last executing test programs:

24m36.885802445s ago: executing program 4 (id=47):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80840, 0x0)
epoll_create(0xe9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0)
mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xc, 0x3841)
symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00')
pwritev2(r3, 0x0, 0x0, 0x1400, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c)

24m34.729875862s ago: executing program 4 (id=58):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x1f8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x20}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
r2 = dup3(r1, r1, 0x0)
syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000063112c00000000008510000002000000850000008d000000950000000000000095000000000000006cbf1294c266836505408aa374b04120f90fc394452767c697d6dd3ef7e89e3bc1139ea4df69f7eda89a51f83d6747bd324a035a4c3e33d51539affb36d52dc5495acb3d11180c01615a2cc194d26c81b07977116ef9309e8560919400e69fb049b4a7dcbbd6e521bfd58fc87164f68a4871ce065f010000008e34f867ff690af2ab2f4983bbcb5646d7bafce5616deb779fcfbfa3e4ff52a301a01b5c38f57a821586d6b8105b33de076272c243d516786e2c36a72f7310922ddd24c1"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000f10000000000000000000018010000202070250000000000202020db1af80400000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdc, &(0x7f00000000c0)=""/220, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'syztnl0\x00', <r4=>0x0, 0x78e0, 0x7, 0x2, 0x4, {{0x6, 0x4, 0x2, 0x2c, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast2, @broadcast, {[@generic={0x110, 0x2}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000640)={'batadv0\x00', <r5=>0x0})
stat(&(0x7f0000000680)='./bus\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=@newpolicy={0x16c, 0x13, 0x4, 0x70bd29, 0x25dfdbfe, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x9, 0x4e23, 0x8, 0xa, 0x20, 0x0, 0x3b, r4, 0xee00}, {0x5, 0x3, 0x5, 0x7, 0x8, 0x9, 0x1c5c5b0}, {0x7fffffffffffffff, 0xfd8, 0x9, 0xa}, 0x7, 0x6e6bbf, 0x1, 0x0, 0x2, 0x3}, [@policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1ff, 0x4e23, 0xf7, 0x2, 0x20, 0x80, 0x6c, r5, r6}, {0x9, 0x1ff, 0x5, 0x3, 0x0, 0x0, 0x5, 0x71f8}, {0x6, 0x1, 0x7, 0x6}, 0xfcfe, 0x0, 0x0, 0x0, 0x0, 0x1}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x16c}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="9110c3ff0000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@mcast2, @empty, 0x1d, 0x2}})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@noblock_validity}, {@sysvgroups}]}, 0x21, 0x624, &(0x7f0000000d80)="$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")
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000030101080000000000000000000000064c00108008000240000000020800034000010000080001400000004008000140000001ff0800034000000005080003400000000408000240000000080800034000000000080003400000008114001640000009dc0000000400000009000001ff38000480340003801800024000000003080003407fffffff08000240000000070800034000000005080003400000000205000100f9000000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x80)

24m34.23227132s ago: executing program 4 (id=63):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @remote}}}, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
syz_read_part_table(0x5d1, &(0x7f0000001340)="$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")
syz_io_uring_setup(0x64c6, &(0x7f0000000100)={0x0, 0x1dd8, 0x0, 0x2, 0x3a1}, 0x0, &(0x7f00000001c0))
syz_io_uring_submit(0x0, 0x0, 0x0)

24m33.980664755s ago: executing program 4 (id=65):
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = epoll_create(0x3ff)
r1 = epoll_create1(0x80000)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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")
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}}], {0x14, 0x10}}, 0x3c}}, 0x0)

24m33.66500283s ago: executing program 4 (id=67):
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r0], 0x20}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000057eb0020fd"], 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$tipc(0x1e, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x8)
openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x20000000)

24m33.200291548s ago: executing program 4 (id=72):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]})
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000009f0b0000000800000500000000440400ec195ad91c031fd37ef3e7984727f056b0347adbe74df469f9100bc396a0d216948187a75af72217c3929995cbef34aee2f1437bb513e2e58f9ea3e788ec8e6e2a0b12f9f560c06b9448003a3552b614238cd23b", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002008000028000000900"/28], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
fdatasync(r2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x8)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
flistxattr(0xffffffffffffffff, &(0x7f0000001140)=""/24, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000825c00"], 0x164}, 0x1, 0x0, 0x0, 0x4803}, 0x4000)

24m33.137116529s ago: executing program 32 (id=72):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]})
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000009f0b0000000800000500000000440400ec195ad91c031fd37ef3e7984727f056b0347adbe74df469f9100bc396a0d216948187a75af72217c3929995cbef34aee2f1437bb513e2e58f9ea3e788ec8e6e2a0b12f9f560c06b9448003a3552b614238cd23b", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002008000028000000900"/28], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
fdatasync(r2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x8)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
flistxattr(0xffffffffffffffff, &(0x7f0000001140)=""/24, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000825c00"], 0x164}, 0x1, 0x0, 0x0, 0x4803}, 0x4000)

18m16.98086005s ago: executing program 3 (id=3424):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, 0x0}, 0x108)
memfd_secret(0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet(0x2, 0x801, 0x0)
r3 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r7, 0x0, r1})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

18m16.870455842s ago: executing program 3 (id=3427):
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
lsm_list_modules(&(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES8], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x4661, 0x400, 0x3, 0x20e, 0x0, r0}, &(0x7f0000000540), 0x0)

18m16.44076696s ago: executing program 3 (id=3432):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x935c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000040), 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe8011e0000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='devfreq_frequency\x00', r2, 0x0, 0x3}, 0x18)
mmap(&(0x7f0000114000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = syz_clone(0x80000, &(0x7f0000000100), 0x0, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300))
prlimit64(r6, 0x7, 0x0, 0x0)
getpgid(0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
getpid()
write$selinux_user(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="2a9245234012157aebfbfc41b30974b886fb3db5872a3b915f7341ddc1f32dff9bd070e6b00a562eacd08796ee429f07af1929bbb4d53990d4226a92a755715a7a41ae1dbd4ffe34bee41ebe9265956b1756133baef4bdb000a2e6c5cc7bc9042d324fe133cf2555ac9cbabaa3148cc4a50e025bb2cf6db1751b6e8dbbb1ab0d4387971390a400da4b4e978818717c7581058bf35cfaabc2a73e1e6a8403c50336bba7dd03382c0393c6784d9e390a9d96509c258d8085a91bb4867444681e8c3695ac1755e22eea40dfcbbcf7301b2c45c8ff696acced8f49006093abc503e92b5088280fcf"], 0x27)

18m16.394421501s ago: executing program 3 (id=3433):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x21, 0x2, 0x10000000000002)
recvmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@sco, 0x80, 0x0}, 0x7}], 0x1, 0x20, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x810)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140))
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x8, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x101)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000))
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000380))

18m15.660057514s ago: executing program 3 (id=3434):
sendmsg$key(0xffffffffffffffff, 0x0, 0x90)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x7f)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2)
socket$inet(0x2, 0x3, 0xd)
r3 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, r4, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_io_uring_setup(0x92d, &(0x7f0000000140)={0x0, 0x8c70, 0x0, 0xfffffffe, 0x401ee}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2001, 0x1})
io_uring_enter(r7, 0x47f6, 0xd0ab, 0x0, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10)
getdents(0xffffffffffffffff, 0x0, 0x58)

18m15.133983803s ago: executing program 3 (id=3438):
r0 = mq_open(&(0x7f0000000280)='\x00', 0x1, 0x1, &(0x7f00000002c0)={0x8, 0xcf, 0x2a758a99, 0x40})
mq_getsetattr(r0, &(0x7f0000000300)={0x8, 0x6, 0x3, 0x8}, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$lock(r4, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)

18m15.121565103s ago: executing program 33 (id=3438):
r0 = mq_open(&(0x7f0000000280)='\x00', 0x1, 0x1, &(0x7f00000002c0)={0x8, 0xcf, 0x2a758a99, 0x40})
mq_getsetattr(r0, &(0x7f0000000300)={0x8, 0x6, 0x3, 0x8}, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$lock(r4, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)

9.106302822s ago: executing program 0 (id=10238):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x8000}]}, 0x20}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe6}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x70, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000040), &(0x7f0000000280)=""/21}, 0x20)
utime(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff00"/135]}, 0xff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18)
kexec_load(0x4, 0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
r9 = gettid()
tkill(r9, 0x12)
r10 = gettid()
tkill(r10, 0x15)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="014000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000500"/28], 0x50)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file1\x00'})

4.154063328s ago: executing program 0 (id=10262):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, r4, 0x4}, 0x38)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="de4287155f36f3e8ab5c2a41b2361e540b487a51102aaac819dd3c21d4cd51097c2cb57f0d4e6cc86498776467612da361b3260ded160c382501e612b9f95b4d84a83708878bd625fc8500143132512e3c845d07fba6d0b25cf4c832d93ee73b4830a1f3fdf90aa376efb1c6bd2f8c6f298c89c016a9a8f6749ef50c239f26ea1e699365ea012fa8d805244f9a1a2e335220a3112e1b7a66cd7cc4ef647c6556c395e3a81b7164da8345cefaa26ee517faf6ea60d5730a3db5d841f424679d48fc4aec3739457472cb416d91b091c5d4ca4432a8cd994fd30b58e4016a46437343dacd13f56593ce0e0cc2f8d9e9b0bbce8109c3a7924b6d6e234d749b30d8af79d778cd2fb335da56af401d2ef5e420690f6f30a4dfbd2063c4a126c1be"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

2.587411945s ago: executing program 0 (id=10313):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2010000, 0x0, 0x1, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x7, 0xf, 0x1, 'queue1\x00', 0x40})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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")
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000001540)=<r4=>0x0)
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x30, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}])
close_range(r0, r2, 0x2)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x40000000000, 0xfffffffffffffffd, 0x5, 0x1, 0x800000, 0x0, 0x81}, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49e2, 0x4, 0x0, 0x1ff, 0x7, "ec28a144f13d7607"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r6 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x20004010)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x9}, 0x18)

2.338389489s ago: executing program 6 (id=10324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

2.320298179s ago: executing program 6 (id=10325):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, r4, 0x4}, 0x38)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

2.28832632s ago: executing program 1 (id=10327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r0, 0x0, 0x0}, 0x20)

2.218070851s ago: executing program 1 (id=10328):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xe)
syz_usb_disconnect(r0)
syz_usb_connect$uac1(0x0, 0xe3, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x8, 0x10, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x5, 0x6b, 0x2, 0x81, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0x3, "f2b35b"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x80}, @as_header={0x7, 0x24, 0x1, 0xdd, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x80, 0x81, 0x0, {0x7, 0x25, 0x1, 0x83, 0x3d, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0xee4, 0xb3, "cbf43a3ad856"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x3, 0x8, "5e98194ceae6f3"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x81, "3a8851"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x70, 0x1001}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x2, 0xf, 0x61, "21f379307f2bd2"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x0, 0x80, "70bcd1", "1664"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x0, 0x6c, {0x7, 0x25, 0x1, 0x2, 0x8, 0x7f}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x25, 0xb, 0xa, 0x8, 0xc}, 0x30, &(0x7f00000001c0)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x44, 0x3, 0x43, 0xff00, 0x0, [0x0, 0xff81ff, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x222}, @generic={0xc, 0x10, 0x2, "33c87096aaffb465e2"}]}, 0xa, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x420}}, {0x3d, &(0x7f0000000300)=@string={0x3d, 0x3, "72cca3921339d3418e78adc775c4c02c91be7cb2b929bc49839b5e63bd72bb44e415d686df6ece90fa1bc003c53b4b5d85596a47b75c866b4ed1b0"}}, {0xe9, &(0x7f0000000340)=@string={0xe9, 0x3, "b911ef3d9ce39bcc1042e230022bd04d79cfe72f7b640b60d413f5b743d44b8e95afecabbc214d567035b9bd780607fa7ec47f30006b3ef5300e0ffab67f35295053b81d25939c25fa4b040820e4b6b0ef9e176524d6db3b20c264807b43be65fa5191d436bc9e0225211325b915e9008424029b058704497568a1bfee20159a5924a028c28fee166f743115913765ad4647b72db6902ae939a49cff743ed27227f3f718e32dc6ec72a30233fd963e3cf467c08581228997339689da13a9375161f5df4a9b76511a2930941351f17750c833e7d58a04f46136386597ec44ceb86d06a7f6b05937"}}, {0x36, &(0x7f00000024c0)=@string={0x36, 0x3, "0865e051eec833589deeaa5d6ec59d49efc068c17ce7b2d2fe1bfe782ecf06cca5ea52d322c7e1a485540cf46b05ad8a010afd3e"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x240a}}, {0x3e, &(0x7f0000000540)=@string={0x3e, 0x3, "8761a065b1535bc184ffb0b4633a9ff739782c17ff0a797081304e4413900f143506e574550247d6fbaed7fd89bd7b5b273c6da44def4cf9a29bfe2b"}}, {0x17, &(0x7f0000000580)=@string={0x17, 0x3, "c04fabaca958d554ba9d45c71e1f3ecf5e1a589f3a"}}, {0xab, &(0x7f00000005c0)=@string={0xab, 0x3, "31321391b18663fed9825a142e7aa01cea7095948437998edf36f97e5b5277cebe6a1ff5c69578cca4b05a225e6855a74986ee6ccc254f9cb34d1b2448236a8431a66315d1a4df19da79074d539c695cdd09a5caa8f8c881061dea91905b216ee280017730468a5e66fee03812e2a1e40ac6bfa5397de988efe79e1eb502676c197b309ce7a75a064492d17b778776afe976828243d2faacef71e14caedd00a4aac3232ed54c2988b9"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1409}}, {0x0, 0x0}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000040)=0x1)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000004b0000004b00000006000000020000000200000f020000002200000001000000030000000000000000000000000000004494000000000000000200005543072400090000000f01000000000000000000000000000000840000002e5f2e00"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4d, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af80b0e176c00bfa200000000000007020000f8ffffffb703000008000000b70400000000000085003300c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
fgetxattr(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
r9 = dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x190, 0x230, 0x230, 0x190, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00', {}, {}, 0x4}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
preadv(r0, &(0x7f00000022c0)=[{&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000ec0)=""/187, 0xbb}, {&(0x7f0000000f80)=""/128, 0x80}, {&(0x7f0000001000)=""/230, 0xe6}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/126, 0x7e}, {&(0x7f0000002240)=""/122, 0x7a}], 0x9, 0xd24, 0x9)

2.216820821s ago: executing program 0 (id=10329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400008413437bfdfea69cc932cd50fad10e2e0000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000800000000c0000000c000000030000000e00000000000008050000000000001cee3bc845ce4f"], &(0x7f0000000440)=""/172, 0x27, 0xac, 0x0, 0x6, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="62d62e104f480c53ef2efda7926d5f", @ANYRESDEC=r1], 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x5b)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
r9 = fsmount(r5, 0x0, 0x88)
openat(r9, &(0x7f0000000340)='.\x00', 0x0, 0x131)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24004000)
syz_emit_ethernet(0x86, 0x0, 0x0)
sync()
sync()
socket(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)

1.808161748s ago: executing program 0 (id=10334):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.70981458s ago: executing program 0 (id=10338):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getrusage(0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef3, 0x0, 0x2, 0x1a6}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
rt_tgsigqueueinfo(0x0, 0x0, 0x1a, &(0x7f0000000440)={0x30, 0x4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_enter(r8, 0xd6a, 0x12b2, 0x24, 0x0, 0x0)

1.7017886s ago: executing program 6 (id=10339):
r0 = socket(0x2000000015, 0x80005, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)

1.409652845s ago: executing program 6 (id=10344):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a")

1.311572377s ago: executing program 6 (id=10346):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241a", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, 0xffffffffffffffff, 0x4}, 0x38)
r4 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r4, 0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r6, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

1.310405697s ago: executing program 2 (id=10347):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
eventfd2(0x9, 0x0)
io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000280)=[0x0])
io_destroy(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000b2e90000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x7, 0xf7, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x50)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

1.248159558s ago: executing program 1 (id=10350):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, r4, 0x4}, 0x38)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

1.185427859s ago: executing program 2 (id=10353):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x2)

1.1061191s ago: executing program 2 (id=10355):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2010000, 0x0, 0x1, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x7, 0xf, 0x1, 'queue1\x00', 0x40})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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")
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000001540)=<r4=>0x0)
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x30, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}])
close_range(r0, r2, 0x2)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x40000000000, 0xfffffffffffffffd, 0x5, 0x1, 0x800000, 0x0, 0x81}, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49e2, 0x4, 0x0, 0x1ff, 0x7, "ec28a144f13d7607"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r6 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000000ffffffff00"/56, @ANYBLOB="010000000300000000080003001100"/24], 0x54}}, 0x20004010)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x9}, 0x18)

1.10551046s ago: executing program 5 (id=10356):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, r4, 0x4}, 0x38)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

990.742072ms ago: executing program 1 (id=10357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r2=>0x0)
r3 = eventfd2(0x9, 0x0)
io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
io_destroy(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x200002ac, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xaa75fbb4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r4}, 0x18)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x7, 0xf7, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x50)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r9 = io_uring_setup(0x4dd0, &(0x7f0000000580)={0x0, 0x1670, 0x0, 0x0, 0x3d3})
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r10, 0x5425, 0x0)
ioctl$TCSETSW2(r10, 0x5425, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x3, 0x5)
openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0xff, 0x20, {{0xd, 0x4, 0x3, 0x2d, 0x34, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @local, {[@end, @cipso={0x86, 0x11, 0x2, [{0x7, 0xb, "ddbacc7795e4cbdf69"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x9, [{@rand_addr=0x64010101, 0x7d50}]}]}}}}})

679.321398ms ago: executing program 2 (id=10358):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2010000, 0x0, 0x1, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x7, 0xf, 0x1, 'queue1\x00', 0x40})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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")
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000001540)=<r4=>0x0)
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x30, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}])
close_range(r0, r2, 0x2)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x40000000000, 0xfffffffffffffffd, 0x5, 0x1, 0x800000, 0x0, 0x81}, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49e2, 0x4, 0x0, 0x1ff, 0x7, "ec28a144f13d7607"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r6 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="010000000300000000080003"], 0x54}}, 0x20004010)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x9}, 0x18)

658.573188ms ago: executing program 6 (id=10359):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x6a, 0xa, 0x0, 0x0)

643.086488ms ago: executing program 5 (id=10360):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000d14010027bd7000fbdbdf25080001"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40880)

519.120361ms ago: executing program 5 (id=10361):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, r4, 0x4}, 0x38)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

222.713015ms ago: executing program 2 (id=10362):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa3}}, 0x1, 0x1, 0x0, 0x0, 0x331}, 0x9c)

193.529476ms ago: executing program 5 (id=10363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000180)="a6cc04e2d8f1c382fbf14b29b86e3a")

74.147668ms ago: executing program 2 (id=10364):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba5444461db1c70cbc0da2cb5e9e5ec2be504094cb813388b5e0bd167c267cc87af76b0bd8299e158bd87b0b274368067eda37969123e66249ed156d9", 0x101, r4, 0x4}, 0x38)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8)
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46")
timerfd_create(0x8, 0x80800)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804)
r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000e0000009500000000000000851000000300000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000040000850000000c000000b70000000000000055b870fffcffffff4d610001f0ffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000240)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x400, @void, @value}, 0x94)

73.395378ms ago: executing program 1 (id=10365):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c)

23.455609ms ago: executing program 5 (id=10366):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000000200))

21.889129ms ago: executing program 5 (id=10367):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400008413437bfdfea69cc932cd50fad10e2e0000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000800000000c0000000c000000030000000e00000000000008050000000000001cee3bc845ce4f"], &(0x7f0000000440)=""/172, 0x27, 0xac, 0x0, 0x6, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="62d62e104f480c53ef2efda7926d5f", @ANYRESDEC=r1], 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x5b)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
r9 = fsmount(r5, 0x0, 0x88)
openat(r9, &(0x7f0000000340)='.\x00', 0x0, 0x131)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24004000)
syz_emit_ethernet(0x86, 0x0, 0x0)
sync()
sync()
socket(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)

0s ago: executing program 1 (id=10368):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2010000, 0x0, 0x1, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x7, 0xf, 0x1, 'queue1\x00', 0x40})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1010048, &(0x7f0000000440), 0x1, 0x4d8, &(0x7f0000000b00)="$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")
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000001540)=<r4=>0x0)
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x30, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}])
close_range(r0, r2, 0x2)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x40000000000, 0xfffffffffffffffd, 0x5, 0x1, 0x800000, 0x0, 0x81}, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49e2, 0x4, 0x0, 0x1ff, 0x7, "ec28a144f13d7607"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r6 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000000ffffffff00"/56, @ANYBLOB="010000000300000000080003001100"/24], 0x54}}, 0x20004010)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x9}, 0x18)

kernel console output (not intermixed with test programs):

erarchical_memsw_limit 9223372036854771712
[ 1425.577495][T15389] total_cache 94142464
[ 1425.581669][T15389] total_rss 5083136
[ 1425.585543][T15389] total_shmem 94142464
[ 1425.589659][T15389] total_mapped_file 11755520
[ 1425.594298][T15389] total_dirty 0
[ 1425.597779][T15389] total_writeback 0
[ 1425.601605][T15389] total_workingset_refault_anon 2002
[ 1425.606921][T15389] total_workingset_refault_file 46
[ 1425.612121][T15389] total_swap 5672960
[ 1425.616252][T15389] total_swapcached 57344
[ 1425.620541][T15389] total_pgpgin 3032225
[ 1425.624618][T15389] total_pgpgout 3007983
[ 1425.628797][T15389] total_pgfault 1509164
[ 1425.632952][T15389] total_pgmajfault 360
[ 1425.637052][T15389] total_inactive_anon 83693568
[ 1425.641870][T15389] total_active_anon 15454208
[ 1425.646509][T15389] total_inactive_file 20480
[ 1425.651091][T15389] total_active_file 0
[ 1425.655138][T15389] total_unevictable 0
[ 1425.659328][T15389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9700,pid=15386,uid=0
[ 1425.674408][T15389] Memory cgroup out of memory: Killed process 15386 (syz.5.9700) total-vm:117112kB, anon-rss:4656kB, file-rss:42928kB, shmem-rss:11392kB, UID:0 pgtables:200kB oom_score_adj:1000
[ 1426.553888][T15439] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1427.251364][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9712'.
[ 1427.262679][T15439] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1427.332672][T15458] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1427.472164][T15439] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1427.675107][T15469] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1427.707651][T15469] wireguard0: entered promiscuous mode
[ 1427.748157][T15439] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1427.901370][T15439] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1427.939525][T15439] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1427.952698][T15439] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1427.964915][T15439] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1428.010641][T15494] loop5: detected capacity change from 0 to 512
[ 1428.017414][T15494] EXT4-fs: Ignoring removed oldalloc option
[ 1428.023567][T15494] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1428.036742][T15494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1428.047880][T15494] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1428.063689][T15494] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9720: Failed to acquire dquot type 1
[ 1428.085380][T15494] EXT4-fs (loop5): 1 truncate cleaned up
[ 1428.096866][T15494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1428.132514][T15494] netlink: 328 bytes leftover after parsing attributes in process `syz.5.9720'.
[ 1428.260769][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1428.283501][   T29] kauditd_printk_skb: 128 callbacks suppressed
[ 1428.283519][   T29] audit: type=1326 audit(2000000040.512:108213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.283690][   T29] audit: type=1326 audit(2000000040.512:108214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.283913][   T29] audit: type=1326 audit(2000000040.512:108215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.284770][   T29] audit: type=1326 audit(2000000040.512:108216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.284960][   T29] audit: type=1326 audit(2000000040.512:108217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.285287][   T29] audit: type=1326 audit(2000000040.512:108218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.286249][   T29] audit: type=1326 audit(2000000040.512:108219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1428.310300][T15505] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9721'.
[ 1428.368490][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1428.444141][T15494] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.9720: iget: bad i_size value: 360287970189639690
[ 1428.499910][T15500] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.9720: iget: bad i_size value: 360287970189639690
[ 1428.643554][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1429.134306][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9722'.
[ 1429.145470][   T29] audit: type=1326 audit(2000000041.325:108220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1429.178433][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9722'.
[ 1429.188813][   T29] audit: type=1326 audit(2000000041.354:108221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1429.212664][   T29] audit: type=1326 audit(2000000041.354:108222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1429.530473][T15530] lo speed is unknown, defaulting to 1000
[ 1429.644312][T15530] lo speed is unknown, defaulting to 1000
[ 1429.706134][T15530] lo speed is unknown, defaulting to 1000
[ 1429.712679][T15530] lo speed is unknown, defaulting to 1000
[ 1430.427544][T15560] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1430.455854][T15565] blktrace: Concurrent blktraces are not allowed on loop11
[ 1430.480153][T15568] lo speed is unknown, defaulting to 1000
[ 1430.512563][T15574] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1430.573251][T15574] wireguard1: entered promiscuous mode
[ 1430.624967][T15586] loop5: detected capacity change from 0 to 512
[ 1430.654081][T15586] EXT4-fs (loop5): 1 orphan inode deleted
[ 1430.664959][T15586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1430.677877][T11819] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1
[ 1430.704630][T15586] ext4 filesystem being mounted at /1909/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1430.726468][T15586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1430.726774][T15568] lo speed is unknown, defaulting to 1000
[ 1430.766233][T15586] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1430.774753][T15568] lo speed is unknown, defaulting to 1000
[ 1430.781290][T15568] lo speed is unknown, defaulting to 1000
[ 1430.788918][T15587] siw: device registration error -23
[ 1430.841774][T15611] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1430.864325][T15611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1430.873852][T15611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1430.978903][T15619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9743'.
[ 1430.989221][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9743'.
[ 1430.998984][T15619] vlan0: entered promiscuous mode
[ 1431.004110][T15619] erspan0: entered promiscuous mode
[ 1431.009608][T15619] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 1431.065890][T15610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1431.077256][T15610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.187393][T15626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1431.214643][T15627] netlink: 328 bytes leftover after parsing attributes in process `syz.6.9735'.
[ 1431.524309][T15627] netlink: 'syz.6.9735': attribute type 1 has an invalid length.
[ 1431.663251][T15642] set match dimension is over the limit!
[ 1431.697986][T15647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15647 comm=syz.1.9738
[ 1431.723438][T15644] lo speed is unknown, defaulting to 1000
[ 1431.804148][T15644] lo speed is unknown, defaulting to 1000
[ 1431.810877][T15655] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1432.035884][T15664] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1432.354112][T15665] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1432.527922][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9744'.
[ 1432.537059][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9744'.
[ 1432.725800][T15644] lo speed is unknown, defaulting to 1000
[ 1432.864805][T15644] lo speed is unknown, defaulting to 1000
[ 1432.870928][T15660] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[ 1432.953606][T15698] loop1: detected capacity change from 0 to 512
[ 1432.969509][T15696] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1432.977922][T15698] EXT4-fs: Ignoring removed oldalloc option
[ 1432.989747][T15698] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1433.009352][T15698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1433.032464][T15698] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1433.052442][T15698] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9750: Failed to acquire dquot type 1
[ 1433.075795][T15698] EXT4-fs (loop1): 1 truncate cleaned up
[ 1433.083086][T15698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1433.118971][T15696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1433.127520][T15698] netlink: 328 bytes leftover after parsing attributes in process `syz.1.9750'.
[ 1433.137236][T15696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1433.258597][T15721] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.9750: iget: bad i_size value: 360287970189639690
[ 1433.272629][T15721] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.9750: iget: bad i_size value: 360287970189639690
[ 1433.383130][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1433.395650][T15728] loop5: detected capacity change from 0 to 512
[ 1433.430778][T15728] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1433.450523][T15728] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1433.463313][T15728] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9752: Failed to acquire dquot type 1
[ 1433.483370][T15728] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9752: bg 0: block 40: padding at end of block bitmap is not set
[ 1433.498808][T15728] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[ 1433.508912][T15728] EXT4-fs (loop5): 1 truncate cleaned up
[ 1433.515072][T15728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1433.572713][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1433.722294][T15744] blktrace: Concurrent blktraces are not allowed on loop13
[ 1433.881718][T15739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1433.901888][T15739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1433.907049][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9757'.
[ 1434.094299][T15774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9758'.
[ 1434.115341][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9758'.
[ 1434.199545][   T29] kauditd_printk_skb: 529 callbacks suppressed
[ 1434.199563][   T29] audit: type=1326 audit(2000000046.049:108747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.241399][   T29] audit: type=1326 audit(2000000046.087:108748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.265540][   T29] audit: type=1326 audit(2000000046.087:108749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.289558][   T29] audit: type=1326 audit(2000000046.087:108750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.313550][   T29] audit: type=1326 audit(2000000046.087:108751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.337391][   T29] audit: type=1326 audit(2000000046.087:108752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.361516][   T29] audit: type=1326 audit(2000000046.087:108753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.386061][   T29] audit: type=1326 audit(2000000046.161:108754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.410059][   T29] audit: type=1326 audit(2000000046.161:108755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.433802][   T29] audit: type=1326 audit(2000000046.161:108756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.2.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1434.640927][T15791] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1434.727145][T15778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[ 1434.733836][T15778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1434.741596][T15778] vhci_hcd vhci_hcd.0: Device attached
[ 1434.760030][T15778] 9pnet_fd: Insufficient options for proto=fd
[ 1434.772636][T15801] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1434.787672][T15798] vhci_hcd: connection closed
[ 1434.788083][T11799] vhci_hcd: stop threads
[ 1434.797116][T11799] vhci_hcd: release socket
[ 1434.801652][T11799] vhci_hcd: disconnect device
[ 1434.953400][T15812] loop1: detected capacity change from 0 to 512
[ 1434.970805][T15812] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.9767: iget: bad i_size value: 38620345925642
[ 1434.984281][T15812] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.9767: couldn't read orphan inode 15 (err -117)
[ 1434.998000][T15812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1435.024974][T15812] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9767: bg 0: block 5: invalid block bitmap
[ 1435.044967][T15812] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1435.057441][T15812] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1435.057441][T15812] 
[ 1435.067214][T15812] EXT4-fs (loop1): Total free blocks count 0
[ 1435.073284][T15812] EXT4-fs (loop1): Free/Dirty block details
[ 1435.079236][T15812] EXT4-fs (loop1): free_blocks=0
[ 1435.084296][T15812] EXT4-fs (loop1): dirty_blocks=16
[ 1435.089540][T15812] EXT4-fs (loop1): Block reservation details
[ 1435.095648][T15812] EXT4-fs (loop1): i_reserved_data_blocks=16
[ 1435.233447][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1435.429467][T15829] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1435.459863][T15833] IPVS: Error connecting to the multicast addr
[ 1435.512173][T15829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1435.531264][T15829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1435.818063][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1435.829888][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1436.205800][T15857] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[ 1436.512977][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.520598][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.528060][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.545724][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.553190][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.560671][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.568398][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.575832][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.583307][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.591033][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.598602][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.606107][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.613525][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.629117][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.636572][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.644140][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.651697][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.659199][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.666681][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.674138][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.681627][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.689069][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.696500][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.704053][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.711553][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.719129][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.719238][T15875] loop1: detected capacity change from 0 to 512
[ 1436.726600][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.734487][T15875] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1436.740268][ T4131] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0
[ 1436.749357][T15875] EXT4-fs: dax option not supported
[ 1436.831733][ T4131] hid-generic 0000:0000:0000.012E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1436.865461][T15868] loop5: detected capacity change from 0 to 512
[ 1436.959556][T15868] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1437.022866][T15868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1437.071048][T15895] loop1: detected capacity change from 0 to 1024
[ 1437.122893][T15895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1437.156901][T15895] ext4 filesystem being mounted at /1913/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1437.159776][T15891] IPVS: Error connecting to the multicast addr
[ 1437.175931][T15868] EXT4-fs (loop5): 1 truncate cleaned up
[ 1437.182048][T15895] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.9797: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1437.182404][T15895] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[ 1437.182434][T15895] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1437.182434][T15895] 
[ 1437.255697][T15868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1437.363280][T15904] netlink: zone id is out of range
[ 1437.368517][T15904] netlink: zone id is out of range
[ 1437.376489][T15904] netlink: zone id is out of range
[ 1437.381624][T15904] netlink: zone id is out of range
[ 1437.406293][T15904] netlink: zone id is out of range
[ 1437.418935][T15904] netlink: zone id is out of range
[ 1437.424536][T15907] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[ 1437.431256][T15907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1437.438945][T15907] vhci_hcd vhci_hcd.0: Device attached
[ 1437.454812][T15907] 9pnet_fd: Insufficient options for proto=fd
[ 1437.461007][T15904] netlink: zone id is out of range
[ 1437.461081][T15904] netlink: zone id is out of range
[ 1437.461100][T15904] netlink: zone id is out of range
[ 1437.477879][T15904] netlink: zone id is out of range
[ 1437.579278][T15908] vhci_hcd: connection closed
[ 1437.579585][T11839] vhci_hcd: stop threads
[ 1437.588865][T11839] vhci_hcd: release socket
[ 1437.593357][T11839] vhci_hcd: disconnect device
[ 1437.616240][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1437.631572][ T6674] vhci_hcd: vhci_device speed not set
[ 1437.700707][T15913] __nla_validate_parse: 3 callbacks suppressed
[ 1437.700725][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9789'.
[ 1437.794701][T15922] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1437.932783][T15932] lo speed is unknown, defaulting to 1000
[ 1438.041344][T15932] lo speed is unknown, defaulting to 1000
[ 1438.106492][T15932] lo speed is unknown, defaulting to 1000
[ 1438.113390][T15932] lo speed is unknown, defaulting to 1000
[ 1438.180350][T15932] loop1: detected capacity change from 0 to 512
[ 1438.187418][T15932] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1438.193962][T15932] EXT4-fs: Ignoring removed bh option
[ 1438.213961][T15932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1438.228177][T15932] EXT4-fs (loop1): 1 truncate cleaned up
[ 1438.234967][T15932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1438.463158][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1438.786861][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1438.917382][T15972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9798'.
[ 1438.930608][T15968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[ 1439.046226][T15972] lo speed is unknown, defaulting to 1000
[ 1439.073145][T15984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9799'.
[ 1439.105579][T15984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15984 comm=syz.5.9799
[ 1439.177329][T15972] lo speed is unknown, defaulting to 1000
[ 1439.249623][T15972] lo speed is unknown, defaulting to 1000
[ 1439.255793][T15972] lo speed is unknown, defaulting to 1000
[ 1439.481575][T16034] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1439.545525][   T29] kauditd_printk_skb: 670 callbacks suppressed
[ 1439.545542][   T29] audit: type=1326 audit(2000000051.054:109427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.1.9801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1439.575883][   T29] audit: type=1326 audit(2000000051.054:109428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.1.9801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1439.599818][   T29] audit: type=1326 audit(2000000051.054:109429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.1.9801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1439.682515][   T29] audit: type=1326 audit(2000000051.072:109430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.2.9802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1439.706380][   T29] audit: type=1326 audit(2000000051.072:109431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.2.9802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1439.730147][   T29] audit: type=1326 audit(2000000051.128:109432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.1.9801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1439.754022][   T29] audit: type=1326 audit(2000000051.128:109433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.1.9801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1439.778080][   T29] audit: type=1326 audit(2000000051.128:109434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.1.9801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1439.801793][   T29] audit: type=1326 audit(2000000051.128:109435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.2.9802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1439.825508][   T29] audit: type=1326 audit(2000000051.128:109436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.2.9802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1440.345074][T16071] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1440.502370][T16076] loop1: detected capacity change from 0 to 512
[ 1440.529172][T16076] /dev/loop1: Can't open blockdev
[ 1441.017228][T16088] bond6: entered promiscuous mode
[ 1441.023036][T16088] bond6: entered allmulticast mode
[ 1441.121498][T16088] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1441.140267][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9813'.
[ 1441.461861][T16159] loop1: detected capacity change from 0 to 512
[ 1441.480296][T16159] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1441.529525][T16159] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1441.534352][T16154] smc: net device lo applied user defined pnetid SYZ1
[ 1441.561838][T16159] EXT4-fs (loop1): 1 truncate cleaned up
[ 1441.573197][T16159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1441.704098][T16171] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1441.714047][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1441.865366][T16184] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1442.727049][T16208] loop1: detected capacity change from 0 to 512
[ 1442.752741][T16208] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1442.763140][T16208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1442.795735][T16208] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1442.838345][T16208] EXT4-fs (loop1): 1 truncate cleaned up
[ 1442.844453][T16208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1442.996108][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1443.217232][T16221] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1443.757325][ T4897] page_pool_release_retry() stalled pool shutdown: id 170, 1 inflight 60 sec
[ 1443.813586][T16234] loop5: detected capacity change from 0 to 512
[ 1443.822831][T16234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002]
[ 1443.831034][T16234] System zones: 1-12
[ 1443.836927][T16234] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 3: comm syz.5.9833: lblock 0 mapped to illegal pblock 3 (length 1)
[ 1443.852323][T16234] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.9833: error -117 reading directory block
[ 1443.886262][T16234] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[ 1443.917862][T16234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1443.947529][T16234] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.9833: corrupted xattr block 255: invalid header
[ 1443.996948][T16234] SELinux: (dev loop5, type ext4) getxattr errno 117
[ 1444.028291][T16234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1444.104325][T16246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[ 1444.432588][T16259] netlink: 'syz.1.9839': attribute type 29 has an invalid length.
[ 1444.497649][T16259] loop1: detected capacity change from 0 to 1024
[ 1444.512189][T16264] loop5: detected capacity change from 0 to 1024
[ 1444.520741][T16259] /dev/loop1: Can't open blockdev
[ 1444.542567][T16264] /dev/loop5: Can't open blockdev
[ 1444.783727][T16269] lo speed is unknown, defaulting to 1000
[ 1444.850782][T16269] lo speed is unknown, defaulting to 1000
[ 1444.889273][T16269] lo speed is unknown, defaulting to 1000
[ 1444.895614][T16269] lo speed is unknown, defaulting to 1000
[ 1445.130479][   T29] kauditd_printk_skb: 458 callbacks suppressed
[ 1445.130495][   T29] audit: type=1404 audit(2000000056.273:109895): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[ 1445.258370][   T29] audit: type=1404 audit(2000000056.292:109896): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[ 1445.273808][   T29] audit: type=1400 audit(2000000056.301:109897): avc:  denied  { prog_load } for  pid=16294 comm="syz.1.9844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1445.293206][   T29] audit: type=1400 audit(2000000056.301:109898): avc:  denied  { bpf } for  pid=16294 comm="syz.1.9844" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1445.314153][   T29] audit: type=1400 audit(2000000056.320:109899): avc:  denied  { module_request } for  pid=16294 comm="syz.1.9844" kmod="fs-ncpfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1445.336196][   T29] audit: type=1400 audit(2000000056.376:109900): avc:  denied  { map_create } for  pid=16294 comm="syz.1.9844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1445.355764][   T29] audit: type=1400 audit(2000000056.376:109901): avc:  denied  { create } for  pid=16294 comm="syz.1.9844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1445.811964][   T29] audit: type=1400 audit(2000000056.516:109902): avc:  denied  { write } for  pid=16294 comm="syz.1.9844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1445.831885][   T29] audit: type=1400 audit(2000000056.554:109903): avc:  denied  { watch } for  pid=16294 comm="syz.1.9844" path="/1929" dev="tmpfs" ino=10610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1445.854320][   T29] audit: type=1400 audit(2000000056.629:109904): avc:  denied  { recv } for  pid=11839 comm="kworker/u8:61" saddr=10.128.0.163 src=30030 daddr=10.128.1.59 dest=48736 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1445.884968][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9843'.
[ 1445.893973][T16299] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9843'.
[ 1445.926128][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9843'.
[ 1445.986397][T16299] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9843'.
[ 1446.816270][T16311] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1447.500804][T16330] netlink: 'syz.1.9852': attribute type 21 has an invalid length.
[ 1447.537312][T16330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9852'.
[ 1447.734445][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9854'.
[ 1448.065858][T16353] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1448.385171][T16356] loop5: detected capacity change from 0 to 1024
[ 1448.393012][T16356] /dev/loop5: Can't open blockdev
[ 1448.970822][T16372] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1449.341902][T16380] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1449.418680][T16390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=234 sclass=netlink_audit_socket pid=16390 comm=syz.2.9865
[ 1450.500584][   T29] kauditd_printk_skb: 203 callbacks suppressed
[ 1450.500601][   T29] audit: type=1400 audit(2000000061.296:110108): avc:  denied  { create } for  pid=16406 comm="syz.6.9868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1450.537273][T16418] pim6reg1: entered promiscuous mode
[ 1450.574179][   T29] audit: type=1400 audit(2000000061.352:110109): avc:  denied  { attach_queue } for  pid=16417 comm="syz.2.9871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1451.088902][   T29] audit: type=1400 audit(2000000061.848:110110): avc:  denied  { setopt } for  pid=16406 comm="syz.6.9868" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1451.133327][   T29] audit: type=1326 audit(2000000061.886:110111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1451.157275][   T29] audit: type=1326 audit(2000000061.886:110112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1451.181254][   T29] audit: type=1326 audit(2000000061.886:110113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1451.215839][T16441] lo speed is unknown, defaulting to 1000
[ 1451.284030][T16441] lo speed is unknown, defaulting to 1000
[ 1451.321206][T16441] lo speed is unknown, defaulting to 1000
[ 1451.327835][T16441] lo speed is unknown, defaulting to 1000
[ 1451.389475][   T29] audit: type=1400 audit(2000000061.942:110115): avc:  denied  { mount } for  pid=16431 comm="syz.1.9873" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1451.411825][   T29] audit: type=1400 audit(2000000061.942:110116): avc:  denied  { watch } for  pid=16431 comm="syz.1.9873" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[ 1451.433374][   T29] audit: type=1326 audit(2000000061.886:110114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1451.457348][   T29] audit: type=1326 audit(2000000061.951:110117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1451.529422][T16440] netlink: 'syz.2.9875': attribute type 3 has an invalid length.
[ 1451.537379][T16440] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9875'.
[ 1451.737644][T16469] bond6: entered promiscuous mode
[ 1451.742741][T16469] bond6: entered allmulticast mode
[ 1451.812478][T16469] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1451.901086][T16469] bond6 (unregistering): Released all slaves
[ 1451.961803][T16505] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1452.110675][T16546] netlink: 'syz.2.9879': attribute type 4 has an invalid length.
[ 1452.186255][T16546] lo speed is unknown, defaulting to 1000
[ 1452.416025][T16546] lo speed is unknown, defaulting to 1000
[ 1452.529394][T16546] lo speed is unknown, defaulting to 1000
[ 1452.545651][T16546] lo speed is unknown, defaulting to 1000
[ 1452.630884][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9881'.
[ 1453.758793][T16606] lo speed is unknown, defaulting to 1000
[ 1453.908351][T16606] lo speed is unknown, defaulting to 1000
[ 1453.990989][T16606] lo speed is unknown, defaulting to 1000
[ 1453.998004][T16606] lo speed is unknown, defaulting to 1000
[ 1454.862152][T16632] loop5: detected capacity change from 0 to 512
[ 1454.887216][T16632] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.9888: iget: bad i_size value: 38620345925642
[ 1454.928986][T16632] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.9888: couldn't read orphan inode 15 (err -117)
[ 1454.950983][T16632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1455.015231][T16632] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.9888: bg 0: block 5: invalid block bitmap
[ 1455.036572][T16632] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1455.049204][T16632] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1455.049204][T16632] 
[ 1455.059253][T16632] EXT4-fs (loop5): Total free blocks count 0
[ 1455.065524][T16632] EXT4-fs (loop5): Free/Dirty block details
[ 1455.071600][T16632] EXT4-fs (loop5): free_blocks=0
[ 1455.076605][T16632] EXT4-fs (loop5): dirty_blocks=16
[ 1455.081833][T16632] EXT4-fs (loop5): Block reservation details
[ 1455.087845][T16632] EXT4-fs (loop5): i_reserved_data_blocks=16
[ 1455.244147][T16640] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9890'.
[ 1455.284090][T16644] netlink: 328 bytes leftover after parsing attributes in process `syz.0.9889'.
[ 1455.295011][T16640] loop1: detected capacity change from 0 to 8192
[ 1455.297247][T16639] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1455.325519][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1455.692694][T16667] hub 1-0:1.0: USB hub found
[ 1455.692881][T16667] hub 1-0:1.0: 8 ports detected
[ 1455.819046][T16681] loop1: detected capacity change from 0 to 512
[ 1455.822485][T16681] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.9896: iget: bad i_size value: 38620345925642
[ 1455.850182][T16681] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.9896: couldn't read orphan inode 15 (err -117)
[ 1455.864127][T16681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1455.867282][T16679] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9896: bg 0: block 5: invalid block bitmap
[ 1455.867730][T16679] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1455.867794][T16679] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1455.867794][T16679] 
[ 1455.867809][T16679] EXT4-fs (loop1): Total free blocks count 0
[ 1455.867825][T16679] EXT4-fs (loop1): Free/Dirty block details
[ 1455.867838][T16679] EXT4-fs (loop1): free_blocks=0
[ 1455.867901][T16679] EXT4-fs (loop1): dirty_blocks=16
[ 1455.867914][T16679] EXT4-fs (loop1): Block reservation details
[ 1455.867926][T16679] EXT4-fs (loop1): i_reserved_data_blocks=16
[ 1456.007683][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1456.038669][T16692] lo speed is unknown, defaulting to 1000
[ 1456.054200][T16688] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1456.114107][T16696] program syz.1.9899 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1456.167250][T16692] lo speed is unknown, defaulting to 1000
[ 1456.208327][T16692] lo speed is unknown, defaulting to 1000
[ 1456.216075][T16692] lo speed is unknown, defaulting to 1000
[ 1456.225738][   T29] kauditd_printk_skb: 284 callbacks suppressed
[ 1456.225756][   T29] audit: type=1326 audit(2000000066.656:110402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.309354][   T29] audit: type=1326 audit(2000000066.731:110403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.376841][   T29] audit: type=1326 audit(2000000066.731:110404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.400687][   T29] audit: type=1326 audit(2000000066.750:110405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.424691][   T29] audit: type=1326 audit(2000000066.750:110406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.448487][   T29] audit: type=1326 audit(2000000066.750:110407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.472541][   T29] audit: type=1326 audit(2000000066.759:110408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.496288][   T29] audit: type=1326 audit(2000000066.759:110409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.520263][   T29] audit: type=1326 audit(2000000066.759:110410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.544491][   T29] audit: type=1326 audit(2000000066.759:110411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.0.9898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1456.913394][T16732] loop5: detected capacity change from 0 to 512
[ 1456.992693][T16732] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.9903: iget: bad i_size value: 38620345925642
[ 1457.027964][T16732] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.9903: couldn't read orphan inode 15 (err -117)
[ 1457.172684][T16729] loop1: detected capacity change from 0 to 512
[ 1457.241693][T16729] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1457.467089][T16729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1457.596066][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9910'.
[ 1457.671103][T16729] EXT4-fs (loop1): 1 truncate cleaned up
[ 1457.710451][T16729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1457.916914][T16732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1457.954212][T16730] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.9903: bg 0: block 5: invalid block bitmap
[ 1458.033117][T16730] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1458.045739][T16730] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1458.045739][T16730] 
[ 1458.055682][T16730] EXT4-fs (loop5): Total free blocks count 0
[ 1458.061967][T16730] EXT4-fs (loop5): Free/Dirty block details
[ 1458.067900][T16730] EXT4-fs (loop5): free_blocks=0
[ 1458.073030][T16730] EXT4-fs (loop5): dirty_blocks=16
[ 1458.078374][T16730] EXT4-fs (loop5): Block reservation details
[ 1458.084689][T16730] EXT4-fs (loop5): i_reserved_data_blocks=16
[ 1458.187001][T16731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[ 1458.193596][T16731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1458.201237][T16731] vhci_hcd vhci_hcd.0: Device attached
[ 1458.295516][T16729] 9pnet_fd: Insufficient options for proto=fd
[ 1458.339269][T16759] vhci_hcd: connection closed
[ 1458.339754][T11799] vhci_hcd: stop threads
[ 1458.348781][T11799] vhci_hcd: release socket
[ 1458.353467][T11799] vhci_hcd: disconnect device
[ 1458.377464][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1458.924707][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1459.300311][T16780] netlink: 328 bytes leftover after parsing attributes in process `syz.2.9911'.
[ 1460.426140][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9914'.
[ 1460.468894][T16802] 0ªX¹¦D: left allmulticast mode
[ 1460.484592][T16802] dummy0: left promiscuous mode
[ 1460.491822][T16802] net_ratelimit: 41 callbacks suppressed
[ 1460.491835][T16802] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[ 1460.532773][T16802] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9916'.
[ 1460.578513][T16802] loop5: detected capacity change from 0 to 512
[ 1460.587059][T16802] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1460.607646][T16802] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.9916: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2308(4), depth 0(0)
[ 1460.627795][T16802] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9916: Bad quota inode: 4, type: 1
[ 1460.639861][T16802] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1460.656312][T16802] EXT4-fs (loop5): mount failed
[ 1460.933750][T16818] lo speed is unknown, defaulting to 1000
[ 1461.063990][T16818] lo speed is unknown, defaulting to 1000
[ 1461.134015][T16818] lo speed is unknown, defaulting to 1000
[ 1461.140824][T16818] lo speed is unknown, defaulting to 1000
[ 1461.938351][   T29] kauditd_printk_skb: 59 callbacks suppressed
[ 1461.938370][   T29] audit: type=1326 audit(2000000071.997:110471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.1.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1461.979197][   T29] audit: type=1326 audit(2000000072.035:110472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.1.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1462.031166][   T29] audit: type=1400 audit(2000000072.072:110473): avc:  denied  { getopt } for  pid=16843 comm="syz.1.9920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1462.051505][   T29] audit: type=1400 audit(2000000072.072:110474): avc:  denied  { connect } for  pid=16843 comm="syz.1.9920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1462.085216][   T29] audit: type=1400 audit(2000000072.138:110475): avc:  denied  { ioctl } for  pid=16843 comm="syz.1.9920" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1462.147766][   T29] audit: type=1326 audit(2000000072.194:110476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.1.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1462.171921][   T29] audit: type=1326 audit(2000000072.194:110477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.1.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1462.382272][T16858] loop5: detected capacity change from 0 to 1024
[ 1462.403648][   T29] audit: type=1400 audit(2000000072.250:110478): avc:  denied  { bind } for  pid=16849 comm="syz.2.9922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1462.481661][T16858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1462.540111][T16864] netlink: 'syz.1.9924': attribute type 27 has an invalid length.
[ 1462.550481][   T29] audit: type=1400 audit(2000000072.484:110479): avc:  denied  { name_connect } for  pid=16859 comm="syz.1.9924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1462.571235][   T29] audit: type=1400 audit(2000000072.549:110480): avc:  denied  { write } for  pid=16859 comm="syz.1.9924" lport=51368 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1462.604806][T16858] ext4 filesystem being mounted at /1953/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1462.625984][T16864] 1ªX¹¦D: left allmulticast mode
[ 1462.661639][T16864] 9pnet_virtio: no channels available for device 
[ 1462.797527][T16858] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[ 1462.818809][T16858] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28
[ 1462.834878][T16858] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1462.834878][T16858] 
[ 1462.845619][T16858] EXT4-fs (loop5): Total free blocks count 0
[ 1462.852416][T16858] EXT4-fs (loop5): Free/Dirty block details
[ 1462.859444][T16858] EXT4-fs (loop5): free_blocks=4293918720
[ 1462.866084][T16858] EXT4-fs (loop5): dirty_blocks=48
[ 1462.871854][T16858] EXT4-fs (loop5): Block reservation details
[ 1462.878429][T16858] EXT4-fs (loop5): i_reserved_data_blocks=3
[ 1462.960367][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1463.064791][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9929'.
[ 1463.085568][T16886] IPVS: Unknown mcast interface: vcan0
[ 1463.329611][T16891] lo speed is unknown, defaulting to 1000
[ 1463.443843][T16891] lo speed is unknown, defaulting to 1000
[ 1463.507823][T16891] lo speed is unknown, defaulting to 1000
[ 1463.514390][T16891] lo speed is unknown, defaulting to 1000
[ 1463.823722][T16890] loop1: detected capacity change from 0 to 1024
[ 1463.881687][T16890] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent
[ 1464.016051][T16890] 9pnet_fd: Insufficient options for proto=fd
[ 1464.943276][T16936] lo speed is unknown, defaulting to 1000
[ 1465.057057][T16936] lo speed is unknown, defaulting to 1000
[ 1465.121728][T16936] lo speed is unknown, defaulting to 1000
[ 1465.128621][T16936] lo speed is unknown, defaulting to 1000
[ 1465.347802][T16961] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1466.003721][T16972] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9936'.
[ 1466.150555][T16985] ip6tnl1: entered allmulticast mode
[ 1466.788483][T16972] Set syz1 is full, maxelem 65536 reached
[ 1467.005629][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.013262][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.020870][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.041292][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.048976][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.056569][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.064375][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.072142][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.079604][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.087135][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.094556][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.102180][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.109815][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.117381][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.122807][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.124940][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.124967][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.125044][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.125080][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.138695][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.140852][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.178267][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.185789][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.193335][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.200760][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.208289][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.215736][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.223294][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.230716][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.238144][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.245660][ T3388] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0
[ 1467.258002][T17001] lo speed is unknown, defaulting to 1000
[ 1467.302472][   T29] kauditd_printk_skb: 91 callbacks suppressed
[ 1467.302533][   T29] audit: type=1326 audit(2000000077.002:110572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17004 comm="syz.5.9944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17a791e963 code=0x7ffc0000
[ 1467.335553][T17001] lo speed is unknown, defaulting to 1000
[ 1467.373250][T17001] lo speed is unknown, defaulting to 1000
[ 1467.379349][T17001] lo speed is unknown, defaulting to 1000
[ 1467.451245][   T29] audit: type=1326 audit(2000000077.123:110573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1467.475303][   T29] audit: type=1326 audit(2000000077.123:110574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1467.499283][   T29] audit: type=1400 audit(2000000077.123:110575): avc:  denied  { ioctl } for  pid=16994 comm="syz.1.9940" path="socket:[156829]" dev="sockfs" ino=156829 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1467.512301][ T3388] hid-generic 0000:0000:0000.012F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1467.525061][   T29] audit: type=1326 audit(2000000077.151:110576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.2.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88bb2a11e5 code=0x7ffc0000
[ 1467.646861][   T29] audit: type=1326 audit(2000000077.320:110577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17032 comm="syz.2.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1467.727254][T17048] sd 0:0:1:0: device reset
[ 1467.731765][   T29] audit: type=1326 audit(2000000077.404:110578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.2.9945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1467.755633][   T29] audit: type=1326 audit(2000000077.404:110579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.2.9945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1467.779447][   T29] audit: type=1326 audit(2000000077.413:110580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.2.9945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88bb26d290 code=0x7ffc0000
[ 1467.803618][   T29] audit: type=1326 audit(2000000077.413:110581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.2.9945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1467.842405][T17014] loop5: detected capacity change from 0 to 512
[ 1467.863156][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9945'.
[ 1468.085734][T17056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9947'.
[ 1468.173267][T17014] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1468.200577][T17014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1468.226641][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9946'.
[ 1468.473189][T17014] EXT4-fs (loop5): 1 truncate cleaned up
[ 1468.521164][T17014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1468.593859][T17005] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[ 1468.600547][T17005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1468.608255][T17005] vhci_hcd vhci_hcd.0: Device attached
[ 1468.656503][T17005] IPv6: Can't replace route, no match found
[ 1468.668353][T17005] 9pnet_fd: Insufficient options for proto=fd
[ 1468.697884][T17073] vhci_hcd: connection closed
[ 1468.699817][T11839] vhci_hcd: stop threads
[ 1468.708870][T11839] vhci_hcd: release socket
[ 1468.713747][T11839] vhci_hcd: disconnect device
[ 1468.739192][T17076] netlink: 'syz.2.9951': attribute type 1 has an invalid length.
[ 1468.747261][T17076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9951'.
[ 1469.168457][T17084] SET target dimension over the limit!
[ 1469.272795][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1469.781343][T17108] loop5: detected capacity change from 0 to 512
[ 1469.856494][T17108] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.9957: casefold flag without casefold feature
[ 1469.917100][T17108] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.9957: couldn't read orphan inode 15 (err -117)
[ 1469.960098][T17109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9956'.
[ 1469.970214][T17108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1470.033522][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1470.060239][T17117] __vm_enough_memory: pid: 17117, comm: syz.5.9959, bytes: 21199868268544 not enough memory for the allocation
[ 1470.303254][T17124] loop1: detected capacity change from 0 to 164
[ 1470.408230][T17117] loop5: detected capacity change from 0 to 512
[ 1470.466240][T17124] SELinux: failed to load policy
[ 1470.470063][T17117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1470.541068][T17117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[ 1470.589983][T17117] System zones: 1-12
[ 1470.605715][T17117] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.9959: missing EA_INODE flag
[ 1470.665758][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9958'.
[ 1470.687036][T17117] EXT4-fs (loop5): Remounting filesystem read-only
[ 1470.717776][T17117] EXT4-fs (loop5): 1 orphan inode deleted
[ 1470.756436][T17117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1470.810832][T17117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1471.235539][T17144] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1471.246022][T17168] loop1: detected capacity change from 0 to 512
[ 1471.246462][T17168] EXT4-fs: Ignoring removed i_version option
[ 1471.296271][T17168] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1471.313123][T17168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9967: bg 0: block 131: padding at end of block bitmap is not set
[ 1471.313429][T17168] EXT4-fs (loop1): Remounting filesystem read-only
[ 1471.313495][T17168] EXT4-fs (loop1): 1 truncate cleaned up
[ 1471.314205][T17168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1471.400719][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9967'.
[ 1471.427664][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1471.450770][T17188] netlink: 332 bytes leftover after parsing attributes in process `syz.1.9973'.
[ 1471.469030][T17188] netlink: 'syz.1.9973': attribute type 9 has an invalid length.
[ 1471.477116][T17188] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9973'.
[ 1471.486501][T17188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9973'.
[ 1471.503232][T17188] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9973'.
[ 1471.537955][T17183] netlink: 'syz.5.9972': attribute type 3 has an invalid length.
[ 1471.784080][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9975'.
[ 1471.950072][T17208] 9pnet_fd: Insufficient options for proto=fd
[ 1472.209500][T17216] loop1: detected capacity change from 0 to 1024
[ 1472.217847][T17216] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[ 1472.228474][T17216] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1472.239900][T17216] EXT4-fs (loop1): invalid journal inode
[ 1472.245618][T17216] EXT4-fs (loop1): can't get journal size
[ 1472.252904][T17216] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.9980: blocks 48-48 from inode overlap system zone
[ 1472.267414][T17216] EXT4-fs (loop1): failed to initialize system zone (-117)
[ 1472.275107][T17216] EXT4-fs (loop1): mount failed
[ 1472.579454][T17236] lo speed is unknown, defaulting to 1000
[ 1472.692522][T17236] lo speed is unknown, defaulting to 1000
[ 1472.757191][T17236] lo speed is unknown, defaulting to 1000
[ 1472.763709][T17236] lo speed is unknown, defaulting to 1000
[ 1473.087551][   T29] kauditd_printk_skb: 451 callbacks suppressed
[ 1473.087568][   T29] audit: type=1400 audit(2000000082.427:111033): avc:  denied  { connect } for  pid=17239 comm="syz.2.9987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1473.292491][   T29] audit: type=1400 audit(2000000082.511:111034): avc:  denied  { connect } for  pid=17239 comm="syz.2.9987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1473.547322][   T29] audit: type=1400 audit(2000000082.857:111035): avc:  denied  { connect } for  pid=17272 comm="syz.5.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1473.618791][   T29] audit: type=1400 audit(2000000082.895:111036): avc:  denied  { ioctl } for  pid=17272 comm="syz.5.9988" path="socket:[157729]" dev="sockfs" ino=157729 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1473.719493][   T29] audit: type=1400 audit(2000000082.998:111037): avc:  denied  { write } for  pid=17272 comm="syz.5.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1473.885635][T17282] hub 4-0:1.0: USB hub found
[ 1473.890364][T17282] hub 4-0:1.0: 8 ports detected
[ 1474.049097][ T6674] hid-generic 0000:0004:0000.0130: unknown main item tag 0x0
[ 1474.056687][ T6674] hid-generic 0000:0004:0000.0130: unknown main item tag 0x0
[ 1474.064142][ T6674] hid-generic 0000:0004:0000.0130: unknown main item tag 0x0
[ 1474.090174][ T6674] hid-generic 0000:0004:0000.0130: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1474.130485][   T29] audit: type=1326 audit(2000000083.409:111038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.2.9993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1474.180893][   T29] audit: type=1326 audit(2000000083.409:111039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.2.9993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1474.204684][   T29] audit: type=1326 audit(2000000083.409:111040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.2.9993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1474.228560][   T29] audit: type=1326 audit(2000000083.409:111041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.2.9993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1474.252569][   T29] audit: type=1326 audit(2000000083.409:111042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.2.9993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1474.355397][T17311] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1474.508295][T17321] loop5: detected capacity change from 0 to 512
[ 1474.557047][T17321] EXT4-fs (loop5): too many log groups per flexible block group
[ 1474.565129][T17321] EXT4-fs (loop5): failed to initialize mballoc (-12)
[ 1474.588321][T17321] EXT4-fs (loop5): mount failed
[ 1474.635901][T17333] blktrace: Concurrent blktraces are not allowed on loop3
[ 1474.878105][T17321] loop5: detected capacity change from 0 to 8192
[ 1474.943856][T17321]  loop5: p3
[ 1474.949224][T17339] __vm_enough_memory: pid: 17339, comm: syz.1.10004, bytes: 21199878463488 not enough memory for the allocation
[ 1475.566860][T17339] loop1: detected capacity change from 0 to 512
[ 1475.677023][T17339] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1475.740535][T17339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[ 1475.776795][T17339] System zones: 1-12
[ 1475.844177][T17339] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.10004: missing EA_INODE flag
[ 1475.942709][T17339] EXT4-fs (loop1): Remounting filesystem read-only
[ 1476.000402][T17339] EXT4-fs (loop1): 1 orphan inode deleted
[ 1476.046161][T17339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1476.152879][T17339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1476.727874][T17400] netlink: 'syz.1.10016': attribute type 3 has an invalid length.
[ 1476.770927][T17401] netlink: 'syz.5.10017': attribute type 1 has an invalid length.
[ 1476.847754][T17401] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1476.984526][T17437] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1477.591047][T17458] __nla_validate_parse: 1 callbacks suppressed
[ 1477.591068][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10025'.
[ 1477.664902][T17473] blktrace: Concurrent blktraces are not allowed on loop11
[ 1477.829659][T17477] __vm_enough_memory: pid: 17477, comm: syz.6.10026, bytes: 21200031694848 not enough memory for the allocation
[ 1477.843150][T17475] netlink: 'syz.2.10030': attribute type 3 has an invalid length.
[ 1477.927741][T17483] loop5: detected capacity change from 0 to 512
[ 1477.942115][T17483] /dev/loop5: Can't open blockdev
[ 1478.029289][T17486] netlink: 'syz.2.10031': attribute type 1 has an invalid length.
[ 1478.327003][T17486] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1478.412195][T17488] bond6: (slave gretap0): making interface the new active one
[ 1478.459786][T17488] bond6: (slave gretap0): Enslaving as an active interface with an up link
[ 1478.575538][T17527] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1478.705539][   T29] kauditd_printk_skb: 232 callbacks suppressed
[ 1478.705558][   T29] audit: type=1326 audit(2000000087.684:111276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1478.735813][   T29] audit: type=1326 audit(2000000087.684:111277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1478.907971][   T29] audit: type=1400 audit(2000000087.759:111278): avc:  denied  { append } for  pid=17543 comm="syz.2.10041" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1478.932162][   T29] audit: type=1326 audit(2000000087.777:111279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1478.956131][   T29] audit: type=1326 audit(2000000087.777:111280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1478.979993][   T29] audit: type=1326 audit(2000000087.777:111281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1479.003815][   T29] audit: type=1326 audit(2000000087.815:111282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1479.027685][   T29] audit: type=1326 audit(2000000087.815:111283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1479.051623][   T29] audit: type=1326 audit(2000000087.815:111284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1479.076325][   T29] audit: type=1326 audit(2000000087.852:111285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17522 comm="syz.0.10033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb165b3e929 code=0x7ffc0000
[ 1479.479119][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10045'.
[ 1479.996750][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10049'.
[ 1480.863229][T17604] loop5: detected capacity change from 0 to 1024
[ 1480.917270][T17604] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[ 1480.949266][T17604] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1480.992046][T17604] EXT4-fs (loop5): invalid journal inode
[ 1481.002802][T17604] EXT4-fs (loop5): can't get journal size
[ 1481.025798][T17612] hub 4-0:1.0: USB hub found
[ 1481.035404][T17604] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.10054: blocks 48-48 from inode overlap system zone
[ 1481.035780][T17612] hub 4-0:1.0: 8 ports detected
[ 1481.090382][T17604] EXT4-fs (loop5): failed to initialize system zone (-117)
[ 1481.163632][T17604] EXT4-fs (loop5): mount failed
[ 1481.277603][T17624] loop5: detected capacity change from 0 to 512
[ 1481.310913][T17624] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.10058: iget: bad i_size value: 38620345925642
[ 1481.368424][T17624] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.10058: couldn't read orphan inode 15 (err -117)
[ 1481.419534][T17624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1481.488598][T17624] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10058: bg 0: block 5: invalid block bitmap
[ 1481.549218][T17624] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1481.561921][T17624] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1481.561921][T17624] 
[ 1481.571901][T17624] EXT4-fs (loop5): Total free blocks count 0
[ 1481.578081][T17624] EXT4-fs (loop5): Free/Dirty block details
[ 1481.584102][T17624] EXT4-fs (loop5): free_blocks=0
[ 1481.589165][T17624] EXT4-fs (loop5): dirty_blocks=16
[ 1481.594451][T17624] EXT4-fs (loop5): Block reservation details
[ 1481.600450][T17624] EXT4-fs (loop5): i_reserved_data_blocks=16
[ 1481.803722][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1481.953313][T17657] netlink: 516 bytes leftover after parsing attributes in process `syz.2.10064'.
[ 1481.986137][T17659] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1482.687212][T17675] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1482.952915][T17685] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10072'.
[ 1483.918211][T17709] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1484.061562][   T29] kauditd_printk_skb: 148 callbacks suppressed
[ 1484.061582][   T29] audit: type=1326 audit(2000000092.698:111433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e7828d3df code=0x7ffc0000
[ 1484.107691][T17717] loop1: detected capacity change from 0 to 2048
[ 1484.146592][   T29] audit: type=1326 audit(2000000092.735:111434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e7828e9b7 code=0x7ffc0000
[ 1484.170483][   T29] audit: type=1326 audit(2000000092.735:111435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e7828d290 code=0x7ffc0000
[ 1484.194560][   T29] audit: type=1326 audit(2000000092.735:111436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e7828e52b code=0x7ffc0000
[ 1484.218733][   T29] audit: type=1326 audit(2000000092.754:111437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e7828d58a code=0x7ffc0000
[ 1484.243174][   T29] audit: type=1326 audit(2000000092.754:111438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e7828d58a code=0x7ffc0000
[ 1484.267011][   T29] audit: type=1326 audit(2000000092.754:111439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2e7828d197 code=0x7ffc0000
[ 1484.291196][   T29] audit: type=1326 audit(2000000092.754:111440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2e782900ca code=0x7ffc0000
[ 1484.386961][T17723] blktrace: Concurrent blktraces are not allowed on loop11
[ 1484.394716][   T29] audit: type=1326 audit(2000000092.913:111441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e7828d290 code=0x7ffc0000
[ 1484.418872][   T29] audit: type=1326 audit(2000000092.913:111442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.1.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2e7828d677 code=0x7ffc0000
[ 1485.019688][T17747] loop1: detected capacity change from 0 to 512
[ 1485.034100][T17747] EXT4-fs: Ignoring removed oldalloc option
[ 1485.056399][T17747] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.10093: Parent and EA inode have the same ino 15
[ 1485.087699][T17747] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.10093: Parent and EA inode have the same ino 15
[ 1485.129940][T17747] EXT4-fs (loop1): 1 orphan inode deleted
[ 1485.136435][T17747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1485.230605][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1485.291868][T17761] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1485.337522][T17751] netlink: zone id is out of range
[ 1485.371628][T17751] netlink: zone id is out of range
[ 1485.460436][T17751] netlink: zone id is out of range
[ 1485.478906][T17751] netlink: zone id is out of range
[ 1485.522241][T17751] netlink: zone id is out of range
[ 1485.527685][T17776] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[ 1485.534345][T17776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1485.542000][T17776] vhci_hcd vhci_hcd.0: Device attached
[ 1485.559116][T17751] netlink: zone id is out of range
[ 1485.564290][T17751] netlink: zone id is out of range
[ 1485.575422][T17776] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12)
[ 1485.582060][T17776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1485.590114][T17776] vhci_hcd vhci_hcd.0: Device attached
[ 1485.611715][T17776] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1485.638554][T17776] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16)
[ 1485.645222][T17776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1485.652887][T17776] vhci_hcd vhci_hcd.0: Device attached
[ 1485.676508][T17776] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19)
[ 1485.683164][T17776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1485.690943][T17776] vhci_hcd vhci_hcd.0: Device attached
[ 1485.733255][T17787] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1485.741698][T17776] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(21)
[ 1485.748418][T17776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1485.756155][T17776] vhci_hcd vhci_hcd.0: Device attached
[ 1485.761985][ T3388] vhci_hcd: vhci_device speed not set
[ 1485.770971][T17776] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1485.784978][T17776] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(25)
[ 1485.791796][T17776] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1485.799608][T17776] vhci_hcd vhci_hcd.0: Device attached
[ 1485.836672][ T3388] usb 11-1: new low-speed USB device number 6 using vhci_hcd
[ 1485.866814][T17776] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1485.900452][T17776] vhci_hcd vhci_hcd.0: port 0 already used
[ 1485.949812][T17751] netlink: zone id is out of range
[ 1486.043181][T17805] bond7: entered promiscuous mode
[ 1486.048328][T17805] bond7: entered allmulticast mode
[ 1486.070654][T17805] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1486.110774][T17751] netlink: zone id is out of range
[ 1486.123244][T17751] netlink: zone id is out of range
[ 1486.274001][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.281463][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.288977][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.350970][T17792] vhci_hcd: connection closed
[ 1486.351343][T17779] vhci_hcd: connection closed
[ 1486.351667][T17784] vhci_hcd: connection closed
[ 1486.359631][T11836] vhci_hcd: stop threads
[ 1486.369738][T11836] vhci_hcd: release socket
[ 1486.369849][T17796] vhci_hcd: connection closed
[ 1486.374202][T11836] vhci_hcd: disconnect device
[ 1486.374571][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.379607][T17777] vhci_hcd: connection reset by peer
[ 1486.383783][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.404172][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.411600][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.419141][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.426650][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.434112][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.441532][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.448994][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.455874][T17790] vhci_hcd: connection closed
[ 1486.456467][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1486.458556][T17860] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1486.532303][T17867] lo speed is unknown, defaulting to 1000
[ 1486.652554][T17867] lo speed is unknown, defaulting to 1000
[ 1486.711810][T17867] lo speed is unknown, defaulting to 1000
[ 1486.718600][T17867] lo speed is unknown, defaulting to 1000
[ 1487.242898][T11836] vhci_hcd: stop threads
[ 1487.247248][T11836] vhci_hcd: release socket
[ 1487.251731][T11836] vhci_hcd: disconnect device
[ 1487.442326][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.449821][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.457287][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.464766][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.472409][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.479886][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.481657][T11836] vhci_hcd: stop threads
[ 1487.487414][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.487465][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.487488][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.491926][T11836] vhci_hcd: release socket
[ 1487.499324][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.506731][T11836] vhci_hcd: disconnect device
[ 1487.530921][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.538461][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.545957][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.553382][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.560842][ T6674] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0
[ 1487.606583][T11836] vhci_hcd: stop threads
[ 1487.611118][T11836] vhci_hcd: release socket
[ 1487.615753][T11836] vhci_hcd: disconnect device
[ 1487.631819][T11836] vhci_hcd: stop threads
[ 1487.636111][T11836] vhci_hcd: release socket
[ 1487.640587][T11836] vhci_hcd: disconnect device
[ 1487.659089][T11836] vhci_hcd: stop threads
[ 1487.663664][T11836] vhci_hcd: release socket
[ 1487.668378][T11836] vhci_hcd: disconnect device
[ 1487.713496][ T6674] hid-generic 0000:0000:0000.0131: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1488.027220][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10111'.
[ 1488.095857][T17904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.108389][T17904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.885074][T17933] loop1: detected capacity change from 0 to 512
[ 1488.913632][T17933] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.10129: iget: bad i_size value: 38620345925642
[ 1488.979984][T17933] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.10129: couldn't read orphan inode 15 (err -117)
[ 1489.025292][T17933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1489.087451][T17933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.10129: bg 0: block 5: invalid block bitmap
[ 1489.142909][T17943] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1489.154009][T17933] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1489.166384][T17933] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1489.166384][T17933] 
[ 1489.176165][T17933] EXT4-fs (loop1): Total free blocks count 0
[ 1489.182286][T17933] EXT4-fs (loop1): Free/Dirty block details
[ 1489.188271][T17933] EXT4-fs (loop1): free_blocks=0
[ 1489.193424][T17933] EXT4-fs (loop1): dirty_blocks=16
[ 1489.198825][T17933] EXT4-fs (loop1): Block reservation details
[ 1489.204968][T17933] EXT4-fs (loop1): i_reserved_data_blocks=16
[ 1489.270376][T17943] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1489.324234][T17943] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1489.383915][T17943] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1489.387858][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1489.586835][T17943] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1489.635573][T17943] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1489.662806][T17973] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1489.673583][T17943] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1489.719616][T17943] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1490.200800][T17996] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1490.230561][   T29] kauditd_printk_skb: 233 callbacks suppressed
[ 1490.230655][   T29] audit: type=1326 audit(2000000098.469:111676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.260784][   T29] audit: type=1326 audit(2000000098.469:111677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.336078][   T29] audit: type=1326 audit(2000000098.516:111678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.360041][   T29] audit: type=1326 audit(2000000098.516:111679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.384086][   T29] audit: type=1326 audit(2000000098.516:111680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.408150][   T29] audit: type=1326 audit(2000000098.516:111681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.432054][   T29] audit: type=1326 audit(2000000098.516:111682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.456059][   T29] audit: type=1326 audit(2000000098.516:111683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.479925][   T29] audit: type=1326 audit(2000000098.516:111684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.503945][   T29] audit: type=1326 audit(2000000098.516:111685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.2.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1490.703341][T18009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1490.829258][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1490.859536][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1490.867491][T18017] loop1: detected capacity change from 0 to 512
[ 1490.877029][T18017] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.10138: iget: bad i_size value: 38620345925642
[ 1490.891108][T18017] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.10138: couldn't read orphan inode 15 (err -117)
[ 1490.905094][T18017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1490.920620][T18017] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.10138: bg 0: block 5: invalid block bitmap
[ 1490.933897][T18017] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1490.946521][T18017] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1490.946521][T18017] 
[ 1490.956381][T18017] EXT4-fs (loop1): Total free blocks count 0
[ 1490.962402][T18017] EXT4-fs (loop1): Free/Dirty block details
[ 1490.968510][T18017] EXT4-fs (loop1): free_blocks=0
[ 1490.973778][T18017] EXT4-fs (loop1): dirty_blocks=16
[ 1490.979117][T18017] EXT4-fs (loop1): Block reservation details
[ 1490.985127][T18017] EXT4-fs (loop1): i_reserved_data_blocks=16
[ 1491.022639][T17994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10141'.
[ 1491.039143][T18013] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1491.085903][T18028] netlink: 'syz.0.10139': attribute type 21 has an invalid length.
[ 1491.094154][T18028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10139'.
[ 1491.114056][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1491.294043][ T3388] usb 11-1: enqueue for inactive port 0
[ 1491.300093][ T3388] usb 11-1: enqueue for inactive port 0
[ 1491.321189][T18040] blktrace: Concurrent blktraces are not allowed on loop3
[ 1491.397331][ T3388] vhci_hcd: vhci_device speed not set
[ 1492.010768][T18057] loop5: detected capacity change from 0 to 512
[ 1492.037120][T18057] /dev/loop5: Can't open blockdev
[ 1493.076236][T18065] loop1: detected capacity change from 0 to 512
[ 1493.085869][T18065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1493.117054][T18048] lo speed is unknown, defaulting to 1000
[ 1493.233072][T18048] lo speed is unknown, defaulting to 1000
[ 1493.283426][T18048] lo speed is unknown, defaulting to 1000
[ 1493.289699][T18048] lo speed is unknown, defaulting to 1000
[ 1493.380927][T18065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1493.393729][T18065] ext4 filesystem being mounted at /2011/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1493.803571][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1493.880671][T18106] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1493.995797][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10154'.
[ 1494.017906][T18125] loop1: detected capacity change from 0 to 128
[ 1494.025696][T18125] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1494.025929][T18125] ext4 filesystem being mounted at /2012/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1494.414327][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10156'.
[ 1494.423643][T18141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10156'.
[ 1494.459775][T18141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10156'.
[ 1494.481826][T18141] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10156'.
[ 1494.836155][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1495.174888][T18181] 0ªX¹¦D: left allmulticast mode
[ 1495.252489][T18189] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10167'.
[ 1495.296677][T18181] net_ratelimit: 41 callbacks suppressed
[ 1495.296692][T18181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1495.332243][T18191] loop5: detected capacity change from 0 to 512
[ 1495.339691][T18191] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1495.346138][T18191] EXT4-fs: Ignoring removed bh option
[ 1495.366696][T18184] lo speed is unknown, defaulting to 1000
[ 1495.482232][T18184] lo speed is unknown, defaulting to 1000
[ 1495.543956][T18184] lo speed is unknown, defaulting to 1000
[ 1495.550694][T18184] lo speed is unknown, defaulting to 1000
[ 1495.591835][T18191] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1495.624772][T18191] EXT4-fs (loop5): 1 truncate cleaned up
[ 1495.631475][T18191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1495.996839][   T29] kauditd_printk_skb: 99 callbacks suppressed
[ 1495.996858][   T29] audit: type=1326 audit(2000000103.848:111785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18218 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0055e929 code=0x7ffc0000
[ 1496.026995][   T29] audit: type=1326 audit(2000000103.848:111786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18218 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0055e929 code=0x7ffc0000
[ 1496.047357][ T4897] usb usb12-port1: attempt power cycle
[ 1496.058300][   T29] audit: type=1326 audit(2000000103.913:111787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18218 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f1d0055e929 code=0x7ffc0000
[ 1496.082371][   T29] audit: type=1326 audit(2000000103.913:111788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18218 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0055e929 code=0x7ffc0000
[ 1496.106306][   T29] audit: type=1326 audit(2000000103.913:111789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18218 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0055e929 code=0x7ffc0000
[ 1496.147297][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.244753][T18228] loop5: detected capacity change from 0 to 512
[ 1496.328575][T18228] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.10172: iget: bad i_size value: 38620345925642
[ 1496.345153][T18228] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.10172: couldn't read orphan inode 15 (err -117)
[ 1496.360192][T18228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1496.407349][T18227] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10172: bg 0: block 5: invalid block bitmap
[ 1496.502293][T18234] lo speed is unknown, defaulting to 1000
[ 1496.619372][T18234] lo speed is unknown, defaulting to 1000
[ 1496.684148][T18234] lo speed is unknown, defaulting to 1000
[ 1496.691158][T18234] lo speed is unknown, defaulting to 1000
[ 1496.886443][T18234] loop2: detected capacity change from 0 to 512
[ 1496.893474][T18234] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1496.899944][T18234] EXT4-fs: Ignoring removed bh option
[ 1496.918116][T18234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1496.993748][T18227] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1497.006208][T18227] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1497.006208][T18227] 
[ 1497.016033][T18227] EXT4-fs (loop5): Total free blocks count 0
[ 1497.022251][T18227] EXT4-fs (loop5): Free/Dirty block details
[ 1497.028291][T18227] EXT4-fs (loop5): free_blocks=0
[ 1497.033486][T18227] EXT4-fs (loop5): dirty_blocks=16
[ 1497.038734][T18227] EXT4-fs (loop5): Block reservation details
[ 1497.044930][T18227] EXT4-fs (loop5): i_reserved_data_blocks=16
[ 1497.076657][T18234] EXT4-fs (loop2): 1 truncate cleaned up
[ 1497.083607][T18234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1497.220483][   T29] audit: type=1326 audit(2000000104.858:111790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18224 comm="syz.5.10172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1497.244542][   T29] audit: type=1326 audit(2000000104.858:111791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18224 comm="syz.5.10172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1497.268746][   T29] audit: type=1326 audit(2000000104.858:111792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18224 comm="syz.5.10172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1497.292744][   T29] audit: type=1326 audit(2000000104.858:111793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18224 comm="syz.5.10172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1497.316824][   T29] audit: type=1326 audit(2000000104.858:111794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18224 comm="syz.5.10172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f17a791e929 code=0x7ffc0000
[ 1497.441861][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1497.500163][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1497.536644][T18267] loop1: detected capacity change from 0 to 512
[ 1497.545834][T18267] /dev/loop1: Can't open blockdev
[ 1497.551688][T18273] loop5: detected capacity change from 0 to 128
[ 1497.565692][T18273] FAT-fs (loop5): Directory bread(block 162) failed
[ 1497.578815][T18273] FAT-fs (loop5): Directory bread(block 163) failed
[ 1497.588130][T18273] FAT-fs (loop5): Directory bread(block 164) failed
[ 1497.594829][T18273] FAT-fs (loop5): Directory bread(block 165) failed
[ 1497.602443][T18273] FAT-fs (loop5): Directory bread(block 166) failed
[ 1497.609542][T18273] FAT-fs (loop5): Directory bread(block 167) failed
[ 1497.616869][T18273] FAT-fs (loop5): Directory bread(block 168) failed
[ 1497.623583][T18273] FAT-fs (loop5): Directory bread(block 169) failed
[ 1497.636355][T18273] FAT-fs (loop5): Directory bread(block 162) failed
[ 1497.643250][T18273] FAT-fs (loop5): Directory bread(block 163) failed
[ 1497.650655][T18273] syz.5.10176: attempt to access beyond end of device
[ 1497.650655][T18273] loop5: rw=3, sector=226, nr_sectors = 6 limit=128
[ 1497.683991][T18273] syz.5.10176: attempt to access beyond end of device
[ 1497.683991][T18273] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128
[ 1497.932468][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10184'.
[ 1497.938311][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10173'.
[ 1497.941734][T18298] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10184'.
[ 1498.008725][T18298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10184'.
[ 1498.031519][T18298] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10184'.
[ 1498.116050][T18304] loop2: detected capacity change from 0 to 2048
[ 1498.162437][T18304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1498.288561][T18311] random: crng reseeded on system resumption
[ 1498.342974][T18305] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1498.724259][T18329] loop5: detected capacity change from 0 to 512
[ 1498.743275][T18329] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.10192: iget: bad i_size value: 38620345925642
[ 1498.771395][T18329] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.10192: couldn't read orphan inode 15 (err -117)
[ 1498.797969][T18329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1498.830384][T18329] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10192: bg 0: block 5: invalid block bitmap
[ 1498.849570][ T4897] usb usb12-port1: unable to enumerate USB device
[ 1498.914284][T18336] blktrace: Concurrent blktraces are not allowed on loop3
[ 1498.923124][T18329] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1498.935660][T18329] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1498.935660][T18329] 
[ 1498.945767][T18329] EXT4-fs (loop5): Total free blocks count 0
[ 1498.947448][T18341] blktrace: Concurrent blktraces are not allowed on loop1
[ 1498.952068][T18329] EXT4-fs (loop5): Free/Dirty block details
[ 1498.965226][T18329] EXT4-fs (loop5): free_blocks=0
[ 1498.970424][T18329] EXT4-fs (loop5): dirty_blocks=16
[ 1498.975693][T18329] EXT4-fs (loop5): Block reservation details
[ 1498.981794][T18329] EXT4-fs (loop5): i_reserved_data_blocks=16
[ 1499.149742][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1499.222933][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1499.344142][T18360] loop2: detected capacity change from 0 to 164
[ 1499.384128][T18360] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 1499.659735][T18369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10198'.
[ 1499.669087][T18369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10198'.
[ 1499.873067][T18374] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10199'.
[ 1499.873953][T18372] blktrace: Concurrent blktraces are not allowed on loop3
[ 1500.210671][T18383] loop1: detected capacity change from 0 to 1024
[ 1500.258863][T18383] /dev/loop1: Can't open blockdev
[ 1500.586436][T18392] loop2: detected capacity change from 0 to 1024
[ 1500.695705][T18392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1500.803911][T18392] SET target dimension over the limit!
[ 1500.920562][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1501.133414][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10211'.
[ 1501.775923][T18436] netlink: 332 bytes leftover after parsing attributes in process `syz.2.10216'.
[ 1501.812565][T18436] netlink: 'syz.2.10216': attribute type 9 has an invalid length.
[ 1501.813060][   T29] kauditd_printk_skb: 68 callbacks suppressed
[ 1501.813075][   T29] audit: type=1326 audit(2000000109.292:111863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1501.850604][   T29] audit: type=1326 audit(2000000109.292:111864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1501.886338][T18438] netlink: 'syz.1.10226': attribute type 1 has an invalid length.
[ 1502.085857][   T29] audit: type=1326 audit(2000000109.357:111865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.2.10216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1502.109909][   T29] audit: type=1326 audit(2000000109.357:111866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.2.10216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1502.134072][   T29] audit: type=1326 audit(2000000109.357:111867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.2.10216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1502.158223][   T29] audit: type=1326 audit(2000000109.366:111868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1502.182528][   T29] audit: type=1326 audit(2000000109.366:111869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1502.206405][   T29] audit: type=1326 audit(2000000109.366:111870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7828e929 code=0x7ffc0000
[ 1502.230233][   T29] audit: type=1326 audit(2000000109.366:111871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e7828d290 code=0x7ffc0000
[ 1502.254103][   T29] audit: type=1326 audit(2000000109.366:111872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.1.10226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2e78290157 code=0x7ffc0000
[ 1502.942167][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1502.949762][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1502.957392][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1502.997464][T18472] lo speed is unknown, defaulting to 1000
[ 1503.003243][T18475] blktrace: Concurrent blktraces are not allowed on loop5
[ 1503.026141][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.033650][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.041270][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.048720][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.056121][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.063583][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.071485][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.078936][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.086655][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.094233][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.101750][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.109224][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.116774][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.124374][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.131862][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.139320][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.146752][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.154254][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.161753][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.169247][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.176777][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.184283][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.191843][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.199303][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.206767][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.214251][T16842] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0
[ 1503.263500][T18472] lo speed is unknown, defaulting to 1000
[ 1503.301044][T18472] lo speed is unknown, defaulting to 1000
[ 1503.307315][T18472] lo speed is unknown, defaulting to 1000
[ 1503.393527][T16842] hid-generic 0000:0000:0000.0132: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1503.467598][T18524] __nla_validate_parse: 5 callbacks suppressed
[ 1503.467619][T18524] netlink: 332 bytes leftover after parsing attributes in process `syz.5.10231'.
[ 1503.483371][T18524] netlink: 'syz.5.10231': attribute type 9 has an invalid length.
[ 1503.491280][T18524] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10231'.
[ 1503.500729][T18524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10231'.
[ 1503.519942][T18524] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10231'.
[ 1503.532941][T18526] ip6gre1: entered promiscuous mode
[ 1503.538239][T18526] ip6gre1: entered allmulticast mode
[ 1503.873767][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1503.898352][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1504.471228][T18550] bridge0: port 1(
30ªX¹¦D) entered blocking state
[ 1504.477880][T18550] bridge0: port 1(
30ªX¹¦D) entered disabled state
[ 1504.501350][T18550] 0ªX¹¦D: entered allmulticast mode
[ 1504.507165][T18550] 0ªX¹¦D: entered promiscuous mode
[ 1504.942881][T18573] lo speed is unknown, defaulting to 1000
[ 1505.056121][T18573] lo speed is unknown, defaulting to 1000
[ 1505.120884][T18573] lo speed is unknown, defaulting to 1000
[ 1505.127293][T18573] lo speed is unknown, defaulting to 1000
[ 1505.321072][T18573] loop2: detected capacity change from 0 to 512
[ 1505.328143][T18573] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1505.334814][T18573] EXT4-fs: Ignoring removed bh option
[ 1505.356941][T18573] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1505.372556][T18573] EXT4-fs (loop2): 1 truncate cleaned up
[ 1505.379057][T18573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1505.840702][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1505.909113][T18606] loop2: detected capacity change from 0 to 1024
[ 1506.013193][T18606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1506.026454][T18606] ext4 filesystem being mounted at /2014/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1506.075456][T18606] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.10246: lblock 1 mapped to illegal pblock 1 (length 15)
[ 1506.126234][T18606] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.10246: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 1506.658766][T18629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1506.683225][T18629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1506.800568][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1506.968492][T18638] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1507.452933][T18649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10258'.
[ 1507.572172][T18652] loop5: detected capacity change from 0 to 512
[ 1507.616142][T18653] lo speed is unknown, defaulting to 1000
[ 1507.727314][T18653] lo speed is unknown, defaulting to 1000
[ 1507.791531][T18653] lo speed is unknown, defaulting to 1000
[ 1507.798297][T18653] lo speed is unknown, defaulting to 1000
[ 1507.962741][T18653] loop2: detected capacity change from 0 to 512
[ 1507.969839][T18653] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1507.976477][T18653] EXT4-fs: Ignoring removed bh option
[ 1507.989036][T18653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1508.033359][T18653] EXT4-fs (loop2): 1 truncate cleaned up
[ 1508.040110][T18653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1508.427700][T18652] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.10259: iget: bad i_size value: 38620345925642
[ 1508.431634][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1508.526208][T18685] lo speed is unknown, defaulting to 1000
[ 1508.641763][T18685] lo speed is unknown, defaulting to 1000
[ 1508.704362][T18685] lo speed is unknown, defaulting to 1000
[ 1508.710775][T18685] lo speed is unknown, defaulting to 1000
[ 1509.369009][T18652] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.10259: couldn't read orphan inode 15 (err -117)
[ 1509.381758][T18652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1509.444684][T18713] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1509.452835][T18652] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10259: bg 0: block 5: invalid block bitmap
[ 1509.486368][   T29] kauditd_printk_skb: 266 callbacks suppressed
[ 1509.486404][   T29] audit: type=1326 audit(2000000116.476:112139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.516804][   T29] audit: type=1326 audit(2000000116.476:112140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.541487][   T29] audit: type=1326 audit(2000000116.476:112141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.565620][   T29] audit: type=1326 audit(2000000116.476:112142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.589708][   T29] audit: type=1326 audit(2000000116.476:112143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.614121][   T29] audit: type=1326 audit(2000000116.476:112144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.638263][   T29] audit: type=1326 audit(2000000116.476:112145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.662306][   T29] audit: type=1326 audit(2000000116.476:112146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.686361][   T29] audit: type=1326 audit(2000000116.476:112147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.687956][T18652] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1509.710300][   T29] audit: type=1326 audit(2000000116.476:112148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.2.10261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb26e929 code=0x7ffc0000
[ 1509.722573][T18652] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1509.722573][T18652] 
[ 1509.722645][T18652] EXT4-fs (loop5): Total free blocks count 0
[ 1509.722660][T18652] EXT4-fs (loop5): Free/Dirty block details
[ 1509.722673][T18652] EXT4-fs (loop5): free_blocks=0
[ 1509.722735][T18652] EXT4-fs (loop5): dirty_blocks=16
[ 1509.778686][T18652] EXT4-fs (loop5): Block reservation details
[ 1509.784715][T18652] EXT4-fs (loop5): i_reserved_data_blocks=16
[ 1509.968044][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1510.117883][T18747] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1510.272961][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10279'.
[ 1510.358260][T18775] dummy0: mtu less than device minimum
[ 1510.384224][T18777] netlink: 172 bytes leftover after parsing attributes in process `syz.5.10286'.
[ 1510.401253][T18780] xt_hashlimit: max too large, truncated to 1048576
[ 1510.542001][T18796] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1510.633484][T18814] loop2: detected capacity change from 0 to 512
[ 1510.658094][T18814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1510.708608][T18814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1510.721484][T18814] ext4 filesystem being mounted at /2030/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1510.762543][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1510.778058][T18824] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1510.992137][T18844] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.10314'.
[ 1511.012743][T18844] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.10314'.
[ 1511.188331][T18865] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1511.395585][T18884] loop5: detected capacity change from 0 to 1024
[ 1511.412218][T18884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1511.504986][T18884] SET target dimension over the limit!
[ 1511.524116][T18877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.576659][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1511.615879][T18877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1511.886945][T18913] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1511.902410][T18917] loop2: detected capacity change from 0 to 512
[ 1511.922767][T18917] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.10340: iget: bad i_size value: 38620345925642
[ 1511.936087][T18917] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.10340: couldn't read orphan inode 15 (err -117)
[ 1511.949823][T18917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1511.964930][T18917] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.10340: bg 0: block 5: invalid block bitmap
[ 1512.000155][T18917] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1512.012662][T18917] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1512.012662][T18917] 
[ 1512.022533][T18917] EXT4-fs (loop2): Total free blocks count 0
[ 1512.028710][T18917] EXT4-fs (loop2): Free/Dirty block details
[ 1512.034621][T18917] EXT4-fs (loop2): free_blocks=0
[ 1512.039768][T18917] EXT4-fs (loop2): dirty_blocks=16
[ 1512.044910][T18917] EXT4-fs (loop2): Block reservation details
[ 1512.051021][T18917] EXT4-fs (loop2): i_reserved_data_blocks=16
[ 1512.223065][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1512.452853][T18960] loop2: detected capacity change from 0 to 512
[ 1512.499031][T18960] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.10355: iget: bad i_size value: 38620345925642
[ 1512.571991][T18960] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.10355: couldn't read orphan inode 15 (err -117)
[ 1512.617370][T18960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1512.682775][T18960] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.10355: bg 0: block 5: invalid block bitmap
[ 1512.706490][T18960] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1512.718918][T18960] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1512.718918][T18960] 
[ 1512.728833][T18960] EXT4-fs (loop2): Total free blocks count 0
[ 1512.735351][T18960] EXT4-fs (loop2): Free/Dirty block details
[ 1512.741377][T18960] EXT4-fs (loop2): free_blocks=0
[ 1512.746384][T18960] EXT4-fs (loop2): dirty_blocks=16
[ 1512.751560][T18960] EXT4-fs (loop2): Block reservation details
[ 1512.757639][T18960] EXT4-fs (loop2): i_reserved_data_blocks=16
[ 1512.876308][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1512.939944][T18982] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10360'.
[ 1512.961287][T18981] loop2: detected capacity change from 0 to 512
[ 1512.989126][T18981] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.10358: iget: bad i_size value: 38620345925642
[ 1513.012993][T18981] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.10358: couldn't read orphan inode 15 (err -117)
[ 1513.043495][T18981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1513.067546][T18981] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.10358: bg 0: block 5: invalid block bitmap
[ 1513.107911][T18981] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[ 1513.120481][T18981] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1513.120481][T18981] 
[ 1513.130496][T18981] EXT4-fs (loop2): Total free blocks count 0
[ 1513.136539][T18981] EXT4-fs (loop2): Free/Dirty block details
[ 1513.142725][T18981] EXT4-fs (loop2): free_blocks=0
[ 1513.147685][T18981] EXT4-fs (loop2): dirty_blocks=16
[ 1513.153003][T18981] EXT4-fs (loop2): Block reservation details
[ 1513.159174][T18981] EXT4-fs (loop2): i_reserved_data_blocks=16
[ 1513.340521][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1513.623243][T19009] ==================================================================
[ 1513.631402][T19009] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode
[ 1513.639898][T19009] 
[ 1513.642239][T19009] read-write to 0xffff8881075be008 of 4 bytes by task 11794 on cpu 1:
[ 1513.650508][T19009]  __writeback_single_inode+0x1e3/0x7c0
[ 1513.656091][T19009]  writeback_sb_inodes+0x480/0xa20
[ 1513.661251][T19009]  wb_writeback+0x252/0x5c0
[ 1513.665804][T19009]  wb_workfn+0x194/0x910
[ 1513.670103][T19009]  process_scheduled_works+0x4cb/0x9d0
[ 1513.675609][T19009]  worker_thread+0x582/0x770
[ 1513.680239][T19009]  kthread+0x486/0x510
[ 1513.684414][T19009]  ret_from_fork+0xda/0x150
[ 1513.689144][T19009]  ret_from_fork_asm+0x1a/0x30
[ 1513.693941][T19009] 
[ 1513.696290][T19009] read to 0xffff8881075be008 of 4 bytes by task 19009 on cpu 0:
[ 1513.703943][T19009]  __mark_inode_dirty+0x18e/0x760
[ 1513.709014][T19009]  file_update_time+0x288/0x2b0
[ 1513.713915][T19009]  ext4_page_mkwrite+0x18b/0xba0
[ 1513.718902][T19009]  do_wp_page+0xe5a/0x2400
[ 1513.723349][T19009]  handle_mm_fault+0x77d/0x2be0
[ 1513.728583][T19009]  do_user_addr_fault+0x636/0x1090
[ 1513.733754][T19009]  exc_page_fault+0x62/0xa0
[ 1513.738308][T19009]  asm_exc_page_fault+0x26/0x30
[ 1513.743192][T19009] 
[ 1513.745526][T19009] value changed: 0x0001002a -> 0x00000002
[ 1513.751347][T19009] 
[ 1513.753688][T19009] Reported by Kernel Concurrency Sanitizer on:
[ 1513.759862][T19009] CPU: 0 UID: 0 PID: 19009 Comm: syz.1.10368 Tainted: G        W           6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[ 1513.774273][T19009] Tainted: [W]=WARN
[ 1513.778099][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1513.788180][T19009] ==================================================================