INJECTION: forcing a failure.
[   53.554134][ T4054] name failslab, interval 1, probability 0, space 0, times 0
[   53.567071][ T4054] CPU: 0 UID: 0 PID: 4054 Comm: syz.1.155 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   53.567158][ T4054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   53.567190][ T4054] Call Trace:
[   53.567195][ T4054]  <TASK>
[   53.567207][ T4054]  __dump_stack+0x1d/0x30
[   53.567228][ T4054]  dump_stack_lvl+0xe8/0x140
[   53.567296][ T4054]  dump_stack+0x15/0x1b
[   53.567395][ T4054]  should_fail_ex+0x265/0x280
[   53.567435][ T4054]  should_failslab+0x8c/0xb0
[   53.567462][ T4054]  kmem_cache_alloc_noprof+0x50/0x310
[   53.567486][ T4054]  ? __es_insert_extent+0x508/0xee0
[   53.567507][ T4054]  __es_insert_extent+0x508/0xee0
[   53.567581][ T4054]  ext4_es_insert_extent+0x435/0x1c10
[   53.567685][ T4054]  ext4_map_blocks+0x92b/0xd70
[   53.567798][ T4054]  ext4_alloc_file_blocks+0x28b/0x720
[   53.567843][ T4054]  ext4_zero_range+0x2dd/0x660
[   53.567928][ T4054]  ext4_fallocate+0x478/0x660
[   53.567973][ T4054]  vfs_fallocate+0x410/0x450
[   53.567999][ T4054]  __x64_sys_fallocate+0x7a/0xd0
[   53.568025][ T4054]  x64_sys_call+0x2b88/0x2fb0
[   53.568100][ T4054]  do_syscall_64+0xd2/0x200
[   53.568122][ T4054]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   53.568215][ T4054]  ? clear_bhb_loop+0x40/0x90
[   53.568238][ T4054]  ? clear_bhb_loop+0x40/0x90
[   53.568266][ T4054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.568293][ T4054] RIP: 0033:0x7f54a8b9e9a9
[   53.568312][ T4054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.568379][ T4054] RSP: 002b:00007f54a71ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   53.568412][ T4054] RAX: ffffffffffffffda RBX: 00007f54a8dc5fa0 RCX: 00007f54a8b9e9a9
[   53.568428][ T4054] RDX: 0000000000000800 RSI: 0000000000000010 RDI: 0000000000000004
[   53.568439][ T4054] RBP: 00007f54a71ff090 R08: 0000000000000000 R09: 0000000000000000
[   53.568452][ T4054] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[   53.568489][ T4054] R13: 0000000000000000 R14: 00007f54a8dc5fa0 R15: 00007ffef6b7c728
[   53.568513][ T4054]  </TASK>
[   53.568526][ T4054] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 2: comm syz.1.155: lblock 2 mapped to illegal pblock 2 (length 4)
[   53.861631][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   54.085019][   T12] bridge_slave_1: left allmulticast mode
[   54.090843][   T12] bridge_slave_1: left promiscuous mode
[   54.096655][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.242610][   T29] kauditd_printk_skb: 163 callbacks suppressed
[   54.242625][   T29] audit: type=1400 audit(1753624399.382:918): avc:  denied  { mounton } for  pid=4072 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   54.272329][   T12] bridge_slave_0: left allmulticast mode
[   54.278012][   T12] bridge_slave_0: left promiscuous mode
[   54.284412][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.342698][   T29] audit: type=1400 audit(1753624399.492:919): avc:  denied  { getopt } for  pid=4069 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   54.390154][   T29] audit: type=1400 audit(1753624399.562:920): avc:  denied  { read write } for  pid=4081 comm="syz.1.166" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   54.413651][   T29] audit: type=1400 audit(1753624399.562:921): avc:  denied  { open } for  pid=4081 comm="syz.1.166" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   54.438800][ T4084] netlink: 'syz.0.165': attribute type 4 has an invalid length.
[   54.495400][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.504212][   T29] audit: type=1326 audit(1753624399.592:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.5.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x0
[   54.504315][   T29] audit: type=1400 audit(1753624399.612:923): avc:  denied  { ioctl } for  pid=4081 comm="syz.1.166" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   54.551854][   T29] audit: type=1400 audit(1753624399.612:924): avc:  denied  { map } for  pid=4081 comm="syz.1.166" path="socket:[7259]" dev="sockfs" ino=7259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   54.561139][ T4087] netlink: 'syz.0.165': attribute type 4 has an invalid length.
[   54.583189][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.592719][   T12] bond0 (unregistering): Released all slaves
[   54.775646][ T4091] vhci_hcd: invalid port number 96
[   54.780866][ T4091] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   54.798334][ T4099] loop4: detected capacity change from 0 to 1024
[   54.804816][   T12] hsr_slave_0: left promiscuous mode
[   54.805341][ T4099] EXT4-fs: Ignoring removed i_version option
[   54.818524][ T4099] EXT4-fs: Ignoring removed oldalloc option
[   54.830885][   T12] hsr_slave_1: left promiscuous mode
[   54.841972][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.847627][ T4099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.862307][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.871675][    C0] hrtimer: interrupt took 27292 ns
[   54.917886][   T12] team0 (unregistering): Port device team_slave_1 removed
[   54.977691][   T12] team0 (unregistering): Port device team_slave_0 removed
[   55.225705][ T4118] FAULT_INJECTION: forcing a failure.
[   55.225705][ T4118] name failslab, interval 1, probability 0, space 0, times 0
[   55.238708][ T4118] CPU: 1 UID: 0 PID: 4118 Comm: syz.5.175 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   55.238739][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   55.238752][ T4118] Call Trace:
[   55.238757][ T4118]  <TASK>
[   55.238764][ T4118]  __dump_stack+0x1d/0x30
[   55.238794][ T4118]  dump_stack_lvl+0xe8/0x140
[   55.238882][ T4118]  dump_stack+0x15/0x1b
[   55.238898][ T4118]  should_fail_ex+0x265/0x280
[   55.238929][ T4118]  should_failslab+0x8c/0xb0
[   55.238954][ T4118]  kmem_cache_alloc_noprof+0x50/0x310
[   55.239046][ T4118]  ? fasync_alloc+0x26/0x30
[   55.239208][ T4118]  ? fcntl_setlease+0x82/0x300
[   55.239239][ T4118]  fasync_alloc+0x26/0x30
[   55.239320][ T4118]  fcntl_setlease+0x21a/0x300
[   55.239348][ T4118]  ? __rcu_read_unlock+0x4f/0x70
[   55.239372][ T4118]  do_fcntl+0x524/0xdf0
[   55.239396][ T4118]  ? selinux_file_fcntl+0x1b4/0x1e0
[   55.239463][ T4118]  __se_sys_fcntl+0xb1/0x120
[   55.239488][ T4118]  __x64_sys_fcntl+0x43/0x50
[   55.239565][ T4118]  x64_sys_call+0x1f1d/0x2fb0
[   55.239587][ T4118]  do_syscall_64+0xd2/0x200
[   55.239606][ T4118]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.239653][ T4118]  ? clear_bhb_loop+0x40/0x90
[   55.239675][ T4118]  ? clear_bhb_loop+0x40/0x90
[   55.239697][ T4118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.239736][ T4118] RIP: 0033:0x7f54882be9a9
[   55.239751][ T4118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.239834][ T4118] RSP: 002b:00007f5486927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   55.239930][ T4118] RAX: ffffffffffffffda RBX: 00007f54884e5fa0 RCX: 00007f54882be9a9
[   55.239943][ T4118] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000003
[   55.239955][ T4118] RBP: 00007f5486927090 R08: 0000000000000000 R09: 0000000000000000
[   55.239967][ T4118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.239978][ T4118] R13: 0000000000000000 R14: 00007f54884e5fa0 R15: 00007ffc22c6d398
[   55.240118][ T4118]  </TASK>
[   55.463626][ T4120] FAULT_INJECTION: forcing a failure.
[   55.463626][ T4120] name failslab, interval 1, probability 0, space 0, times 0
[   55.476670][ T4120] CPU: 0 UID: 0 PID: 4120 Comm: syz.1.176 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   55.476701][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   55.476717][ T4120] Call Trace:
[   55.476796][ T4120]  <TASK>
[   55.476805][ T4120]  __dump_stack+0x1d/0x30
[   55.476830][ T4120]  dump_stack_lvl+0xe8/0x140
[   55.476852][ T4120]  dump_stack+0x15/0x1b
[   55.476873][ T4120]  should_fail_ex+0x265/0x280
[   55.476911][ T4120]  should_failslab+0x8c/0xb0
[   55.476942][ T4120]  __kmalloc_noprof+0xa5/0x3e0
[   55.476971][ T4120]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[   55.477017][ T4120]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[   55.477100][ T4120]  ? selinux_capable+0x1f9/0x270
[   55.477136][ T4120]  genl_family_rcv_msg_doit+0x48/0x1b0
[   55.477317][ T4120]  ? security_capable+0x83/0x90
[   55.477351][ T4120]  ? ns_capable+0x7d/0xb0
[   55.477374][ T4120]  genl_rcv_msg+0x422/0x460
[   55.477397][ T4120]  ? __pfx_nl802154_pre_doit+0x10/0x10
[   55.477444][ T4120]  ? __pfx_nl802154_add_llsec_devkey+0x10/0x10
[   55.477466][ T4120]  ? __pfx_nl802154_post_doit+0x10/0x10
[   55.477523][ T4120]  netlink_rcv_skb+0x123/0x220
[   55.477563][ T4120]  ? __pfx_genl_rcv_msg+0x10/0x10
[   55.477672][ T4120]  genl_rcv+0x28/0x40
[   55.477695][ T4120]  netlink_unicast+0x5a8/0x680
[   55.477805][ T4120]  netlink_sendmsg+0x58b/0x6b0
[   55.477904][ T4120]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.477932][ T4120]  __sock_sendmsg+0x142/0x180
[   55.477965][ T4120]  ____sys_sendmsg+0x31e/0x4e0
[   55.477986][ T4120]  ___sys_sendmsg+0x17b/0x1d0
[   55.478028][ T4120]  __x64_sys_sendmsg+0xd4/0x160
[   55.478111][ T4120]  x64_sys_call+0x2999/0x2fb0
[   55.478136][ T4120]  do_syscall_64+0xd2/0x200
[   55.478229][ T4120]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.478261][ T4120]  ? clear_bhb_loop+0x40/0x90
[   55.478281][ T4120]  ? clear_bhb_loop+0x40/0x90
[   55.478302][ T4120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.478321][ T4120] RIP: 0033:0x7f54a8b9e9a9
[   55.478353][ T4120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.478369][ T4120] RSP: 002b:00007f54a71ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.478387][ T4120] RAX: ffffffffffffffda RBX: 00007f54a8dc5fa0 RCX: 00007f54a8b9e9a9
[   55.478461][ T4120] RDX: 0000000020000000 RSI: 0000200000002f40 RDI: 0000000000000004
[   55.478476][ T4120] RBP: 00007f54a71ff090 R08: 0000000000000000 R09: 0000000000000000
[   55.478519][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.478530][ T4120] R13: 0000000000000000 R14: 00007f54a8dc5fa0 R15: 00007ffef6b7c728
[   55.478549][ T4120]  </TASK>
[   55.803009][ T4072] chnl_net:caif_netlink_parms(): no params data found
[   55.820295][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.853591][ T4130] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.894472][ T4134] netlink: 'syz.1.178': attribute type 4 has an invalid length.
[   55.931568][ T4135] __nla_validate_parse: 1 callbacks suppressed
[   55.931583][ T4135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'.
[   55.953576][ T4130] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.962644][ T4131] netlink: 'syz.1.178': attribute type 4 has an invalid length.
[   56.016921][ T4130] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.048991][ T4072] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.056147][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.068607][ T4072] bridge_slave_0: entered allmulticast mode
[   56.080598][ T4072] bridge_slave_0: entered promiscuous mode
[   56.091911][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.099102][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.106394][ T4072] bridge_slave_1: entered allmulticast mode
[   56.112963][ T4072] bridge_slave_1: entered promiscuous mode
[   56.124806][ T4130] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.151330][ T4072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.153080][ T4146] vhci_hcd: invalid port number 96
[   56.163137][ T4072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.165755][ T4146] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   56.193973][ T4072] team0: Port device team_slave_0 added
[   56.205764][ T4072] team0: Port device team_slave_1 added
[   56.227125][ T4072] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.234320][ T4072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.260714][ T4072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.272996][ T4072] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.280021][ T4072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.306117][ T4072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.321658][ T4130] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.331759][ T4150] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   56.331864][ T4149] IPVS: stopping master sync thread 4150 ...
[   56.362108][ T4130] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.387982][ T4072] hsr_slave_0: entered promiscuous mode
[   56.394436][ T4072] hsr_slave_1: entered promiscuous mode
[   56.402037][ T4072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.410094][ T4072] Cannot create hsr debugfs directory
[   56.419416][ T4130] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.443557][ T4130] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.488090][   T29] audit: type=1326 audit(1753624401.662:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.1.185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54a8b9e9a9 code=0x0
[   56.551650][ T4072] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   56.561699][ T4072] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   56.573740][ T4072] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   56.584107][ T4072] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   56.670071][ T4072] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.697006][ T4072] 8021q: adding VLAN 0 to HW filter on device team0
[   56.711077][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.718215][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.734099][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.741278][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.790408][   T29] audit: type=1326 audit(1753624401.962:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ec8e9a9 code=0x7ffc0000
[   56.814027][   T29] audit: type=1326 audit(1753624401.962:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ec8e9a9 code=0x7ffc0000
[   56.830864][ T4167] loop0: detected capacity change from 0 to 1024
[   56.864877][ T4167] EXT4-fs: Ignoring removed bh option
[   56.873420][ T4167] EXT4-fs: inline encryption not supported
[   56.879418][ T4167] ext4: Unknown parameter 'smackfsroot'
[   56.890142][ T4167] rdma_op ffff888103fdfd80 conn xmit_rdma 0000000000000000
[   56.976580][ T4072] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.001456][ T4167] loop0: detected capacity change from 0 to 2048
[   57.022825][ T4167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.162010][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.250909][ T4187] vhci_hcd: invalid port number 96
[   57.256170][ T4187] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   57.399441][ T4193] loop5: detected capacity change from 0 to 512
[   57.435204][ T4193] EXT4-fs (loop5): orphan cleanup on readonly fs
[   57.621004][ T4193] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.186: bg 0: block 248: padding at end of block bitmap is not set
[   57.658652][ T4202] loop1: detected capacity change from 0 to 512
[   57.676488][ T4193] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.186: Failed to acquire dquot type 1
[   57.693734][ T4202] EXT4-fs: Ignoring removed i_version option
[   57.709163][ T4202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   57.721049][ T4193] EXT4-fs (loop5): 1 truncate cleaned up
[   57.731381][ T4193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   57.745159][ T4202] EXT4-fs (loop1): orphan cleanup on readonly fs
[   57.752914][ T4202] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.191: bg 0: block 248: padding at end of block bitmap is not set
[   57.767969][ T4202] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.191: Failed to acquire dquot type 1
[   57.782037][ T4202] EXT4-fs (loop1): 1 truncate cleaned up
[   57.788646][ T4202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   57.872132][ T4072] veth0_vlan: entered promiscuous mode
[   57.882805][ T4072] veth1_vlan: entered promiscuous mode
[   57.904342][ T4072] veth0_macvtap: entered promiscuous mode
[   57.910309][ T4202] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   58.015629][ T4072] veth1_macvtap: entered promiscuous mode
[   58.030571][ T4202] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   58.039063][ T4202] ext4 filesystem being remounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.050772][ T4072] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.064441][ T4202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'.
[   58.075414][ T4072] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.089545][ T4072] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.098706][ T4072] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.107446][ T4072] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.116260][ T4072] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.139715][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.189431][ T4214] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.195'.
[   58.231685][ T4214] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.195'.
[   58.233441][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'.
[   58.318210][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.376468][ T4223] xt_CT: You must specify a L4 protocol and not use inversions on it
[   58.480506][ T4227] loop0: detected capacity change from 0 to 512
[   58.575383][ T4227] EXT4-fs (loop0): orphan cleanup on readonly fs
[   58.583410][ T4227] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.198: bg 0: block 248: padding at end of block bitmap is not set
[   58.608766][ T4229] 9pnet: Could not find request transport: rmx
[   58.616277][ T4227] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.198: Failed to acquire dquot type 1
[   58.636044][ T4227] EXT4-fs (loop0): 1 truncate cleaned up
[   58.644297][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   58.831842][ T4233] vhci_hcd: invalid port number 96
[   58.837061][ T4233] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   59.191524][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.370097][ T4246] FAULT_INJECTION: forcing a failure.
[   59.370097][ T4246] name failslab, interval 1, probability 0, space 0, times 0
[   59.382829][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.0.204 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   59.382942][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   59.383000][ T4246] Call Trace:
[   59.383008][ T4246]  <TASK>
[   59.383017][ T4246]  __dump_stack+0x1d/0x30
[   59.383039][ T4246]  dump_stack_lvl+0xe8/0x140
[   59.383080][ T4246]  dump_stack+0x15/0x1b
[   59.383101][ T4246]  should_fail_ex+0x265/0x280
[   59.383140][ T4246]  should_failslab+0x8c/0xb0
[   59.383165][ T4246]  __kmalloc_noprof+0xa5/0x3e0
[   59.383212][ T4246]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[   59.383279][ T4246]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[   59.383345][ T4246]  genl_family_rcv_msg_doit+0x48/0x1b0
[   59.383378][ T4246]  ? security_capable+0x83/0x90
[   59.383405][ T4246]  ? ns_capable+0x7d/0xb0
[   59.383476][ T4246]  genl_rcv_msg+0x422/0x460
[   59.383509][ T4246]  ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10
[   59.383553][ T4246]  netlink_rcv_skb+0x123/0x220
[   59.383633][ T4246]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.383663][ T4246]  genl_rcv+0x28/0x40
[   59.383689][ T4246]  netlink_unicast+0x5a8/0x680
[   59.383795][ T4246]  netlink_sendmsg+0x58b/0x6b0
[   59.383830][ T4246]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.383899][ T4246]  __sock_sendmsg+0x142/0x180
[   59.383932][ T4246]  ____sys_sendmsg+0x31e/0x4e0
[   59.383957][ T4246]  ___sys_sendmsg+0x17b/0x1d0
[   59.384067][ T4246]  __x64_sys_sendmsg+0xd4/0x160
[   59.384094][ T4246]  x64_sys_call+0x2999/0x2fb0
[   59.384115][ T4246]  do_syscall_64+0xd2/0x200
[   59.384132][ T4246]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.384193][ T4246]  ? clear_bhb_loop+0x40/0x90
[   59.384224][ T4246]  ? clear_bhb_loop+0x40/0x90
[   59.384252][ T4246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.384279][ T4246] RIP: 0033:0x7fda0ec8e9a9
[   59.384295][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.384391][ T4246] RSP: 002b:00007fda0d2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.384414][ T4246] RAX: ffffffffffffffda RBX: 00007fda0eeb5fa0 RCX: 00007fda0ec8e9a9
[   59.384437][ T4246] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004
[   59.384449][ T4246] RBP: 00007fda0d2f7090 R08: 0000000000000000 R09: 0000000000000000
[   59.384460][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.384471][ T4246] R13: 0000000000000000 R14: 00007fda0eeb5fa0 R15: 00007ffff3839c68
[   59.384490][ T4246]  </TASK>
[   59.666814][   T29] kauditd_printk_skb: 116 callbacks suppressed
[   59.666830][   T29] audit: type=1400 audit(1753624404.842:1038): avc:  denied  { ioctl } for  pid=4243 comm="syz.6.206" path="socket:[7657]" dev="sockfs" ino=7657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   59.719266][ T4252] netlink: 36 bytes leftover after parsing attributes in process `syz.6.206'.
[   59.728594][ T4252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.206'.
[   59.737935][ T4252] netlink: 36 bytes leftover after parsing attributes in process `syz.6.206'.
[   59.810464][ T4252] netlink: 36 bytes leftover after parsing attributes in process `syz.6.206'.
[   59.836659][ T4260] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.210'.
[   59.848938][ T4260] loop0: detected capacity change from 0 to 128
[   59.857448][ T4260] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.872216][ T4260] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.919221][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.969047][ T4268] FAULT_INJECTION: forcing a failure.
[   59.969047][ T4268] name failslab, interval 1, probability 0, space 0, times 0
[   59.981965][ T4268] CPU: 1 UID: 0 PID: 4268 Comm: syz.0.211 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   59.982030][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   59.982042][ T4268] Call Trace:
[   59.982049][ T4268]  <TASK>
[   59.982057][ T4268]  __dump_stack+0x1d/0x30
[   59.982077][ T4268]  dump_stack_lvl+0xe8/0x140
[   59.982096][ T4268]  dump_stack+0x15/0x1b
[   59.982196][ T4268]  should_fail_ex+0x265/0x280
[   59.982229][ T4268]  should_failslab+0x8c/0xb0
[   59.982301][ T4268]  kmem_cache_alloc_node_noprof+0x57/0x320
[   59.982376][ T4268]  ? __alloc_skb+0x101/0x320
[   59.982412][ T4268]  ? __rtnl_unlock+0x95/0xb0
[   59.982448][ T4268]  __alloc_skb+0x101/0x320
[   59.982536][ T4268]  netlink_ack+0xfd/0x500
[   59.982583][ T4268]  netlink_rcv_skb+0x192/0x220
[   59.982697][ T4268]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   59.982727][ T4268]  rtnetlink_rcv+0x1c/0x30
[   59.982752][ T4268]  netlink_unicast+0x5a8/0x680
[   59.982795][ T4268]  netlink_sendmsg+0x58b/0x6b0
[   59.982824][ T4268]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.982916][ T4268]  __sock_sendmsg+0x142/0x180
[   59.982956][ T4268]  ____sys_sendmsg+0x31e/0x4e0
[   59.982978][ T4268]  ___sys_sendmsg+0x17b/0x1d0
[   59.983011][ T4268]  __x64_sys_sendmsg+0xd4/0x160
[   59.983074][ T4268]  x64_sys_call+0x2999/0x2fb0
[   59.983101][ T4268]  do_syscall_64+0xd2/0x200
[   59.983119][ T4268]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.983195][ T4268]  ? clear_bhb_loop+0x40/0x90
[   59.983222][ T4268]  ? clear_bhb_loop+0x40/0x90
[   59.983250][ T4268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.983276][ T4268] RIP: 0033:0x7fda0ec8e9a9
[   59.983290][ T4268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.983327][ T4268] RSP: 002b:00007fda0d2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.983349][ T4268] RAX: ffffffffffffffda RBX: 00007fda0eeb5fa0 RCX: 00007fda0ec8e9a9
[   59.983365][ T4268] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[   59.983381][ T4268] RBP: 00007fda0d2f7090 R08: 0000000000000000 R09: 0000000000000000
[   59.983395][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.983406][ T4268] R13: 0000000000000000 R14: 00007fda0eeb5fa0 R15: 00007ffff3839c68
[   59.983425][ T4268]  </TASK>
[   59.984974][ T4265] loop5: detected capacity change from 0 to 2048
[   60.241596][ T4265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.254532][ T4270] 9pnet: Could not find request transport: rmx
[   60.351379][ T4265] loop9: detected capacity change from 0 to 7
[   60.384252][ T4265] Buffer I/O error on dev loop9, logical block 0, async page read
[   60.409160][ T4265] Buffer I/O error on dev loop9, logical block 0, async page read
[   60.417304][ T4265]  loop9: unable to read partition table
[   60.467212][ T4265] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   60.467212][ T4265] 
) failed (rc=-5)
[   60.677030][ T4298] loop0: detected capacity change from 0 to 128
[   60.694969][ T4298] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.746026][ T4298] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.764600][ T4300] loop4: detected capacity change from 0 to 2048
[   60.821138][ T4300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.849621][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.874437][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.912382][ T4300] loop9: detected capacity change from 0 to 7
[   60.941910][ T4300] Buffer I/O error on dev loop9, logical block 0, async page read
[   60.978809][ T4315] netlink: 'syz.6.226': attribute type 4 has an invalid length.
[   61.000515][ T4300] Buffer I/O error on dev loop9, logical block 0, async page read
[   61.008593][ T4300]  loop9: unable to read partition table
[   61.029744][ T4322] netlink: 'syz.6.226': attribute type 4 has an invalid length.
[   61.051575][ T4300] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   61.051575][ T4300] 
) failed (rc=-5)
[   61.067952][ T4318] __nla_validate_parse: 5 callbacks suppressed
[   61.067971][ T4318] netlink: 200 bytes leftover after parsing attributes in process `syz.4.221'.
[   61.118756][   T29] audit: type=1400 audit(1753624406.292:1039): avc:  denied  { read } for  pid=4319 comm="syz.5.228" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   61.142273][   T29] audit: type=1400 audit(1753624406.292:1040): avc:  denied  { open } for  pid=4319 comm="syz.5.228" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   61.165897][   T29] audit: type=1400 audit(1753624406.292:1041): avc:  denied  { ioctl } for  pid=4319 comm="syz.5.228" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   61.227048][ T4329] FAULT_INJECTION: forcing a failure.
[   61.227048][ T4329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.240185][ T4329] CPU: 0 UID: 0 PID: 4329 Comm: syz.5.231 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   61.240272][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   61.240286][ T4329] Call Trace:
[   61.240293][ T4329]  <TASK>
[   61.240301][ T4329]  __dump_stack+0x1d/0x30
[   61.240331][ T4329]  dump_stack_lvl+0xe8/0x140
[   61.240355][ T4329]  dump_stack+0x15/0x1b
[   61.240424][ T4329]  should_fail_ex+0x265/0x280
[   61.240464][ T4329]  should_fail+0xb/0x20
[   61.240498][ T4329]  should_fail_usercopy+0x1a/0x20
[   61.240601][ T4329]  _copy_from_iter+0xcf/0xe40
[   61.240672][ T4329]  ? __build_skb_around+0x1a0/0x200
[   61.240712][ T4329]  ? __alloc_skb+0x223/0x320
[   61.240752][ T4329]  netlink_sendmsg+0x471/0x6b0
[   61.240777][ T4329]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.240808][ T4329]  __sock_sendmsg+0x142/0x180
[   61.240840][ T4329]  ____sys_sendmsg+0x31e/0x4e0
[   61.240911][ T4329]  ___sys_sendmsg+0x17b/0x1d0
[   61.240951][ T4329]  __x64_sys_sendmsg+0xd4/0x160
[   61.240982][ T4329]  x64_sys_call+0x2999/0x2fb0
[   61.241009][ T4329]  do_syscall_64+0xd2/0x200
[   61.241088][ T4329]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   61.241114][ T4329]  ? clear_bhb_loop+0x40/0x90
[   61.241134][ T4329]  ? clear_bhb_loop+0x40/0x90
[   61.241179][ T4329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.241206][ T4329] RIP: 0033:0x7f54882be9a9
[   61.241225][ T4329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.241247][ T4329] RSP: 002b:00007f5486927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.241270][ T4329] RAX: ffffffffffffffda RBX: 00007f54884e5fa0 RCX: 00007f54882be9a9
[   61.241285][ T4329] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[   61.241300][ T4329] RBP: 00007f5486927090 R08: 0000000000000000 R09: 0000000000000000
[   61.241366][ T4329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.241381][ T4329] R13: 0000000000000000 R14: 00007f54884e5fa0 R15: 00007ffc22c6d398
[   61.241404][ T4329]  </TASK>
[   61.449568][   T29] audit: type=1400 audit(1753624406.402:1042): avc:  denied  { connect } for  pid=4326 comm="syz.6.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   61.576371][ T4337] loop0: detected capacity change from 0 to 2048
[   61.606921][ T4337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.620033][ T4335] vhci_hcd: invalid port number 96
[   61.625298][ T4335] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   61.685645][ T4337] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[   61.892886][ T4345] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.236'.
[   61.920892][ T4345] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.236'.
[   61.944162][ T4345] loop6: detected capacity change from 0 to 128
[   61.974517][ T4346] 9pnet: Could not find request transport: rmx
[   61.976806][ T4345] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.001810][ T4345] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.061436][ T4072] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.143841][ T4350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.241978][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.334202][   T29] audit: type=1400 audit(1753624407.512:1043): avc:  denied  { firmware_load } for  pid=4354 comm="syz.4.239" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   62.421279][ T4359] FAULT_INJECTION: forcing a failure.
[   62.421279][ T4359] name failslab, interval 1, probability 0, space 0, times 0
[   62.434032][ T4359] CPU: 0 UID: 0 PID: 4359 Comm: syz.6.241 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   62.434121][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.434137][ T4359] Call Trace:
[   62.434145][ T4359]  <TASK>
[   62.434154][ T4359]  __dump_stack+0x1d/0x30
[   62.434181][ T4359]  dump_stack_lvl+0xe8/0x140
[   62.434206][ T4359]  dump_stack+0x15/0x1b
[   62.434227][ T4359]  should_fail_ex+0x265/0x280
[   62.434278][ T4359]  should_failslab+0x8c/0xb0
[   62.434304][ T4359]  kmem_cache_alloc_noprof+0x50/0x310
[   62.434336][ T4359]  ? skb_clone+0x151/0x1f0
[   62.434361][ T4359]  skb_clone+0x151/0x1f0
[   62.434451][ T4359]  __netlink_deliver_tap+0x2c9/0x500
[   62.434489][ T4359]  netlink_unicast+0x653/0x680
[   62.434531][ T4359]  netlink_sendmsg+0x58b/0x6b0
[   62.434559][ T4359]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.434656][ T4359]  __sock_sendmsg+0x142/0x180
[   62.434689][ T4359]  ____sys_sendmsg+0x31e/0x4e0
[   62.434731][ T4359]  ___sys_sendmsg+0x17b/0x1d0
[   62.434773][ T4359]  __x64_sys_sendmsg+0xd4/0x160
[   62.434855][ T4359]  x64_sys_call+0x2999/0x2fb0
[   62.434940][ T4359]  do_syscall_64+0xd2/0x200
[   62.434996][ T4359]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   62.435031][ T4359]  ? clear_bhb_loop+0x40/0x90
[   62.435058][ T4359]  ? clear_bhb_loop+0x40/0x90
[   62.435086][ T4359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.435108][ T4359] RIP: 0033:0x7fdb1919e9a9
[   62.435128][ T4359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.435146][ T4359] RSP: 002b:00007fdb17807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.435164][ T4359] RAX: ffffffffffffffda RBX: 00007fdb193c5fa0 RCX: 00007fdb1919e9a9
[   62.435176][ T4359] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000006
[   62.435188][ T4359] RBP: 00007fdb17807090 R08: 0000000000000000 R09: 0000000000000000
[   62.435260][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.435271][ T4359] R13: 0000000000000000 R14: 00007fdb193c5fa0 R15: 00007ffc50400928
[   62.435331][ T4359]  </TASK>
[   62.838319][ T4372] FAULT_INJECTION: forcing a failure.
[   62.838319][ T4372] name failslab, interval 1, probability 0, space 0, times 0
[   62.851033][ T4372] CPU: 1 UID: 0 PID: 4372 Comm: syz.5.246 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   62.851069][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.851114][ T4372] Call Trace:
[   62.851120][ T4372]  <TASK>
[   62.851128][ T4372]  __dump_stack+0x1d/0x30
[   62.851148][ T4372]  dump_stack_lvl+0xe8/0x140
[   62.851169][ T4372]  dump_stack+0x15/0x1b
[   62.851194][ T4372]  should_fail_ex+0x265/0x280
[   62.851286][ T4372]  should_failslab+0x8c/0xb0
[   62.851313][ T4372]  kmem_cache_alloc_node_noprof+0x57/0x320
[   62.851366][ T4372]  ? __alloc_skb+0x101/0x320
[   62.851404][ T4372]  __alloc_skb+0x101/0x320
[   62.851457][ T4372]  ? avc_has_perm+0xd3/0x150
[   62.851546][ T4372]  alloc_skb_with_frags+0x7d/0x470
[   62.851585][ T4372]  ? __rcu_read_unlock+0x34/0x70
[   62.851677][ T4372]  ? bpf_prog_8f4d9728dfbc680e+0x32/0x32
[   62.851693][ T4372]  ? is_bpf_text_address+0x141/0x160
[   62.851731][ T4372]  ? __rcu_read_unlock+0x34/0x70
[   62.851776][ T4372]  sock_alloc_send_pskb+0x43a/0x4f0
[   62.851806][ T4372]  tun_get_user+0x8d3/0x2500
[   62.851980][ T4372]  ? avc_has_perm+0xd3/0x150
[   62.852014][ T4372]  ? ref_tracker_alloc+0x1f2/0x2f0
[   62.852052][ T4372]  ? selinux_file_permission+0x2f0/0x320
[   62.852083][ T4372]  tun_chr_write_iter+0x15e/0x210
[   62.852128][ T4372]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   62.852158][ T4372]  vfs_write+0x4a0/0x8e0
[   62.852257][ T4372]  ksys_write+0xda/0x1a0
[   62.852287][ T4372]  __x64_sys_write+0x40/0x50
[   62.852359][ T4372]  x64_sys_call+0x2cdd/0x2fb0
[   62.852479][ T4372]  do_syscall_64+0xd2/0x200
[   62.852497][ T4372]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   62.852527][ T4372]  ? clear_bhb_loop+0x40/0x90
[   62.852553][ T4372]  ? clear_bhb_loop+0x40/0x90
[   62.852642][ T4372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.852731][ T4372] RIP: 0033:0x7f54882bd45f
[   62.852749][ T4372] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   62.852771][ T4372] RSP: 002b:00007f5486927000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   62.852789][ T4372] RAX: ffffffffffffffda RBX: 00007f54884e5fa0 RCX: 00007f54882bd45f
[   62.852800][ T4372] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[   62.852859][ T4372] RBP: 00007f5486927090 R08: 0000000000000000 R09: 0000000000000000
[   62.852871][ T4372] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001
[   62.852884][ T4372] R13: 0000000000000000 R14: 00007f54884e5fa0 R15: 00007ffc22c6d398
[   62.852909][ T4372]  </TASK>
[   63.167969][   T29] audit: type=1326 audit(1753624408.332:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.5.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   63.176387][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.191404][   T29] audit: type=1326 audit(1753624408.332:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.5.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   63.221253][ T4374] netlink: 'syz.6.247': attribute type 4 has an invalid length.
[   63.223936][   T29] audit: type=1326 audit(1753624408.342:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.5.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   63.252167][ T4374] netlink: 'syz.6.247': attribute type 4 has an invalid length.
[   63.254998][   T29] audit: type=1326 audit(1753624408.342:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.5.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   63.330918][ T4380] FAULT_INJECTION: forcing a failure.
[   63.330918][ T4380] name failslab, interval 1, probability 0, space 0, times 0
[   63.343999][ T4380] CPU: 0 UID: 0 PID: 4380 Comm: syz.0.248 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   63.344031][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.344131][ T4380] Call Trace:
[   63.344137][ T4380]  <TASK>
[   63.344144][ T4380]  __dump_stack+0x1d/0x30
[   63.344168][ T4380]  dump_stack_lvl+0xe8/0x140
[   63.344189][ T4380]  dump_stack+0x15/0x1b
[   63.344207][ T4380]  should_fail_ex+0x265/0x280
[   63.344285][ T4380]  should_failslab+0x8c/0xb0
[   63.344320][ T4380]  kmem_cache_alloc_node_noprof+0x57/0x320
[   63.344408][ T4380]  ? __alloc_skb+0x101/0x320
[   63.344443][ T4380]  __alloc_skb+0x101/0x320
[   63.344476][ T4380]  netlink_alloc_large_skb+0xba/0xf0
[   63.344512][ T4380]  netlink_sendmsg+0x3cf/0x6b0
[   63.344559][ T4380]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.344582][ T4380]  __sock_sendmsg+0x142/0x180
[   63.344611][ T4380]  ____sys_sendmsg+0x31e/0x4e0
[   63.344636][ T4380]  ___sys_sendmsg+0x17b/0x1d0
[   63.344673][ T4380]  __x64_sys_sendmsg+0xd4/0x160
[   63.344786][ T4380]  x64_sys_call+0x2999/0x2fb0
[   63.344809][ T4380]  do_syscall_64+0xd2/0x200
[   63.344830][ T4380]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   63.344941][ T4380]  ? clear_bhb_loop+0x40/0x90
[   63.345010][ T4380]  ? clear_bhb_loop+0x40/0x90
[   63.345034][ T4380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.345117][ T4380] RIP: 0033:0x7fda0ec8e9a9
[   63.345142][ T4380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.345161][ T4380] RSP: 002b:00007fda0d2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.345181][ T4380] RAX: ffffffffffffffda RBX: 00007fda0eeb5fa0 RCX: 00007fda0ec8e9a9
[   63.345194][ T4380] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[   63.345207][ T4380] RBP: 00007fda0d2f7090 R08: 0000000000000000 R09: 0000000000000000
[   63.345262][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.345347][ T4380] R13: 0000000000000000 R14: 00007fda0eeb5fa0 R15: 00007ffff3839c68
[   63.345368][ T4380]  </TASK>
[   63.558739][ T4361] loop4: detected capacity change from 0 to 512
[   63.587608][ T4361] EXT4-fs (loop4): orphan cleanup on readonly fs
[   63.595818][ T4361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.242: bg 0: block 248: padding at end of block bitmap is not set
[   63.613722][ T4361] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.242: Failed to acquire dquot type 1
[   63.626780][ T4361] EXT4-fs (loop4): 1 truncate cleaned up
[   63.634701][ T4361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.665232][ T4388] loop6: detected capacity change from 0 to 512
[   63.673772][ T4388] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   63.686446][ T4388] EXT4-fs (loop6): failed to initialize system zone (-117)
[   63.697023][ T4388] EXT4-fs (loop6): mount failed
[   63.702886][ T4393] loop5: detected capacity change from 0 to 764
[   63.716289][ T4393] Symlink component flag not implemented
[   63.722169][ T4393] Symlink component flag not implemented
[   63.725255][ T4388] netlink: 'syz.6.253': attribute type 10 has an invalid length.
[   63.732333][ T4393] Symlink component flag not implemented (128)
[   63.741938][ T4393] Symlink component flag not implemented (122)
[   63.822196][ T4388] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   63.871501][ T4397] 9pnet: Could not find request transport: rmx
[   63.917118][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.196039][ T4406] loop4: detected capacity change from 0 to 512
[   64.295422][ T4406] EXT4-fs (loop4): orphan cleanup on readonly fs
[   64.303470][ T4406] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.257: bg 0: block 248: padding at end of block bitmap is not set
[   64.320608][ T4406] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.257: Failed to acquire dquot type 1
[   64.334623][ T4406] EXT4-fs (loop4): 1 truncate cleaned up
[   64.341830][ T4406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   64.620204][ T4414] FAULT_INJECTION: forcing a failure.
[   64.620204][ T4414] name failslab, interval 1, probability 0, space 0, times 0
[   64.633216][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: syz.5.260 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   64.633253][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   64.633265][ T4414] Call Trace:
[   64.633272][ T4414]  <TASK>
[   64.633281][ T4414]  __dump_stack+0x1d/0x30
[   64.633413][ T4414]  dump_stack_lvl+0xe8/0x140
[   64.633439][ T4414]  dump_stack+0x15/0x1b
[   64.633459][ T4414]  should_fail_ex+0x265/0x280
[   64.633519][ T4414]  should_failslab+0x8c/0xb0
[   64.633557][ T4414]  kmem_cache_alloc_node_noprof+0x57/0x320
[   64.633669][ T4414]  ? __alloc_skb+0x101/0x320
[   64.633702][ T4414]  __alloc_skb+0x101/0x320
[   64.633774][ T4414]  netlink_alloc_large_skb+0xba/0xf0
[   64.633806][ T4414]  netlink_sendmsg+0x3cf/0x6b0
[   64.633827][ T4414]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.633849][ T4414]  __sock_sendmsg+0x142/0x180
[   64.633906][ T4414]  ____sys_sendmsg+0x31e/0x4e0
[   64.634012][ T4414]  ___sys_sendmsg+0x17b/0x1d0
[   64.634048][ T4414]  __x64_sys_sendmsg+0xd4/0x160
[   64.634070][ T4414]  x64_sys_call+0x2999/0x2fb0
[   64.634107][ T4414]  do_syscall_64+0xd2/0x200
[   64.634125][ T4414]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   64.634212][ T4414]  ? clear_bhb_loop+0x40/0x90
[   64.634233][ T4414]  ? clear_bhb_loop+0x40/0x90
[   64.634294][ T4414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.634315][ T4414] RIP: 0033:0x7f54882be9a9
[   64.634332][ T4414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.634355][ T4414] RSP: 002b:00007f5486927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   64.634378][ T4414] RAX: ffffffffffffffda RBX: 00007f54884e5fa0 RCX: 00007f54882be9a9
[   64.634392][ T4414] RDX: 0000000000040050 RSI: 0000200000000280 RDI: 0000000000000003
[   64.634473][ T4414] RBP: 00007f5486927090 R08: 0000000000000000 R09: 0000000000000000
[   64.634486][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.634559][ T4414] R13: 0000000000000000 R14: 00007f54884e5fa0 R15: 00007ffc22c6d398
[   64.634584][ T4414]  </TASK>
[   64.635792][ T4412] loop0: detected capacity change from 0 to 2048
[   64.922795][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.986856][ T4412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.011530][ T4425] vhci_hcd: invalid port number 96
[   65.016751][ T4425] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   65.071246][ T4412] loop9: detected capacity change from 0 to 7
[   65.077630][ T4412] Buffer I/O error on dev loop9, logical block 0, async page read
[   65.086648][ T4412] Buffer I/O error on dev loop9, logical block 0, async page read
[   65.094582][ T4412]  loop9: unable to read partition table
[   65.108517][ T4412] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   65.108517][ T4412] 
) failed (rc=-5)
[   65.173823][ T4412] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[   65.205946][   T29] kauditd_printk_skb: 74 callbacks suppressed
[   65.205963][   T29] audit: type=1400 audit(1753624410.382:1118): avc:  denied  { mount } for  pid=4427 comm="syz.6.265" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   65.325541][   T29] audit: type=1400 audit(1753624410.502:1119): avc:  denied  { create } for  pid=4430 comm="syz.6.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.360380][   T29] audit: type=1400 audit(1753624410.502:1120): avc:  denied  { setopt } for  pid=4430 comm="syz.6.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.462108][   T29] audit: type=1400 audit(1753624410.642:1121): avc:  denied  { setattr } for  pid=4437 comm="syz.6.268" name="file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   65.655926][ T4441] 9pnet: Could not find request transport: rmx
[   65.788459][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.827919][ T4448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.856969][ T4450] netlink: 'syz.6.273': attribute type 4 has an invalid length.
[   65.925061][   T29] audit: type=1326 audit(1753624411.102:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.5.274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x0
[   65.931038][ T4457] vhci_hcd: invalid port number 96
[   65.953229][ T4457] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   65.973427][ T4448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.020754][   T29] audit: type=1326 audit(1753624411.152:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.6.276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x0
[   66.094381][ T4448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.162363][ T4448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.267548][ T4448] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.270451][   T29] audit: type=1400 audit(1753624411.412:1124): avc:  denied  { write } for  pid=4467 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   66.298696][ T4448] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.308678][ T4470] Illegal XDP return value 4294967274 on prog  (id 195) dev syz_tun, expect packet loss!
[   66.322868][ T4448] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.339618][   T29] audit: type=1400 audit(1753624411.462:1125): avc:  denied  { accept } for  pid=4467 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   66.349610][ T4448] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.624680][   T29] audit: type=1400 audit(1753624411.802:1126): avc:  denied  { create } for  pid=4473 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.682080][   T29] audit: type=1400 audit(1753624411.862:1127): avc:  denied  { write } for  pid=4473 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.716999][ T4475] loop0: detected capacity change from 0 to 2048
[   66.733958][ T4475] EXT4-fs (loop0): #clusters per group too big: 151011328
[   66.994367][ T4495] netlink: 'syz.5.293': attribute type 4 has an invalid length.
[   67.395825][ T4505] 9pnet: Could not find request transport: rmx
[   67.456812][ T4511] loop5: detected capacity change from 0 to 512
[   67.543035][ T4511] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   67.574602][ T4511] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   67.589252][ T4514] loop0: detected capacity change from 0 to 1024
[   67.596310][ T4511] EXT4-fs (loop5): 1 truncate cleaned up
[   67.605081][ T4514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.614347][ T4511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.025776][ T4532] loop4: detected capacity change from 0 to 512
[   68.041833][ T4532] EXT4-fs: Ignoring removed oldalloc option
[   68.054883][ T4532] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.295: Parent and EA inode have the same ino 15
[   68.243777][ T4532] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.295: Parent and EA inode have the same ino 15
[   68.306489][ T4532] EXT4-fs (loop4): 1 orphan inode deleted
[   68.485522][ T4532] tipc: Started in network mode
[   68.490589][ T4532] tipc: Node identity 42288cc4cb5b, cluster identity 4711
[   68.497847][ T4532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.543911][ T4543] syzkaller0: entered promiscuous mode
[   68.549462][ T4543] syzkaller0: entered allmulticast mode
[   68.614559][ T4532] tipc: Resetting bearer <eth:syzkaller0>
[   68.639607][ T4531] tipc: Resetting bearer <eth:syzkaller0>
[   68.672754][ T4531] tipc: Disabling bearer <eth:syzkaller0>
[   69.051575][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'.
[   69.174775][ T4572] vhci_hcd: invalid port number 96
[   69.180032][ T4572] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   69.202001][ T4578] FAULT_INJECTION: forcing a failure.
[   69.202001][ T4578] name failslab, interval 1, probability 0, space 0, times 0
[   69.214813][ T4578] CPU: 1 UID: 0 PID: 4578 Comm: syz.6.317 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   69.214849][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   69.214926][ T4578] Call Trace:
[   69.214933][ T4578]  <TASK>
[   69.214942][ T4578]  __dump_stack+0x1d/0x30
[   69.214968][ T4578]  dump_stack_lvl+0xe8/0x140
[   69.214993][ T4578]  dump_stack+0x15/0x1b
[   69.215027][ T4578]  should_fail_ex+0x265/0x280
[   69.215057][ T4578]  ? ip_setup_cork+0x176/0x410
[   69.215081][ T4578]  should_failslab+0x8c/0xb0
[   69.215108][ T4578]  __kmalloc_cache_noprof+0x4c/0x320
[   69.215221][ T4578]  ip_setup_cork+0x176/0x410
[   69.215253][ T4578]  ip_append_data+0xf8/0x130
[   69.215282][ T4578]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   69.215376][ T4578]  udp_sendmsg+0x282/0x13b0
[   69.215401][ T4578]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   69.215430][ T4578]  ? __rcu_read_unlock+0x4f/0x70
[   69.215535][ T4578]  ? __pfx_udp_sendmsg+0x10/0x10
[   69.215556][ T4578]  inet_sendmsg+0xac/0xd0
[   69.215573][ T4578]  __sock_sendmsg+0x102/0x180
[   69.215607][ T4578]  ____sys_sendmsg+0x345/0x4e0
[   69.215640][ T4578]  ___sys_sendmsg+0x17b/0x1d0
[   69.215679][ T4578]  __sys_sendmmsg+0x178/0x300
[   69.215719][ T4578]  __x64_sys_sendmmsg+0x57/0x70
[   69.215745][ T4578]  x64_sys_call+0x2f2f/0x2fb0
[   69.215773][ T4578]  do_syscall_64+0xd2/0x200
[   69.215860][ T4578]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.215902][ T4578]  ? clear_bhb_loop+0x40/0x90
[   69.215924][ T4578]  ? clear_bhb_loop+0x40/0x90
[   69.216029][ T4578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.216052][ T4578] RIP: 0033:0x7fdb1919e9a9
[   69.216067][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.216116][ T4578] RSP: 002b:00007fdb17807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   69.216137][ T4578] RAX: ffffffffffffffda RBX: 00007fdb193c5fa0 RCX: 00007fdb1919e9a9
[   69.216148][ T4578] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005
[   69.216174][ T4578] RBP: 00007fdb17807090 R08: 0000000000000000 R09: 0000000000000000
[   69.216190][ T4578] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001
[   69.216205][ T4578] R13: 0000000000000000 R14: 00007fdb193c5fa0 R15: 00007ffc50400928
[   69.216230][ T4578]  </TASK>
[   69.571484][ T4585] vhci_hcd: invalid port number 96
[   69.576905][ T4585] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   69.814487][ T4596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.324'.
[   69.891396][ T4600] loop5: detected capacity change from 0 to 512
[   69.904186][ T4600] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.326: Failed to acquire dquot type 1
[   69.920453][ T4600] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.326: corrupted inode contents
[   69.933509][ T4600] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.326: mark_inode_dirty error
[   69.959499][ T4600] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.326: corrupted inode contents
[   69.981569][ T4600] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.326: mark_inode_dirty error
[   70.001203][ T4600] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.326: corrupted inode contents
[   70.015899][ T4600] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[   70.024778][ T4600] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.326: corrupted inode contents
[   70.038946][ T4607] vhci_hcd: invalid port number 96
[   70.044762][ T4607] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   70.064124][ T4600] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.326: mark_inode_dirty error
[   70.077505][ T4600] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[   70.087306][ T4600] EXT4-fs (loop5): 1 truncate cleaned up
[   70.094404][ T4600] EXT4-fs mount: 4 callbacks suppressed
[   70.094495][ T4600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.134679][ T4600] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.222849][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.228774][ T4612] xt_CT: You must specify a L4 protocol and not use inversions on it
[   70.372070][   T29] kauditd_printk_skb: 301 callbacks suppressed
[   70.372088][   T29] audit: type=1326 audit(1753624415.552:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   70.402734][   T29] audit: type=1326 audit(1753624415.552:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   70.518083][   T29] audit: type=1326 audit(1753624415.692:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f548825ab89 code=0x7ffc0000
[   70.542478][   T29] audit: type=1326 audit(1753624415.692:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   70.566045][   T29] audit: type=1326 audit(1753624415.692:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   70.655544][ T4635] loop5: detected capacity change from 0 to 2048
[   70.663682][   T29] audit: type=1326 audit(1753624415.702:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   70.687189][   T29] audit: type=1326 audit(1753624415.712:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   70.710594][   T29] audit: type=1326 audit(1753624415.712:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   70.733976][   T29] audit: type=1326 audit(1753624415.712:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   70.757856][   T29] audit: type=1326 audit(1753624415.712:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   70.912350][ T4637] vhci_hcd: invalid port number 96
[   70.917582][ T4637] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   71.138193][ T4648] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.217920][ T4648] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.228561][ T4649] vhci_hcd: invalid port number 96
[   71.234042][ T4649] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   71.321033][ T4648] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.411621][ T4648] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.538994][ T4648] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.593926][ T4648] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.654446][ T4648] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.703852][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.345'.
[   71.735287][ T4648] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.106961][ T4664] netlink: 'syz.4.347': attribute type 4 has an invalid length.
[   72.147019][ T4664] netlink: 'syz.4.347': attribute type 4 has an invalid length.
[   72.407283][ T4673] netlink: 'syz.0.351': attribute type 4 has an invalid length.
[   72.420375][ T4673] netlink: 'syz.0.351': attribute type 4 has an invalid length.
[   72.430757][ T4671] vhci_hcd: invalid port number 96
[   72.436071][ T4671] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   72.445996][ T4677] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.535936][ T4680] loop0: detected capacity change from 0 to 512
[   72.559200][ T4680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   72.575625][ T4682] capability: warning: `syz.4.355' uses 32-bit capabilities (legacy support in use)
[   72.609063][ T4680] EXT4-fs (loop0): 1 truncate cleaned up
[   72.628112][ T4680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.677638][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.863113][ T4702] loop5: detected capacity change from 0 to 2048
[   73.313816][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.366'.
[   73.672534][ T4725] loop0: detected capacity change from 0 to 512
[   73.684155][ T4725] EXT4-fs (loop0): orphan cleanup on readonly fs
[   73.692858][ T4725] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.365: bg 0: block 248: padding at end of block bitmap is not set
[   73.708133][ T4725] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.365: Failed to acquire dquot type 1
[   73.751672][ T4725] EXT4-fs (loop0): 1 truncate cleaned up
[   73.760917][ T4725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.031798][ T4741] loop4: detected capacity change from 0 to 128
[   74.046253][   T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.064358][ T4741] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.091072][ T4741] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   74.121066][ T4739] loop6: detected capacity change from 0 to 2048
[   74.133976][   T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.172724][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.213561][ T4739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.264087][   T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.308981][ T4739] loop9: detected capacity change from 0 to 7
[   74.326102][ T4720] chnl_net:caif_netlink_parms(): no params data found
[   74.336151][ T4739] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.379630][   T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.380380][ T4739] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.397558][ T4739]  loop9: unable to read partition table
[   74.404496][ T4750] netlink: 200 bytes leftover after parsing attributes in process `syz.6.373'.
[   74.460486][ T4739] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   74.460486][ T4739] 
) failed (rc=-5)
[   74.524217][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.531582][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.559031][ T4720] bridge_slave_0: entered allmulticast mode
[   74.575755][ T4720] bridge_slave_0: entered promiscuous mode
[   74.599455][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.606677][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.637486][ T4720] bridge_slave_1: entered allmulticast mode
[   74.648073][ T4720] bridge_slave_1: entered promiscuous mode
[   74.663115][   T51] bridge_slave_1: left allmulticast mode
[   74.668829][   T51] bridge_slave_1: left promiscuous mode
[   74.674665][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.691819][   T51] bridge_slave_0: left allmulticast mode
[   74.697615][   T51] bridge_slave_0: left promiscuous mode
[   74.703423][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.765014][ T4758] loop5: detected capacity change from 0 to 2048
[   74.786406][ T4758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.919617][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.938915][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.997774][   T51] bond0 (unregistering): Released all slaves
[   75.057997][ T4758] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[   75.076034][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.089702][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.099577][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.116298][   T51] hsr_slave_0: left promiscuous mode
[   75.134958][   T51] hsr_slave_1: left promiscuous mode
[   75.143476][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.151335][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.165472][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.173079][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.291652][   T51] veth1_macvtap: left promiscuous mode
[   75.297194][   T51] veth0_macvtap: left promiscuous mode
[   75.320814][   T51] veth1_vlan: left promiscuous mode
[   75.326173][   T51] veth0_vlan: left promiscuous mode
[   75.455531][ T4772] loop0: detected capacity change from 0 to 1024
[   75.465491][ T4772] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   75.475334][ T4772] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   75.484968][ T4772] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   75.496501][ T4772] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.379: unexpected bad inode w/o EXT4_IGET_BAD
[   75.510051][ T4772] EXT4-fs (loop0): no journal found
[   75.515337][ T4772] EXT4-fs (loop0): can't get journal size
[   75.522614][ T4772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   75.738585][   T51] team0 (unregistering): Port device team_slave_1 removed
[   75.785740][   T51] team0 (unregistering): Port device team_slave_0 removed
[   76.299972][ T4720] team0: Port device team_slave_0 added
[   76.333508][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.345795][ T4720] team0: Port device team_slave_1 added
[   76.358066][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.413350][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.420425][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.446534][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.465004][   T29] kauditd_printk_skb: 31 callbacks suppressed
[   76.465018][   T29] audit: type=1326 audit(1753624421.642:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.495528][   T29] audit: type=1326 audit(1753624421.642:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.507511][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.382'.
[   76.536253][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.543303][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.569368][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.608844][ T4785] loop4: detected capacity change from 0 to 128
[   76.639063][   T29] audit: type=1326 audit(1753624421.682:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.662512][   T29] audit: type=1326 audit(1753624421.682:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.685910][   T29] audit: type=1326 audit(1753624421.682:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.709347][   T29] audit: type=1326 audit(1753624421.682:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.732844][   T29] audit: type=1326 audit(1753624421.682:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.756202][   T29] audit: type=1326 audit(1753624421.682:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.779572][   T29] audit: type=1326 audit(1753624421.682:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.803002][   T29] audit: type=1326 audit(1753624421.682:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   76.849316][ T4720] hsr_slave_0: entered promiscuous mode
[   76.856199][ T4720] hsr_slave_1: entered promiscuous mode
[   76.862222][ T4720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.869846][ T4720] Cannot create hsr debugfs directory
[   76.936102][ T4785] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.966938][ T4785] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.981457][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.004547][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.060566][ T4720] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   77.082948][ T4797] vhci_hcd: invalid port number 96
[   77.088243][ T4797] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   77.156522][ T4720] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   77.171486][ T4720] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   77.180122][ T4792] 9pnet: Could not find request transport: rmx
[   77.259099][ T4806] loop0: detected capacity change from 0 to 1024
[   77.268305][ T4806] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   77.278187][ T4806] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   77.287831][ T4806] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   77.301094][ T4806] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.387: unexpected bad inode w/o EXT4_IGET_BAD
[   77.314665][ T4806] EXT4-fs (loop0): no journal found
[   77.319898][ T4806] EXT4-fs (loop0): can't get journal size
[   77.327415][ T4806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.457316][ T4809] 9pnet: Could not find request transport: rmx
[   77.483453][ T4810] loop5: detected capacity change from 0 to 2048
[   77.528115][ T4810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.681856][ T4810] loop9: detected capacity change from 0 to 7
[   77.704600][ T4810] Buffer I/O error on dev loop9, logical block 0, async page read
[   77.732054][ T4810] Buffer I/O error on dev loop9, logical block 0, async page read
[   77.740046][ T4810]  loop9: unable to read partition table
[   78.059145][ T4810] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   78.059145][ T4810] 
) failed (rc=-5)
[   78.107949][ T4819] loop6: detected capacity change from 0 to 2048
[   78.128087][ T4819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.146310][ T4720] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   78.158619][ T4813] netlink: 200 bytes leftover after parsing attributes in process `syz.5.390'.
[   78.172659][ T4819] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[   78.239584][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.252756][ T4720] 8021q: adding VLAN 0 to HW filter on device team0
[   78.276878][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   78.287491][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.721941][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.724196][  T168] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.738083][  T168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.749657][  T168] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.756777][  T168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.827093][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.877760][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.047204][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.125518][ T4720] veth0_vlan: entered promiscuous mode
[   79.136878][ T4720] veth1_vlan: entered promiscuous mode
[   79.164888][ T4720] veth0_macvtap: entered promiscuous mode
[   79.181326][ T4720] veth1_macvtap: entered promiscuous mode
[   79.199561][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.215400][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.228591][ T4720] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.237678][ T4720] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.246486][ T4720] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.255309][ T4720] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.261178][ T4868] 9pnet: Could not find request transport: rmx
[   79.295313][ T4871] loop6: detected capacity change from 0 to 512
[   79.303197][ T4871] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   79.315076][ T4871] EXT4-fs (loop6): failed to initialize system zone (-117)
[   79.323083][ T4871] EXT4-fs (loop6): mount failed
[   79.364829][ T4877] xt_CT: You must specify a L4 protocol and not use inversions on it
[   79.605466][ T4887] loop6: detected capacity change from 0 to 512
[   79.613401][ T4887] EXT4-fs (loop6): orphan cleanup on readonly fs
[   79.622380][ T4887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.403: bg 0: block 248: padding at end of block bitmap is not set
[   79.649755][ T4888] loop7: detected capacity change from 0 to 2048
[   79.657404][ T4887] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.403: Failed to acquire dquot type 1
[   79.671492][ T4887] EXT4-fs (loop6): 1 truncate cleaned up
[   79.687456][ T4888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.727497][ T4887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.782339][ T4888] loop9: detected capacity change from 0 to 7
[   79.788636][ T4888] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.798029][ T4888] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.806635][ T4888]  loop9: unable to read partition table
[   79.846120][ T4888] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   79.846120][ T4888] 
) failed (rc=-5)
[   79.883854][ T4895] netlink: 200 bytes leftover after parsing attributes in process `syz.7.407'.
[   80.293257][ T4918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.311784][ T4917] vhci_hcd: invalid port number 96
[   80.315594][ T4918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.317036][ T4917] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   80.598799][ T4935] loop0: detected capacity change from 0 to 512
[   80.630565][ T4935] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   80.662916][ T4935] EXT4-fs (loop0): 1 truncate cleaned up
[   80.669060][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.748026][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.752175][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.782326][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.935996][ T4957] loop0: detected capacity change from 0 to 512
[   80.957700][ T4957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   80.974401][ T4957] EXT4-fs (loop0): 1 truncate cleaned up
[   80.985954][ T4957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.016862][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.065791][ T4971] loop5: detected capacity change from 0 to 512
[   81.089498][ T4971] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   81.108854][ T4971] EXT4-fs (loop5): 1 truncate cleaned up
[   81.199611][ T4971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.225063][ T4975] loop0: detected capacity change from 0 to 2048
[   81.235663][ T4975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.258177][ T4975] loop9: detected capacity change from 0 to 7
[   81.264627][ T4975] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.291654][ T4975] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.300721][ T4975]  loop9: unable to read partition table
[   81.346603][ T4984] netlink: 'syz.6.440': attribute type 4 has an invalid length.
[   81.398519][ T4975] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   81.398519][ T4975] 
) failed (rc=-5)
[   81.418641][ T4985] loop7: detected capacity change from 0 to 512
[   81.439138][ T4984] netlink: 'syz.6.440': attribute type 4 has an invalid length.
[   81.448793][ T4985] EXT4-fs (loop7): orphan cleanup on readonly fs
[   81.475630][ T4985] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.438: bg 0: block 248: padding at end of block bitmap is not set
[   81.507864][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.572946][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.442'.
[   81.588861][ T4975] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[   81.599815][ T4985] __quota_error: 240 callbacks suppressed
[   81.599832][ T4985] Quota error (device loop7): write_blk: dquota write failed
[   81.613229][ T4985] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[   81.623244][ T4985] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.438: Failed to acquire dquot type 1
[   81.641852][ T4990] netlink: 'syz.5.441': attribute type 4 has an invalid length.
[   81.693409][ T4985] EXT4-fs (loop7): 1 truncate cleaned up
[   81.705472][ T4985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.745417][ T4993] loop6: detected capacity change from 0 to 2048
[   81.779975][ T4990] netlink: 'syz.5.441': attribute type 4 has an invalid length.
[   81.896127][ T4993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.064873][ T4993] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[   82.209753][ T5003] netlink: 'syz.5.446': attribute type 4 has an invalid length.
[   82.259296][ T5003] netlink: 'syz.5.446': attribute type 4 has an invalid length.
[   82.306406][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.364445][   T29] audit: type=1326 audit(1753624427.542:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.413618][   T29] audit: type=1326 audit(1753624427.542:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.437233][   T29] audit: type=1326 audit(1753624427.542:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.461192][   T29] audit: type=1326 audit(1753624427.542:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.484869][   T29] audit: type=1326 audit(1753624427.542:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.508896][   T29] audit: type=1326 audit(1753624427.542:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.533317][   T29] audit: type=1326 audit(1753624427.542:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.556663][   T29] audit: type=1326 audit(1753624427.552:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.5.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54882be9a9 code=0x7ffc0000
[   82.602284][ T5012] loop0: detected capacity change from 0 to 512
[   82.630521][ T5012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   82.671491][ T5012] EXT4-fs (loop0): 1 truncate cleaned up
[   82.678796][ T5012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.743238][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.779286][ T5020] loop0: detected capacity change from 0 to 512
[   82.798950][ T5020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   82.830254][ T5020] EXT4-fs (loop0): failed to initialize system zone (-117)
[   82.852778][ T5020] EXT4-fs (loop0): mount failed
[   82.890497][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.056360][ T5027] vhci_hcd: invalid port number 96
[   83.062290][ T5027] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   83.113208][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.541414][ T5043] loop0: detected capacity change from 0 to 2048
[   83.943265][ T5059] loop6: detected capacity change from 0 to 512
[   84.025609][ T5060] 9pnet: Could not find request transport: rmx
[   84.090447][ T5059] EXT4-fs (loop6): orphan cleanup on readonly fs
[   84.141679][ T5059] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.464: bg 0: block 248: padding at end of block bitmap is not set
[   84.276216][ T5059] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.464: Failed to acquire dquot type 1
[   84.307919][ T5059] EXT4-fs (loop6): 1 truncate cleaned up
[   84.315539][ T5059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.701894][ T5076] loop4: detected capacity change from 0 to 512
[   84.731219][ T5076] EXT4-fs (loop4): orphan cleanup on readonly fs
[   84.739018][ T5076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.468: bg 0: block 248: padding at end of block bitmap is not set
[   84.754347][ T5076] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.468: Failed to acquire dquot type 1
[   84.769394][ T5076] EXT4-fs (loop4): 1 truncate cleaned up
[   84.973221][ T5076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.146234][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.155723][ T5093] loop0: detected capacity change from 0 to 512
[   85.164141][ T5093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.222152][ T5093] EXT4-fs (loop0): 1 truncate cleaned up
[   85.228221][ T5093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.253900][ T5100] loop7: detected capacity change from 0 to 1024
[   85.262566][ T5099] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.286913][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.308356][ T5100] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   85.318312][ T5100] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   85.332687][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.369994][ T5100] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   85.445004][ T5100] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #5: comm syz.7.479: unexpected bad inode w/o EXT4_IGET_BAD
[   85.467690][ T5099] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.532166][ T5100] EXT4-fs (loop7): no journal found
[   85.537452][ T5100] EXT4-fs (loop7): can't get journal size
[   85.552598][ T5100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.635671][ T5109] loop0: detected capacity change from 0 to 1024
[   85.851218][ T5109] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   85.861110][ T5109] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   85.870813][ T5109] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   85.882078][ T5109] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.480: unexpected bad inode w/o EXT4_IGET_BAD
[   85.895817][ T5109] EXT4-fs (loop0): no journal found
[   85.901126][ T5109] EXT4-fs (loop0): can't get journal size
[   85.908483][ T5109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.948068][ T5099] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.027206][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.426608][ T5099] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.568488][ T5099] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.619261][ T5099] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.684974][ T5099] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.741589][ T5099] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.908162][ T5121] loop5: detected capacity change from 0 to 2048
[   87.092205][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.186822][ T5123] loop6: detected capacity change from 0 to 512
[   87.202366][ T5123] EXT4-fs (loop6): orphan cleanup on readonly fs
[   87.210177][ T5123] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.484: bg 0: block 248: padding at end of block bitmap is not set
[   87.231113][ T5123] __quota_error: 58 callbacks suppressed
[   87.231133][ T5123] Quota error (device loop6): write_blk: dquota write failed
[   87.244329][ T5123] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[   87.254971][ T5123] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.484: Failed to acquire dquot type 1
[   87.269958][ T5123] EXT4-fs (loop6): 1 truncate cleaned up
[   87.276933][ T5123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.351666][ T5126] xt_CT: You must specify a L4 protocol and not use inversions on it
[   87.518786][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.642812][ T5137] vhci_hcd: invalid port number 96
[   87.648099][ T5137] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   87.680405][ T5142] loop7: detected capacity change from 0 to 1024
[   87.688524][ T5142] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   87.698332][ T5142] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   87.708071][ T5142] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   87.720817][ T5142] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #5: comm syz.7.489: unexpected bad inode w/o EXT4_IGET_BAD
[   87.734580][ T5142] EXT4-fs (loop7): no journal found
[   87.739842][ T5142] EXT4-fs (loop7): can't get journal size
[   87.794383][ T5142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.920436][   T29] audit: type=1326 audit(1753624433.092:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   87.947152][ T5143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.006509][   T29] audit: type=1326 audit(1753624433.142:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.030592][   T29] audit: type=1326 audit(1753624433.142:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.053947][   T29] audit: type=1326 audit(1753624433.142:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.078368][   T29] audit: type=1326 audit(1753624433.142:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.101991][   T29] audit: type=1326 audit(1753624433.142:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.126028][   T29] audit: type=1326 audit(1753624433.142:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.149972][   T29] audit: type=1326 audit(1753624433.142:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7dc5e9a9 code=0x7ffc0000
[   88.241717][ T5151] netlink: 'syz.4.495': attribute type 4 has an invalid length.
[   88.289026][ T5143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.363788][ T5154] netlink: 'syz.4.495': attribute type 4 has an invalid length.
[   89.176884][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.222644][ T5143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.258463][ T5165] loop5: detected capacity change from 0 to 512
[   89.272991][ T5165] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   89.301445][ T5143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.303996][ T5165] EXT4-fs (loop5): 1 truncate cleaned up
[   89.326011][ T5165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.353184][ T5170] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.364375][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.370865][ T5143] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.388047][ T5143] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.402522][ T5143] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.418032][ T5143] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.436318][ T5180] loop5: detected capacity change from 0 to 2048
[   89.616624][ T5189] netlink: 'syz.6.508': attribute type 4 has an invalid length.
[   89.649458][ T5189] netlink: 'syz.6.508': attribute type 4 has an invalid length.
[   90.065130][ T5204] loop4: detected capacity change from 0 to 1024
[   90.079228][ T5204] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   90.089156][ T5204] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   90.098936][ T5204] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   90.112520][ T5204] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.510: unexpected bad inode w/o EXT4_IGET_BAD
[   90.127917][ T5204] EXT4-fs (loop4): no journal found
[   90.134131][ T5204] EXT4-fs (loop4): can't get journal size
[   90.143330][ T5204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   90.747695][ T5211] loop6: detected capacity change from 0 to 512
[   90.821672][ T5211] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   90.868622][ T5211] EXT4-fs (loop6): failed to initialize system zone (-117)
[   90.899984][ T5211] EXT4-fs (loop6): mount failed
[   90.966112][ T5218] loop7: detected capacity change from 0 to 512
[   90.982347][ T5218] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   91.006246][ T5218] EXT4-fs (loop7): 1 truncate cleaned up
[   91.017904][ T5218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.103585][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.437560][ T5234] 9pnet: Could not find request transport: rmx
[   91.621781][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.647054][ T5244] netlink: 'syz.0.521': attribute type 4 has an invalid length.
[   91.658018][ T5244] netlink: 'syz.0.521': attribute type 4 has an invalid length.
[   91.719227][ T5250] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.785457][ T5253] loop4: detected capacity change from 0 to 2048
[   91.808029][ T5253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.835663][ T5250] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.865470][ T5253] loop9: detected capacity change from 0 to 7
[   91.882726][ T5253] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.896123][ T5250] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.932581][ T5259] netlink: 200 bytes leftover after parsing attributes in process `syz.4.522'.
[   91.955511][ T5253] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.964165][ T5253]  loop9: unable to read partition table
[   91.983962][ T5250] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.997490][ T5253] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   91.997490][ T5253] 
) failed (rc=-5)
[   92.050533][ T5250] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.065932][ T5250] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.078640][ T5250] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.115425][ T5250] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.518766][ T5278] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.594458][ T5278] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.601147][ T5285] loop7: detected capacity change from 0 to 512
[   92.626638][ T5285] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   92.695605][ T5285] EXT4-fs (loop7): 1 truncate cleaned up
[   92.705271][ T5278] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.706203][ T5285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.746294][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.758568][ T5278] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.785028][   T29] kauditd_printk_skb: 142 callbacks suppressed
[   92.785124][   T29] audit: type=1326 audit(1753624437.962:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.824962][   T29] audit: type=1326 audit(1753624437.962:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.848608][   T29] audit: type=1326 audit(1753624437.962:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.872146][   T29] audit: type=1326 audit(1753624437.962:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.895511][   T29] audit: type=1326 audit(1753624437.962:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.919050][   T29] audit: type=1326 audit(1753624437.962:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.942445][   T29] audit: type=1326 audit(1753624437.962:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.965953][   T29] audit: type=1326 audit(1753624437.962:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   92.989334][   T29] audit: type=1326 audit(1753624437.962:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   93.012814][   T29] audit: type=1326 audit(1753624437.962:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.7.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[   93.062812][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.079707][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.536'.
[   93.124870][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.541'.
[   93.134561][ T5302] netlink: 'syz.4.542': attribute type 4 has an invalid length.
[   93.170965][ T5302] netlink: 'syz.4.542': attribute type 4 has an invalid length.
[   93.292648][ T5278] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.304690][ T5278] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.318556][ T5278] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.331138][ T5278] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.356406][ T5316] loop0: detected capacity change from 0 to 512
[   93.365998][ T5316] EXT4-fs (loop0): orphan cleanup on readonly fs
[   93.378981][ T5323] loop5: detected capacity change from 0 to 1024
[   93.386656][ T5316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.545: bg 0: block 248: padding at end of block bitmap is not set
[   93.395935][ T5323] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   93.410962][ T5323] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   93.421286][ T5323] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   93.426085][ T5316] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.545: Failed to acquire dquot type 1
[   93.446593][ T5323] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.549: unexpected bad inode w/o EXT4_IGET_BAD
[   93.449885][ T5316] EXT4-fs (loop0): 1 truncate cleaned up
[   93.461112][ T5323] EXT4-fs (loop5): no journal found
[   93.471340][ T5323] EXT4-fs (loop5): can't get journal size
[   93.542023][ T5326] vhci_hcd: invalid port number 96
[   93.547235][ T5326] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   93.631275][ T5329] loop5: detected capacity change from 0 to 512
[   93.638241][ T5329] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   93.650124][ T5329] EXT4-fs (loop5): 1 truncate cleaned up
[   93.806093][ T5344] loop5: detected capacity change from 0 to 2048
[   94.259006][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.291829][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.425152][ T5375] vhci_hcd: invalid port number 96
[   94.431037][ T5375] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   94.711962][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.574'.
[   94.755247][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.575'.
[   94.783277][ T5389] loop0: detected capacity change from 0 to 512
[   94.814191][ T5389] EXT4-fs (loop0): orphan cleanup on readonly fs
[   94.832653][ T5389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.573: bg 0: block 248: padding at end of block bitmap is not set
[   94.872167][ T5389] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.573: Failed to acquire dquot type 1
[   94.910440][ T5389] EXT4-fs (loop0): 1 truncate cleaned up
[   95.001294][ T5399] vhci_hcd: invalid port number 96
[   95.006553][ T5399] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   95.034753][ T5401] loop5: detected capacity change from 0 to 512
[   95.042128][ T5401] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   95.055407][ T5401] EXT4-fs (loop5): 1 truncate cleaned up
[   95.185556][ T5412] loop5: detected capacity change from 0 to 512
[   95.204816][ T5412] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   95.232220][ T5412] EXT4-fs (loop5): 1 truncate cleaned up
[   95.260965][ T5410] 9pnet: Could not find request transport: rmx
[   95.392178][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.586'.
[   95.414393][ T5427] loop5: detected capacity change from 0 to 512
[   95.426980][ T5427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   95.481994][ T5427] EXT4-fs (loop5): 1 truncate cleaned up
[   95.484157][ T5433] loop6: detected capacity change from 0 to 2048
[   95.813850][ T5443] loop5: detected capacity change from 0 to 512
[   95.843715][ T5443] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   95.869117][ T5443] EXT4-fs (loop5): failed to initialize system zone (-117)
[   95.916888][ T5443] EXT4-fs (loop5): mount failed
[   96.246122][ T5457] 9pnet: Could not find request transport: rmx
[   96.482040][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.7.599'.
[   96.797160][ T5474] 9pnet: Could not find request transport: rmx
[   96.816765][ T5476] loop0: detected capacity change from 0 to 512
[   96.837202][ T5476] EXT4-fs (loop0): orphan cleanup on readonly fs
[   96.850936][ T5476] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.603: bg 0: block 248: padding at end of block bitmap is not set
[   96.889437][ T5476] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.603: Failed to acquire dquot type 1
[   96.914035][ T5476] EXT4-fs (loop0): 1 truncate cleaned up
[   97.052015][ T5489] loop5: detected capacity change from 0 to 512
[   97.059341][ T5489] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   97.076498][ T5489] EXT4-fs (loop5): 1 truncate cleaned up
[   97.553477][ T5522] loop5: detected capacity change from 0 to 1024
[   97.629341][ T5522] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   97.639256][ T5522] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   97.648928][ T5522] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   97.676883][ T5522] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.618: unexpected bad inode w/o EXT4_IGET_BAD
[   97.693125][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.704401][ T5522] EXT4-fs (loop5): no journal found
[   97.709650][ T5522] EXT4-fs (loop5): can't get journal size
[   97.731829][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.872540][ T5534] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.941346][ T5535] 9pnet: Could not find request transport: rmx
[   98.577285][ T5544] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.714823][   T29] kauditd_printk_skb: 253 callbacks suppressed
[   98.714850][   T29] audit: type=1326 audit(1753624443.892:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   98.744586][   T29] audit: type=1326 audit(1753624443.892:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   98.767994][   T29] audit: type=1326 audit(1753624443.892:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   98.791428][   T29] audit: type=1326 audit(1753624443.892:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   98.814822][   T29] audit: type=1326 audit(1753624443.892:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   98.846613][ T5544] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.989143][ T5544] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.238488][   T29] audit: type=1326 audit(1753624444.022:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   99.262179][   T29] audit: type=1326 audit(1753624444.022:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   99.286067][   T29] audit: type=1326 audit(1753624444.022:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1919e9a9 code=0x7ffc0000
[   99.310370][ T5557] 9pnet: Could not find request transport: rmx
[   99.321823][ T5560] loop6: detected capacity change from 0 to 512
[   99.331838][ T5560] EXT4-fs (loop6): orphan cleanup on readonly fs
[   99.349072][ T5560] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.634: bg 0: block 248: padding at end of block bitmap is not set
[   99.368832][ T5544] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.376195][ T5560] Quota error (device loop6): write_blk: dquota write failed
[   99.387039][ T5560] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[   99.397030][ T5560] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.634: Failed to acquire dquot type 1
[   99.417003][ T5560] EXT4-fs (loop6): 1 truncate cleaned up
[   99.442995][ T5563] vhci_hcd: invalid port number 96
[   99.448275][ T5563] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   99.467003][ T5544] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.482286][ T5544] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.495923][ T5544] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.527744][ T5544] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.556108][ T5566] loop5: detected capacity change from 0 to 512
[   99.563264][ T5566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   99.585099][ T5566] EXT4-fs (loop5): 1 truncate cleaned up
[   99.711453][ T5576] loop5: detected capacity change from 0 to 2048
[   99.725807][ T5576] loop9: detected capacity change from 0 to 7
[   99.734709][ T5576] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.742720][ T5576] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.750726][ T5576]  loop9: unable to read partition table
[   99.757633][ T5576] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   99.757633][ T5576] 
) failed (rc=-5)
[   99.809493][ T5576] netlink: 200 bytes leftover after parsing attributes in process `+}[@'.
[  100.072747][ T5584] 9pnet: Could not find request transport: rmx
[  100.747786][ T5597] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.807126][ T3649] EXT4-fs unmount: 25 callbacks suppressed
[  100.807144][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.876394][ T5597] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.958057][ T5597] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.042523][ T5597] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.196710][ T5627] 9pnet: Could not find request transport: rmx
[  101.237493][ T5597] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.428143][ T5635] loop6: detected capacity change from 0 to 1024
[  101.439213][ T5635] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  101.449061][ T5635] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  101.459042][ T5635] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  101.472198][ T5635] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.657: unexpected bad inode w/o EXT4_IGET_BAD
[  101.486818][ T5635] EXT4-fs (loop6): no journal found
[  101.492121][ T5635] EXT4-fs (loop6): can't get journal size
[  101.500692][ T5635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  101.577491][ T5597] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.705859][ T5597] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.317333][ T5597] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.397699][ T5639] xt_CT: You must specify a L4 protocol and not use inversions on it
[  102.579785][ T5643] 9pnet: Could not find request transport: rmx
[  102.983479][ T5664] loop7: detected capacity change from 0 to 512
[  103.018087][ T5664] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  103.058013][ T5664] EXT4-fs (loop7): 1 truncate cleaned up
[  103.075613][ T5664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.148952][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.210649][ T4072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.245619][ T5670] 9pnet: Could not find request transport: rmx
[  103.333044][ T5682] loop4: detected capacity change from 0 to 512
[  103.346777][ T5682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.379245][ T5682] EXT4-fs (loop4): 1 truncate cleaned up
[  103.381140][ T5688] netlink: 'syz.5.678': attribute type 4 has an invalid length.
[  103.393942][ T5682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.431910][ T5688] netlink: 'syz.5.678': attribute type 4 has an invalid length.
[  103.459071][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.483680][ T5693] vhci_hcd: invalid port number 96
[  103.488994][ T5693] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  103.555683][ T5710] loop4: detected capacity change from 0 to 512
[  103.566157][ T5710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.589417][ T5710] EXT4-fs (loop4): 1 truncate cleaned up
[  103.595826][ T5710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.655565][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.684010][ T5711] 9pnet: Could not find request transport: rmx
[  103.753781][ T5724] vhci_hcd: invalid port number 96
[  103.758994][ T5724] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  103.801628][ T5732] loop7: detected capacity change from 0 to 512
[  103.809246][ T5732] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  103.827083][ T5732] EXT4-fs (loop7): 1 truncate cleaned up
[  103.834779][ T5732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.864430][ T4720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.903823][   T29] kauditd_printk_skb: 132 callbacks suppressed
[  103.903837][   T29] audit: type=1326 audit(1753624449.082:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  103.953067][   T29] audit: type=1326 audit(1753624449.112:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  103.976532][   T29] audit: type=1326 audit(1753624449.112:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  103.999953][   T29] audit: type=1326 audit(1753624449.112:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.023506][   T29] audit: type=1326 audit(1753624449.112:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.046900][   T29] audit: type=1326 audit(1753624449.112:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.046919][ T5719] ==================================================================
[  104.046961][ T5719] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_update_from_shadow
[  104.071767][   T29] audit: type=1326 audit(1753624449.112:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.078303][ T5719] 
[  104.078310][ T5719] write to 0xffffffff88e730c8 of 280 bytes by interrupt on cpu 1:
[  104.087417][   T29] audit: type=1326 audit(1753624449.112:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.110404][ T5719]  timekeeping_update_from_shadow+0x280/0x2b0
[  104.110451][ T5719]  timekeeping_advance+0xa07/0xba0
[  104.112862][   T29] audit: type=1326 audit(1753624449.112:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.120628][ T5719]  update_wall_time+0x10/0x30
[  104.120666][ T5719]  tick_do_update_jiffies64+0x169/0x1c0
[  104.144159][   T29] audit: type=1326 audit(1753624449.112:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7b32e9a9 code=0x7ffc0000
[  104.150076][ T5719]  tick_nohz_handler+0x7f/0x2d0
[  104.217001][ T5719]  __hrtimer_run_queues+0x20c/0x5a0
[  104.222225][ T5719]  hrtimer_interrupt+0x21a/0x460
[  104.227181][ T5719]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  104.233101][ T5719]  sysvec_apic_timer_interrupt+0x6f/0x80
[  104.238788][ T5719]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.244893][ T5719]  console_flush_all+0x55b/0x730
[  104.249857][ T5719]  console_unlock+0xa1/0x330
[  104.254463][ T5719]  vprintk_emit+0x388/0x650
[  104.258981][ T5719]  vprintk_default+0x26/0x30
[  104.263596][ T5719]  vprintk+0x1d/0x30
[  104.267537][ T5719]  _printk+0x79/0xa0
[  104.271461][ T5719]  kauditd_hold_skb+0x1b1/0x1c0
[  104.276334][ T5719]  kauditd_send_queue+0x273/0x2c0
[  104.281376][ T5719]  kauditd_thread+0x421/0x630
[  104.286087][ T5719]  kthread+0x486/0x510
[  104.290170][ T5719]  ret_from_fork+0xda/0x150
[  104.294694][ T5719]  ret_from_fork_asm+0x1a/0x30
[  104.299480][ T5719] 
[  104.301819][ T5719] read to 0xffffffff88e73108 of 8 bytes by task 5719 on cpu 0:
[  104.309382][ T5719]  ktime_get_seconds+0x3a/0x60
[  104.314175][ T5719]  tcp_ack+0x65b/0x3040
[  104.318352][ T5719]  tcp_rcv_established+0x496/0xef0
[  104.323490][ T5719]  tcp_v4_do_rcv+0x672/0x740
[  104.328111][ T5719]  sk_backlog_rcv+0x71/0x190
[  104.332731][ T5719]  __release_sock+0xb4/0x130
[  104.337343][ T5719]  release_sock+0x44/0x150
[  104.341792][ T5719]  sk_stream_wait_memory+0x461/0x860
[  104.347108][ T5719]  tcp_sendmsg_locked+0xad4/0x2c10
[  104.352247][ T5719]  tcp_sendmsg+0x2f/0x50
[  104.356510][ T5719]  inet_sendmsg+0x76/0xd0
[  104.360854][ T5719]  __sock_sendmsg+0x102/0x180
[  104.365550][ T5719]  __sys_sendto+0x268/0x330
[  104.370085][ T5719]  __x64_sys_sendto+0x76/0x90
[  104.374860][ T5719]  x64_sys_call+0x2eb6/0x2fb0
[  104.379583][ T5719]  do_syscall_64+0xd2/0x200
[  104.384108][ T5719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.390024][ T5719] 
[  104.392361][ T5719] value changed: 0x0000000000000067 -> 0x0000000000000068
[  104.399487][ T5719] 
[  104.401824][ T5719] Reported by Kernel Concurrency Sanitizer on:
[  104.407990][ T5719] CPU: 0 UID: 0 PID: 5719 Comm: syz.0.690 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[  104.420338][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  104.430413][ T5719] ==================================================================